last executing test programs: 13.580355838s ago: executing program 1: unshare(0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket(0x1e, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, r0, 0x8, &(0x7f0000000000)={0x5, 0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x35, 0x0, 0x0, 0x7}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a500000023"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(r4, 0x400) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 12.338134407s ago: executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) truncate(0x0, 0x8000000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x31}}) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x178, 0x0, 0x240, 0x178, 0x318, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x5e02, 0xb0, 0xd8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x6000}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001"], 0x50}}, 0x0) 11.313994241s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x336b, &(0x7f00000000c0)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11.075368255s ago: executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000000002'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(0x0, 0x8000000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x31}}) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x178, 0x0, 0x240, 0x178, 0x318, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x5e02, 0xb0, 0xd8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x6000}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.700057019s ago: executing program 4: r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESDEC=r0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x3871000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/kcm\x00') lseek(r1, 0x9, 0x0) pread64(r1, &(0x7f0000000240)=""/204, 0xcc, 0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xa, 0x3, 0x3a) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000380)={[{@noflushoncommit}, {@treelog}, {@user_subvol_rm}, {@treelog}, {@max_inline={'max_inline', 0x3d, [0x36, 0x67, 0x39, 0x38, 0x78, 0x38, 0x2d]}}, {@max_inline}, {@noflushoncommit}, {@ref_verify}, {@nossd}]}, 0xfe, 0x55c6, &(0x7f000000d000)="$eJzs3X9sVeX9B/BzbymU+qWtkW+HGiqgzkDmLIMtMZqsCGxsVXJnmcI09IfDuDG2DsHRaaTOZSyKsa6LiFIlDv5gc1o3ynAzWdGVzo1fTpewkW26QEaDmDrmnEskS++953LvubS9MGeJvl6kPee5n/M89zkn54/7vvScEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAQBH88fs+0ux6sHb/tptqHLrrh/DWPdi0+fumdWyo3PbZtzL72F796tHJly5El8297ONH4xLq+ro4giCX7xdL966+ad+3NdfXXlIQDNnwutayoGOwtU11fSTVG57w40C/3pzEIguLIAEXp5dz0SjxngMzq8vwBh3TjxO6WKePmNmxd0bnhhaVXb87fdQaUjPQERkr6vDp44lyqSf6OR7bItLNOvVjOKZrqHz3h3pOdAABOSXUiuch8HE1/xM20W6P1SLsm0m6LtMNPCG3ZjdORGnf0YPOcFK2P0DxrUlFhzKDzjNTTxz/TTkT7R9qRqHEK88zdNB1pSgabZ3OkPlLzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiTXHLzjLq9ex5/7Sstv/3d4299642PH1nZcEd/V91laxc93b79e387Wrmy5ciS+bc9nGh8Yl1fV0cQVCT7xVLdY89XxuMz+mu3PvVAT3X9hxasLkqPGy5HZW0c7A9XLi8PgqasysFw2L6yIEjkFpLNYH1+4UvJlc+EBQAAAN5Pzk3+jmfaqThYnNOOJdNkLPkvlAqLN07sbpkybm7D1hWdG15YevXm0x8vMch4NScdL9OuOPETywrGYfyNjneiHm66PG+coUVHjOb5s4/1TW2qvaXk2t2XLJg+q27zlcFPph1uX7bwofGvjFu8r606L/9XDJ3/wyMn/wMAAPDfkP+j4wxtuPzfVF0+8eCU7xY9dVPl8cPzHvl5R+9Lz8YfK+7veu7V0WPv+uWqvPw/Kect8/J/OOMw/8eDU8r/8eH2BwAAAM4E/+v8X5M3ztCGy/+/2L/p8/9e8Y3Jh6f/a/vLz/3+8i2Ty+a9WTr9lneemf96/a7WP+Xl/+rC8v+o7GmHL+4KJ7y0PAiqCz+oAAAAQI7w/91PfLUQ5vXUNwfRvH7VfaXP7np73a3x85r/cc6ivplVX9y96uvrN8b613es3b5szvK8/F9TWP4vfm92FwAAACjAb7bdcX/Vlxdv2bzn0Ozt9yY2jb5izht7ftpxXe9rxxJFL93em5f/E4Xl/zEjszsAAADASewYO+HFQ08e+tqs3WvG713ZOvvpqftWLXjkn7P+fs2rfz6+8dKyvPzfUFj+L00v01c+pDrtDP8Kob08CEoGVppThd6g7ZOZAgAAAPAuCXN6Y+Panp3rRs188/zDP1y9fNmv9l757fs2VN1+4NeVd194bH/PrXn5v3no+/+HdzoIr//Puf9f3vX/WYXUDRWvcGMAAAAAPojyr+cPH3aXenLBYM/fL/T6/4+ee2BMe9PFFZPiW6tmPvP/vdetqXprYftln9h259sfjpX99VN5+b+1sPxflL18N5//BwAAAKfhVJ7/V3QGPP9vUd44Qxvu/v+9Y5+/YPVnH/hBzTdLd1z4zv1N32k7OO2iTVPP+UjRxV2zZ/zh+3n5v62w/B8uz8reve7w+NxdHgQTBlbSdxPcEk53aaTQWZxVSB34SI+6sEe60Dkmq5DUHOnxsfIgmDyw0hopnB0W2iKF/rJ0YWOksDcspM+HTOHJSKE7PNMeLEtPN1r4WVhIX2DRGV5BcVbmkohIj2OD9RgonLTHgcybAwAAfKCE4TmdZYtzm0E0ynbGhtugdLgN4sNtUDTcBqMiG0Q3HOz1oCG3EL7+4zldS16/4dHanuvrj543a8/ie1r/r3thz84v/Kj7gr9c//KCT+fl/42F5f/wUIxOLQa7/j8Ir/9PP9cwc/1/Q1ioiBQ6w0IieseARPgeqbB7b/geFQOFHUFv0D8hUwAAAID3tfB7gaIRngcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/Yu/c4qao7QeCnm37QTdN0xIAxJqBGRHdpmiYkiDgSibsmcUmTkB3HDKERGu3QBhRwxZgVH5msEl2MGhMjO/hx1MRhFR9EnagQHTHJqCQ+Z8XnoBNZdQk6ahwny366b52i6t4uuxBQcL/fP7pO1e88bz26zr23zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/w8XLruj6ZXB/+sbv/zOhpe+84npv5l+xNa9/mJTwxvDznx062FDG65/dciixS93TDntiraZKy/ftHp5CG095SqS4hX3DqmsHPuHL91648X3tcwYOu2smly9uXgY0P2nMnfnvNjqCwNDuK0ihKp0YFRDEqjO3W+I9e3XEMJHwrZAvkRHfVIi3XC4ry6EFWFbIF/VHXUhNBQEpj18z5oLuxOX1oVwUAihNt3G07VJG3XpwIiaJFCfDsyrSgJvbU3kA7dXJgHYYfHNkH/Rr2orztDUe7kSr7/qndaxD1Z6eP1ioql0vlc/t4s7VaAm/UDbDj1tmerYJTJvj7XebXvAuy2znZd52gq/SOW+oWzdFqoNlbM75sxc1LUwPlIZmpv7lappFz3PG7acOWt70rvL67B/iccz/6ybdsrr8O76KY0Xvjb58NUn/PGUgxaun77d/U15smCTFqZ3tdqQe819EM/j9vwLzXwATPJ5shu9/UrJPMXDfekKIXz13z5a8fi8Z/fd/PYLx02+6envXTZj8eXTJj8x5Bfj/+GKvW6bcVFm/t/07vP/+HKOt5VFuWOr7zQmc/P4SENMbG5M5uYAAACwx9gT9pp+duwLz550721Lnln55apvT/jV8fs0Vp3x/a6v7r164scvuKTzob0y8//h5R3/j4f8GwpHuzaEST2JcweFsE/P40ngZ7E7JwwKYf+eVFtx4HOpwNoQPtaTOCRfVapE/1hieCrw+8ZcYFIqsC4G2lKBa2JgWSpwXgysSgVmxcDaVOCoGAidxeM4tDE3jrIDdTHQnmzEVfEshNcbY2upbbUhXxUAAMBOkpsdVhffLTjXYUczxOnlqrq+MsQzsEtmqE3VkJ7B5qdVJWuo6quGyr5qyI97ybsPP1NzRV81Z07DqCjO8M6wb1UOmnzAj269ZtS1rc9M/vYb47/66T+98sbaQ/7xv99+5sIrD83M/1veff5f20tHKjLH/0OY2vM35q7MRbry8fa2ogwAAADADrj0weWPXH3oMf/nzufuvOUTV1xdufayr/zf5zefe8CYL4+s6P+331yVmf9PKu/8/7hPpF9B5vBA3A0xd1AILcWBpNrDs4HkqPeAXAAAAAD2BPnj8flj4Z252+QU7fR8Opu/bTvzxwP/k3rNf9GWv3riU1c8ctziEQduuvi/nfZ2xUfH/26vY9ePfujVT474+6b+2fP/28o7/7+++DbpxLrYi0sGxXVSksD9sZfdgR7DY+C5I4sDufGvixtgaawqd2JCvqqlsUR7DLSkAitKlfhtvsQ+xYHck5Vv/Nz8ODpzJQoCAAAA8L6LuwPicfl4/v/tUw/9xCFDnh33zCfvWPzipOV/flL9Dw+8fu+XBnVNGfeZSUd8/vHM/L99+87/75kHZ07v7xoQwuiqEPqlfxjwQH2yMGAuUB0qcqG76pO6+qWrOrs+hIndA0tX9Xxu/f+q9BqDD9clVcXAPgf8dMuI7sTVdSGMLgw8/vWrxnUnFqYC+ca/VhfCsO5+phtf3T9pvDrd+OX9Q/hkQSBf1Qn9Q+hurCZd1T21uesYpKu6sTaEwQWBfFWfqQ1hcQBgDxX/lc4ufHDB4jPmzuzq6jh1FybiPvy6MKezq6N51ryu2bUl+jQ71eeiZYzOzo6p3CvfPJVbomj6sJtGlpPO/06wpbCt3H78zImDufvxu1B1zzhbq4vujk0PeeSB2SZCwTepUkOu3MVDri+sZNuTmKk/5q8JA0L/RQs6Tm0+febChaeOSf6Wm701+RsPMyXbakx6W9X31rcyXh4lV8tKea/b6uDCSkYvPHn+6AWLzxjVefLMEztO7PhW6/gxra3jPjt+XOvo7lG1JH/7GOrBvVWdGurWq8oc104c6r5VBZW8H58aEhISe1pi5rKKcybN+PVd39hv3cmnH7/f3+03e9Txf3nRb+Yf13zE1F9d9RfrM/P/+e8+/4+fOvGTP7c+Q6nj/03xMH/y+LbD/O0xsKLc4/9NpY7m508MGJ4KLImBJQ7zAwAA8OEQd0fGvZlxr/SVDf9429GzZx3x1i//fNplfzN+wkmnbzyo6XuXHbvsP2x8fdmaz7+Wmf8vKe/3/ztp/f/80vVfLLXM/yGxREup9f/Ty/zn1/9fUmr9//Qy//n1/1d8AOv/L8oHUpvkdev/AwAAHwbv3/r/fS7vn75AQCZDn8v7py8QkMnQ5zL+5V4gYLvX/5/X9Wf1Qy6aN+HIUfN/fP+aA5YNvvETT03+9YHLDxt1x+rr3xxzQ2b+v6y8+b+F+wEAAGD3ce8v+3/ze2+MuOvR+986uuKC326+9qt/2XHoEX8Y3Hri1C/Uff/af83M/1eUN/9//9f/C6XO/x9eKtBWamFA6/8BAACwu1vS+8Ol1v+7bvBzw9cuHHXNgz9/5fpn238xe+KL/27ZDz49c0TLdes2/KZp1sbM/H9VefP/eNpFZVHu2Jt3GpM17UJ6TbvNjfmfDAAAAMCeoTI0N1eXmbdoZdTPvfc2N+SWAn23dKHH7hyyZlHlvZdW1G7+wfkzjmg+69jT5h393Y3fr3/kJ/XTm2tPzcz/15Y3/y/6Xcbd9VMaL3xt8uHvrD7hj6cctHD99G3H/wEAAIBdp9z9EgAAAAAAAAAAAAAAwAfv0fblh7095gsvz95/zL997dinf7D041+//6+v+NNpPz/qzv07t46Ylvn9f5jaU67U7//jdf/i7wv2LsodW+17/b/c/WlfumFxz5KFDzSGcGBhYO45cz8SctfmP7gwsGb6IUO7E+ekS9z5zFEvdidmpAPHjNrrze7ExFSgPS6S+LF0IF5V8c2BqUBcXvGRdCBuj1XpQE0ucP7AZBwV6W21qSHZVhXpbfVkQwiDCgL5bXVbQ9JGRXqAl6YC+QGekg7EAU7JBSrTvbphQNKrGGiIRf96QNIrAAB2W/FbYHWY09nV0RK/wsfbfauKb6OiJcvOzlZbUWbzT+WWJps+7KaR5aT7pb+LbrvWeHWo7R7CmMzX1cIsFT2j3Dm19LHp9i4x5L5We6ssUS5tezddTekR1SUjap41r2t2dZ8DH9t3ltaqPrOMyUx2CrNU9mzSMmopoy9ljKjMbVNGl+P9ytDc3C+Va0IMNoUifb0iyv29fuE6f6VeBYV5/qbuigv6De331r9O/O699wyq7jppasd3933wnwaPmf3jH97TfvnvM/P/pqL5f1zELzP/ry0c15u5iwEsiVfWO3xQCO1ljggAAAA+/P7nWStvPm7euk1z1lY98bvfza388nHVW8+89cwzvvvkXUuPOf/fX7ej8VUVj2457uUtp//Vyz/59JX3nf7sUbNOv3XKhiM2dtRe8+0/W3nSsMz8f3h5x//jHqzcoeBkb8faeP3/cweF0HNp/aYk8LM43BMGhbB/T6otlkguqP/FWKIlCfws7jA5JJZobyuuqn8MrEoFft+YC6xNBdbFQG4vxU9DblfOxY0hjOtJTS0uMT+WaEoFvhwDw1OB5hhoSQUGxsCkVOCVgblAWyrwDzEQOou31S0Dc9sKAABge+TmWdXFd0N6nreqqq8MFX1lqO8rQ2VfGWr7ylBqFPH+zTFDderklYqCTNXpWutStWQyxIvhb3e/MhnCb4tzpgtmmo7nH+TPN6gozjDhhze3H/bFBT/e8r0fPXT0Z847etklr13whQFDL3nif3eeNWDglvrM/L+lvPl/ffFt0vq6OP/fdv2/JHB/7N4l8dTx4THw3JHFgdyOgXVxsrs0X1VbrkRu0r40lpgUA8NTgfkxMCkVaJ+aC6wYWhzIzbTzjZ+bb7wzV6IgAAAAAO+7uIMg7qaJ8//VE8Lr+x39Vuu+lwyeP+Gh+8/+/My6vWvr/mni+uUTL6i99+D+mfn/pPLm/7G9AYWNnRd788LAEG6r2NabfGBUQxKI+zEa4s/j92sI4SMFOzjyJTrqkxI1qYbDfXXJL9Rr0lXdUZesMRDvT3v4njUXdicurQvhoIK9L/k2nq5N2qhLB0bUJIH6dGBeVRKIe37ygdsrkwDssPxewfiCyp3qktfUe7kSr78PyzVB08PL7APtJV9vv7naVWrTD+T2qeZt39OWqY5dIvP2WOvdtie+25q82wq/SOW+oWzdFqoNlbM75sxc1LUwPlL4S9aMXfQ8F/5KtZz0TngdLnnvve1bbboDLamPj5bey/X+OqyI1d1dP6XxwtcmH776hD+ectDC9dPL7kYJ8YfCh98w/9AnCzbvrlYbcq+5Pe7zpM3nyZ74b2C4py2EsPLcOY88/M9vPVW1sfW/fGb8yhtfeXDlTw67e86oj206/1ObX33jmMz8v628+X9V6rbH23FjLhgUwsiCjftA3PyTByWfgwWB5FNycDaQHHLf2FjykxMAAAB2tvzujvz+gs7cbXJCeHqenM3ftp354/6KSb3mL7ffg8f9/XeOvPSlr31l474XPbD80Q3/6ZXnPz/jyLu3PLZq9Uutx370scz8v/3d5//9U910/N/xf3YRx/97tbvviu6ffmDJDu2KzlTHLuH4f69293eb4/+9cvzf8f/eOP7fB8f/e7W7P22Zb0nzfekKIbQPuvqmX9TPHDng4jO/MWv9zx97vWXC0w1nfeGW/3HU0nD52Wv+lJn/zy9v/m/9v94X7cuv/9deav2/+aXW/1ti/T8AAGCXKrHQXHqel1m9L5MhvXpfJkOfCwT2ucSg9f+2e/2/+uPPOP75xlf3v3zyTf/5lpnnPXX8cU8c1K/7qbl29GUjn/3Upsz8f0l58//4chhQ2Pqesv7f8KklqloWA/MtDAgAAMDuqNQOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5Yq+5Z+vGtSw887NonPnrtUf+yYt2cA3516Nax405oHrl0cMUlf/vPrw5ZtPjljimnXdE2c+Xlm1YvD6Gzp1xFUrzi3iGVlWP/8KVbb7z4vpYZQ6edVZurtzp3+/Gi3LHVdxpDWFHwSENMbG7svrMtMO1LNyyu6k480BjCgYWBuefM/Uh34prGEA4uDKyZfsjQ7sQ56RJ3PnPUi92JGenAMaP2erM7MTEXqEh398qBSXcr0t29cGAIgwoC+e5+c2BxVfk2/mMuUJlu47qGpI0YaIhFf9SQtBEDXbFEZ/8QRleF0C9d1a9rk6r6pav6u9qkqn7pqv5rbQgTQwhV6aqeqUmqqkqPfH1NUlUM7HPAT7eM6E6sqAlhdGHg8a9fNa47cUoqkG/8KzUhDOt+yaQbv7k6abw63fil1SF8MoRQky7xL1VJiZp0ieerQhhcEMg3flJVCIsDHwrxw2d24YMLFp8xd2ZXV8epuzBRk2urLszp7OponjWva3Ztqk+lVBSkt5793sf+1JYzZ3XfTh9208hy0lW5ctU9XW6tLro7dnfvfexXfWEl256PTP0xf00YEPovWtBxavPpMxcuPHVM8rfc7K3J3365aLKtxuwp2+rgwkpGLzx5/ugFi88Y1XnyzBM7Tuz4Vuv4Ma2t4z47flzr6O5RtSR/d8ZQr3r/h7pvVUEl78cHgISExJ6WqCz6dGvZ3T/IM1/0t3W0OtT2fEBnphWFWSp6RrkzBv259zji9/I9pc8RjclMHDJZWvvOMjYzmdiWpS7J0vO9LjM5LKypsmeTxvuVobm5X6nt0FR8t3DzvroDm3dDbtOVmwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUgAAAP//q3bJ7Q==") socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000), 0x4) 9.215422143s ago: executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) truncate(0x0, 0x8000000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x31}}) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x178, 0x0, 0x240, 0x178, 0x318, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x5e02, 0xb0, 0xd8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x6000}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001"], 0x50}}, 0x0) 8.759667929s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) dup(r1) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000040)={[{@errors_ro_remount}, {@noattrs}, {@balloc_notest4}, {@usrquota, 0x0}, {@tails_off, 0x3d}, {@balloc_noborder}, {@usrquota}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}[)/*'}}, {@appraise_type}, {@permit_directio}, {@euid_lt}]}, 0x1, 0x110e, &(0x7f0000002440)="$eJzs2TFrFEEUB/D/7J2X61ZWsFwEGwsJCQf2FhGutbaTdKmSShDyZfw4kso+pLKyCNivZJ09QQKiWZXA7wczvHm7szNTzr4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6PPYP2qS7nviwdiXpO8vtldJ+unVhx8XTUpeH2/Pjk43r86SLJLc5JqUpk5Ld/h03W26TXe4l6zq3JOT49MalvS5vB6j5ZwnKXU/t1rPuhQAAADcK8OdtT9/8rcu2ndfHwAAAPiVWX8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyBof0Rd8saNElK0vcX26sk/f/aHAAAADCLkiZv2tvyyYvHu+EqeZ5PbRnzU/takiYH+TDO3/un+wYAAID7ZSq6r2rhfWc3mO7bN4lnWWYYhvPp2ZMss78/husp9+Vlsnh3lIPpTl6L/OfX799e1laGxd8+GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAA7BUAAP//0F/W7A==") r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') wait4(r2, 0x0, 0x20000000, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000040000800000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000efff00850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x0) keyctl$get_security(0x11, r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r7, 0x8943, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r8, &(0x7f0000000880)=""/4096, 0x1000, 0x0) 7.407814053s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2000000080002, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0x2, 0x4) fcntl$setlease(r3, 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/220, 0x36, 0xdc, 0xa}, 0x20) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000004c0)=""/4096) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000040000000000800000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000014003f170000000000007100000000000000000000000010006141c5a488794d56ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff02000000"]}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010076010000047500000000", @ANYRES32=r4, @ANYBLOB="9a"], 0x20}}, 0x0) 7.187272019s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = io_uring_setup(0x336b, &(0x7f00000000c0)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 6.347835648s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lstat(0x0, &(0x7f0000000440)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0xe, 0x0}}], 0x300, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@ifindex, 0x8, 0x0, 0x9, &(0x7f0000000840)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@map, r3, 0x9, 0x0, r3, @link_id, r4}, 0x20) capset(&(0x7f0000000300)={0x20080522}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f00000020c0)=ANY=[@ANYBLOB="04040a00000000000054673b20"], 0xd) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$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") getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0)=0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000800)='./bus\x00', r5, &(0x7f0000000880)='./file1\x00') sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80300, 0x800}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x50}}, 0x0) 5.684597029s ago: executing program 4: socket$kcm(0x10, 0x2, 0x10) ftruncate(0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r3, &(0x7f0000000280)='+', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, &(0x7f00000000c0)=0x10000, 0x6, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) write$FUSE_POLL(r1, &(0x7f0000000100)={0x18}, 0x6) sendfile(r5, r6, 0x0, 0x1000200201005) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, r7, r7, 0xa93}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, 0x0, &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00') write$FUSE_DIRENT(r8, &(0x7f0000004080)=ANY=[@ANYBLOB], 0x30) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x70) 5.524535404s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) 5.276512179s ago: executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000000002'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(0x0, 0x8000000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x31}}) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x178, 0x0, 0x240, 0x178, 0x318, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x5e02, 0xb0, 0xd8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x6000}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.306407764s ago: executing program 3: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xe0f285}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000301000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f096766c7442400070000006766c7442402570000006766c744240600000000670f01142466b94503000066b80060eec866ba000000000f300fc770d3660fc776000f090f0fc39766b9640001c066b8b377d65f66ba000000000f300f3805ef9a0b007700", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.749055962s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b00000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="10002e"], 0x34}}, 0x0) 3.648281422s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000000)="ae0f6f45b30f009cfc2bb852000f00d8650f01c33ef30f6f2cf20f230166b95803000066b8deb5000066ba000000000f3065670f787380f30fc7b30000", 0x3d}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 3.562197115s ago: executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) syz_open_pts(r4, 0x0) 2.386876923s ago: executing program 3: unshare(0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket(0x1e, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='xprtrdma_err_vers\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, r0, 0x8, &(0x7f0000000000)={0x5, 0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35}, {0x35, 0x0, 0x0, 0x7}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a500000023"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(r5, 0x400) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x3, r4}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) 2.377654s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2000000080002, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0x2, 0x4) fcntl$setlease(r3, 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/220, 0x36, 0xdc, 0xa}, 0x20) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000004c0)=""/4096) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000040000000000800000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000014003f170000000000007100000000000000000000000010006141c5a488794d56ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff02000000"]}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001007601000004750000000000", @ANYRES32=r4, @ANYBLOB="9a"], 0x20}}, 0x0) 2.297141945s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) dup(r1) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000040)={[{@errors_ro_remount}, {@noattrs}, {@balloc_notest4}, {@usrquota, 0x0}, {@tails_off, 0x3d}, {@balloc_noborder}, {@usrquota}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}[)/*'}}, {@appraise_type}, {@permit_directio}, {@euid_lt}]}, 0x1, 0x110e, &(0x7f0000002440)="$eJzs2TFrFEEUB/D/7J2X61ZWsFwEGwsJCQf2FhGutbaTdKmSShDyZfw4kso+pLKyCNivZJ09QQKiWZXA7wczvHm7szNTzr4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6PPYP2qS7nviwdiXpO8vtldJ+unVhx8XTUpeH2/Pjk43r86SLJLc5JqUpk5Ld/h03W26TXe4l6zq3JOT49MalvS5vB6j5ZwnKXU/t1rPuhQAAADcK8OdtT9/8rcu2ndfHwAAAPiVWX8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyBof0Rd8saNElK0vcX26sk/f/aHAAAADCLkiZv2tvyyYvHu+EqeZ5PbRnzU/takiYH+TDO3/un+wYAAID7ZSq6r2rhfWc3mO7bN4lnWWYYhvPp2ZMss78/husp9+Vlsnh3lIPpTl6L/OfX799e1laGxd8+GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAA7BUAAP//0F/W7A==") r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') wait4(r2, 0x0, 0x20000000, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000040000800000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000efff00850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x0) keyctl$get_security(0x11, r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r7, 0x8943, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r8, &(0x7f0000000880)=""/4096, 0x1000, 0x0) 2.23729711s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0xc) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x7, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 1.896241228s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_adjtime(0x2, &(0x7f0000000240)={0x6, 0xfffffffffffffffa, 0x8, 0x5, 0xfffffffffffffff9, 0x3, 0x0, 0x6, 0x0, 0x8000000000000000, 0x0, 0x8000, 0x401, 0x3, 0x67b6, 0xe10000000000, 0xd3, 0x20, 0x10000, 0x100000000, 0x3f, 0x8000000000000000, 0x755, 0x0, 0x2, 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180), 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {0xd000}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x142131, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}) 1.877135923s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x336b, &(0x7f00000000c0)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.40062916s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) 1.345325165s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2000000080002, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0x2, 0x4) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/220, 0x35, 0xdc, 0xa}, 0x20) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000040000000000800000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000014003f170000000000007100000000000000000000000010006141c5a488794d56ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff02000000"]}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 1.290544784s ago: executing program 1: r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESDEC=r0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x3871000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/kcm\x00') lseek(r1, 0x9, 0x0) pread64(r1, &(0x7f0000000240)=""/204, 0xcc, 0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xa, 0x3, 0x3a) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000380)={[{@noflushoncommit}, {@treelog}, {@user_subvol_rm}, {@treelog}, {@max_inline={'max_inline', 0x3d, [0x36, 0x67, 0x39, 0x38, 0x78, 0x38, 0x2d]}}, {@max_inline}, {@noflushoncommit}, {@ref_verify}, {@nossd}]}, 0xfe, 0x55c6, &(0x7f000000d000)="$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") socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 204.146258ms ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b00000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="10002e"], 0x34}}, 0x0) 68.81191ms ago: executing program 4: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xe0f285}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000301000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f096766c7442400070000006766c7442402570000006766c744240600000000670f01142466b94503000066b80060eec866ba000000000f300fc770d3660fc776000f090f0fc39766b9640001c066b8b377d65f66ba000000000f300f3805ef9a0b007700", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 41.993253ms ago: executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) syz_open_pts(r4, 0x0) 0s ago: executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000000002'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(0x0, 0x8000000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x31}}) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x178, 0x0, 0x240, 0x178, 0x318, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x5e02, 0xb0, 0xd8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x6000}}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ed [ 1305.683583][T22888] FAT-fs (loop1): Directory bread(block 68) failed [ 1305.690587][T22888] FAT-fs (loop1): Directory bread(block 69) failed [ 1305.696668][ T45] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1305.697769][T22888] FAT-fs (loop1): Directory bread(block 70) failed [ 1305.712143][T22888] FAT-fs (loop1): Directory bread(block 71) failed [ 1305.719459][T22888] FAT-fs (loop1): Directory bread(block 72) failed [ 1305.726397][T22888] FAT-fs (loop1): Directory bread(block 73) failed [ 1305.946542][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 1305.954464][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 1305.969291][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1305.981321][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1305.996687][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.011310][ T45] usb 4-1: config 0 descriptor?? [ 1306.024225][T22886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1306.036150][ T45] hub 4-1:0.0: USB hub found [ 1306.041201][ T29] audit: type=1326 audit(1717973081.647:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22890 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe98ea7cf69 code=0x0 [ 1306.240048][ T45] hub 4-1:0.0: 2 ports detected [ 1306.448810][ T45] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1306.460680][ T45] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1306.474699][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 1306.480975][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1306.531913][ T45] usb 4-1: USB disconnect, device number 40 [ 1307.289696][T22815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1307.310055][T22815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1307.321061][T22815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1307.337517][T22815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1307.350729][T22815] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1307.362952][T22815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1307.534652][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.703667][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.840880][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.984019][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.136258][T22898] chnl_net:caif_netlink_parms(): no params data found [ 1308.158353][T22906] loop3: detected capacity change from 0 to 8192 [ 1308.194901][T22906] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1308.208680][T22906] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1308.218328][T22906] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1308.271124][T22906] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1308.287104][T22906] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1308.393244][T22898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.404045][T22898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.418088][T22898] bridge_slave_0: entered allmulticast mode [ 1308.429926][T22898] bridge_slave_0: entered promiscuous mode [ 1308.465862][T22898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.479505][T22898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.491455][T22898] bridge_slave_1: entered allmulticast mode [ 1308.503755][T22898] bridge_slave_1: entered promiscuous mode [ 1308.518655][ T35] bridge_slave_1: left allmulticast mode [ 1308.524822][ T35] bridge_slave_1: left promiscuous mode [ 1308.549534][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.586832][ T35] bridge_slave_0: left allmulticast mode [ 1308.593014][ T35] bridge_slave_0: left promiscuous mode [ 1308.625627][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.374912][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.395116][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.403883][T22815] Bluetooth: hci4: command tx timeout [ 1309.421321][ T35] bond0 (unregistering): Released all slaves [ 1309.569817][T22898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.585686][T22898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.679116][T22898] team0: Port device team_slave_0 added [ 1309.712073][T22898] team0: Port device team_slave_1 added [ 1309.789220][T22898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.796844][T22898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.825325][T22898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.872129][ T35] hsr_slave_0: left promiscuous mode [ 1309.879803][ T35] hsr_slave_1: left promiscuous mode [ 1309.888064][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.895958][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.905495][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.913430][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.949880][ T35] veth0_macvtap: left promiscuous mode [ 1309.955642][ T35] veth1_vlan: left promiscuous mode [ 1309.961310][ T35] veth0_vlan: left promiscuous mode [ 1311.486504][T22815] Bluetooth: hci4: command tx timeout [ 1311.738239][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1311.814371][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1312.632482][T22898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.640563][T22898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.669002][T22898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.765110][ T29] audit: type=1326 audit(1717973088.357:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22925 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x0 [ 1312.810976][T22898] hsr_slave_0: entered promiscuous mode [ 1312.831725][T22898] hsr_slave_1: entered promiscuous mode [ 1312.840011][T22898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1312.848686][T22898] Cannot create hsr debugfs directory [ 1313.345089][T22898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1313.355632][T22898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1313.369105][T22898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1313.382034][T22898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1313.475514][T22898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.505174][T22898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.518728][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.525880][ T5210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.549059][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.556240][T10443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.564016][T22815] Bluetooth: hci4: command tx timeout [ 1313.958664][T22898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.974211][T22937] loop3: detected capacity change from 0 to 128 [ 1313.995011][T22937] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1314.013171][T22898] veth0_vlan: entered promiscuous mode [ 1314.031176][T22937] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1314.033332][T22898] veth1_vlan: entered promiscuous mode [ 1314.073056][T22937] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1314.089540][T22898] veth0_macvtap: entered promiscuous mode [ 1314.103122][T22898] veth1_macvtap: entered promiscuous mode [ 1314.131890][T22898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.143523][T22898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.154526][T22898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.165151][T22898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.181304][T22898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.192343][T22898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.202421][T22898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.212982][T22898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.225074][T22898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.250524][T22898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.264432][T22898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.275781][T22898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.291648][T22898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.305494][T22898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.316134][T22898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.326159][T22898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.336729][T22898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.348269][T22898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.362732][T22898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.371525][T22898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.380964][T22898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.390795][T22898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.577410][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.585999][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.598980][T22940] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1314.616421][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.624857][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.430577][ T29] audit: type=1326 audit(1717973091.037:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22948 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f86a7cf69 code=0x0 [ 1315.639088][T22815] Bluetooth: hci4: command tx timeout [ 1315.934914][T22955] loop3: detected capacity change from 0 to 8192 [ 1315.962842][T22955] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1315.976244][T22955] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1315.986591][T22955] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1316.003763][T22955] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1316.018253][T22955] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1316.733093][ T29] audit: type=1326 audit(1717973092.337:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x0 [ 1317.406386][T22975] loop1: detected capacity change from 0 to 128 [ 1317.416196][T22975] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1317.435071][T22975] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1317.459045][T22975] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1317.611974][T22979] sctp: [Deprecated]: syz-executor.3 (pid 22979) Use of int in maxseg socket option. [ 1317.611974][T22979] Use struct sctp_assoc_value instead [ 1318.298565][T22815] Bluetooth: unknown link type 32 [ 1318.316171][T22982] loop1: detected capacity change from 0 to 1024 [ 1318.327203][T22815] Bluetooth: hci4: connection err: -111 [ 1318.336295][T22982] hfsplus: failed to load root directory [ 1318.824790][ T29] audit: type=1326 audit(1717973094.427:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22989 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f86a7cf69 code=0x0 [ 1319.840532][T23006] ALSA: seq fatal error: cannot create timer (-22) [ 1320.670322][ T29] audit: type=1326 audit(1717973096.277:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23013 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f86a7cf69 code=0x0 [ 1320.749630][T23017] sctp: [Deprecated]: syz-executor.3 (pid 23017) Use of int in maxseg socket option. [ 1320.749630][T23017] Use struct sctp_assoc_value instead [ 1320.886356][T23021] nfs4: Unknown parameter '017777777777777777777770xffffffffffffffff18446744073709551615' [ 1320.986703][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1321.949579][T23023] loop3: detected capacity change from 0 to 32768 [ 1321.998306][T23023] btrfs: Bad value for 'max_inline' [ 1322.099846][ T5113] Bluetooth: unknown link type 32 [ 1322.105360][ T5113] Bluetooth: hci4: connection err: -111 [ 1322.122244][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1322.136138][T23030] loop1: detected capacity change from 0 to 1024 [ 1322.165249][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1322.177833][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1322.193817][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1322.451627][T23030] hfsplus: failed to load root directory [ 1322.462077][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1322.470286][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1322.648232][ T29] audit: type=1326 audit(1717973098.227:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23019 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1322.683312][ T29] audit: type=1326 audit(1717973098.227:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23019 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1322.742612][ T29] audit: type=1326 audit(1717973098.227:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23019 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1322.851402][ T29] audit: type=1326 audit(1717973098.227:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23019 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1323.157046][ T29] audit: type=1326 audit(1717973098.227:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23019 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1323.186866][ T29] audit: type=1326 audit(1717973098.227:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23019 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1323.297078][ T29] audit: type=1326 audit(1717973098.227:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23019 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1323.320499][ T29] audit: type=1326 audit(1717973098.237:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23019 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1323.501359][T23043] ALSA: seq fatal error: cannot create timer (-22) [ 1323.520504][T23029] chnl_net:caif_netlink_parms(): no params data found [ 1323.550210][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1323.570979][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1323.581223][ T5113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1323.595908][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1323.611677][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1323.621234][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1323.874757][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1323.874776][ T29] audit: type=1326 audit(1717973099.477:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23048 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f86a7cf69 code=0x0 [ 1323.906397][T23029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.918204][T23029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.925925][T23029] bridge_slave_0: entered allmulticast mode [ 1323.935152][T23029] bridge_slave_0: entered promiscuous mode [ 1323.960470][T23029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.968665][T23029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.976975][T23029] bridge_slave_1: entered allmulticast mode [ 1323.985782][T23029] bridge_slave_1: entered promiscuous mode [ 1324.046278][T23029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.068143][T23029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.156701][T23029] team0: Port device team_slave_0 added [ 1324.182700][T23029] team0: Port device team_slave_1 added [ 1324.303619][T23029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.323916][T23029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.369273][T23029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.401898][T23029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.410168][T23029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.473237][T23029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.526749][T22815] Bluetooth: hci5: command tx timeout [ 1324.800729][T23029] hsr_slave_0: entered promiscuous mode [ 1324.816056][T23029] hsr_slave_1: entered promiscuous mode [ 1324.825475][T23029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1324.835029][T23029] Cannot create hsr debugfs directory [ 1324.910362][T23041] chnl_net:caif_netlink_parms(): no params data found [ 1325.126751][T23066] sctp: [Deprecated]: syz-executor.1 (pid 23066) Use of int in maxseg socket option. [ 1325.126751][T23066] Use struct sctp_assoc_value instead [ 1325.224966][T23041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.233254][T23041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.244825][T23041] bridge_slave_0: entered allmulticast mode [ 1325.253957][T23041] bridge_slave_0: entered promiscuous mode [ 1325.277038][T23041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.285533][T23041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.294703][T23041] bridge_slave_1: entered allmulticast mode [ 1325.303827][T23041] bridge_slave_1: entered promiscuous mode [ 1325.435285][T23029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1325.448793][T23029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.514107][T23041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.542637][T23041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.608775][T23029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1325.627300][T23029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.746863][T22815] Bluetooth: hci6: command tx timeout [ 1325.759039][T23041] team0: Port device team_slave_0 added [ 1325.840388][T23029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1325.852037][T23029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.919939][T23041] team0: Port device team_slave_1 added [ 1326.626567][T22815] Bluetooth: hci5: command tx timeout [ 1326.770460][T23029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1326.786856][T23029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.869320][T23074] loop3: detected capacity change from 0 to 8192 [ 1326.877777][T23041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.894425][T23041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.896732][T23074] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1326.940197][T23074] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1326.954411][T23041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.975535][T23074] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1327.010683][T23074] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1327.048128][T23041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.055889][T23041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.059093][T23074] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1327.100381][T23041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.308443][T23041] hsr_slave_0: entered promiscuous mode [ 1327.333713][T23041] hsr_slave_1: entered promiscuous mode [ 1327.345353][T23041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.366158][T23041] Cannot create hsr debugfs directory [ 1327.602749][T23029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1327.723668][T23029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1327.734902][T23029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1327.754437][T23029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1327.796646][T22815] Bluetooth: hci6: command tx timeout [ 1328.678665][T22815] Bluetooth: hci5: command tx timeout [ 1328.925609][T23041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.958172][T23041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.056331][T23092] ALSA: seq fatal error: cannot create timer (-22) [ 1329.211123][T23041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.243990][T23041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.365343][T23029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.383138][T23082] loop1: detected capacity change from 0 to 32768 [ 1329.469213][T23082] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1329.479803][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1329.496320][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1329.505640][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1329.520857][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1329.523166][T23041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.545648][ T29] audit: type=1326 audit(1717973105.147:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x0 [ 1329.546890][T23041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.582992][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1329.593894][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1329.720358][T23041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.731667][T23041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.734055][T23082] XFS (loop1): Ending clean mount [ 1329.765931][T23082] XFS (loop1): Quotacheck needed: Please wait. [ 1329.830185][T23029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.877915][T22815] Bluetooth: hci6: command tx timeout [ 1329.886896][T23082] XFS (loop1): Quotacheck: Done. [ 1329.902530][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.910154][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.996229][T22898] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1330.016321][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.024238][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.154023][T23029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1330.384895][T23041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1330.416888][T23041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1330.435098][T23041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1330.519436][T23041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1330.633988][ T29] audit: type=1326 audit(1717973106.237:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23115 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f86a7cf69 code=0x0 [ 1330.749812][T23099] chnl_net:caif_netlink_parms(): no params data found [ 1330.757368][T22815] Bluetooth: hci5: command tx timeout [ 1330.852715][T23029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.117565][T23099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.125957][T23111] loop3: detected capacity change from 0 to 32768 [ 1331.138140][T23111] bcachefs (/dev/loop3): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 1331.147724][T23099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.162240][T23099] bridge_slave_0: entered allmulticast mode [ 1331.170765][T23099] bridge_slave_0: entered promiscuous mode [ 1331.181063][T23099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.190888][T23099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.200826][T23099] bridge_slave_1: entered allmulticast mode [ 1331.213265][T23099] bridge_slave_1: entered promiscuous mode [ 1331.278923][T23111] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 1331.299699][T23111] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 1331.336603][T23099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.357464][T23099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.376065][T23111] bcachefs (loop3): alloc_read... done [ 1331.386227][T23111] bcachefs (loop3): stripes_read... done [ 1331.419855][T23111] bcachefs (loop3): snapshots_read... done [ 1331.451642][T23111] bcachefs (loop3): journal_replay... done [ 1331.468148][T23111] bcachefs (loop3): resume_logged_ops... done [ 1331.476104][T23111] bcachefs (loop3): going read-write [ 1331.504035][T23111] bcachefs (loop3): done starting filesystem [ 1331.540166][T23099] team0: Port device team_slave_0 added [ 1331.541060][T23139] sctp: [Deprecated]: syz-executor.1 (pid 23139) Use of int in maxseg socket option. [ 1331.541060][T23139] Use struct sctp_assoc_value instead [ 1331.581230][T23099] team0: Port device team_slave_1 added [ 1331.636932][T22815] Bluetooth: hci7: command tx timeout [ 1331.705293][T23099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.715032][T23099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.772702][T23099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.809452][T23099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.835975][T23099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.880512][T23099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.908858][T18909] bcachefs (loop3): shutting down [ 1331.914158][T18909] bcachefs (loop3): going read-only [ 1331.936729][T18909] bcachefs (loop3): finished waiting for writes to stop [ 1331.957092][T22815] Bluetooth: hci6: command tx timeout [ 1331.981396][T23029] veth0_vlan: entered promiscuous mode [ 1331.998020][T18909] bcachefs (loop3): flushing journal and stopping allocators, journal seq 15 [ 1332.051673][T18909] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 16 [ 1332.084778][T18909] bcachefs (loop3): shutdown complete, journal seq 17 [ 1332.095007][T18909] bcachefs (loop3): marking filesystem clean [ 1332.146066][T23099] hsr_slave_0: entered promiscuous mode [ 1332.161137][T18909] bcachefs (loop3): shutdown complete [ 1332.169779][T23099] hsr_slave_1: entered promiscuous mode [ 1332.196365][T23099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.237189][T23099] Cannot create hsr debugfs directory [ 1332.266163][T23041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.363377][T23029] veth1_vlan: entered promiscuous mode [ 1332.500813][T23041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.657065][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.664261][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.718525][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.725684][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.884577][T23147] loop3: detected capacity change from 0 to 256 [ 1332.919581][T23029] veth0_macvtap: entered promiscuous mode [ 1333.010989][T23099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.023316][T23099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.051275][T23029] veth1_macvtap: entered promiscuous mode [ 1333.074253][T23041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1333.176835][ T5158] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1333.228739][T23099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.267357][T23099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.358002][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.403480][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.420481][ T5158] usb 4-1: device descriptor read/64, error -71 [ 1333.426973][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.441773][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.462521][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.473236][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.483854][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.494511][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.516600][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.536554][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.559851][T23029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.688383][T23099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.702301][T23099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.715488][T23155] loop1: detected capacity change from 0 to 8192 [ 1333.722126][T22815] Bluetooth: hci7: command tx timeout [ 1333.728001][ T5158] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1333.753751][T23155] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1333.771089][T23155] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1333.781267][T23155] REISERFS warning (device loop1): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1333.794439][T23155] REISERFS warning (device loop1): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1333.807530][T23155] REISERFS warning (device loop1): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1333.828512][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.875717][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.888926][ T5158] usb 4-1: device descriptor read/64, error -71 [ 1333.912416][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.944285][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.969499][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.007827][ T5158] usb usb4-port1: attempt power cycle [ 1334.020796][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.031226][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.042620][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.053995][T23029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.065964][T23029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.083558][T23029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.169116][T23099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1334.182983][T23099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.233508][T23029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.259498][T23029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.270084][T23029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.282338][T23029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.425917][T23041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.462469][ T5158] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1334.537344][ T5158] usb 4-1: device descriptor read/8, error -71 [ 1334.905288][T23041] veth0_vlan: entered promiscuous mode [ 1334.914043][T23099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1335.012746][T23099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1335.020108][ T5158] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1335.074913][T23099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1335.105947][ T5158] usb 4-1: device descriptor read/8, error -71 [ 1335.181665][ T2892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.213163][T23099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1335.245361][ T2892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.270532][ T5158] usb usb4-port1: unable to enumerate USB device [ 1335.565552][T23041] veth1_vlan: entered promiscuous mode [ 1335.595980][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.641097][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.811600][T23041] veth0_macvtap: entered promiscuous mode [ 1335.835603][T22815] Bluetooth: hci7: command tx timeout [ 1335.882928][T23041] veth1_macvtap: entered promiscuous mode [ 1335.923654][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.937774][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.953368][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.965938][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.991762][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.016033][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.035618][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.048326][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.058614][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.078910][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.100727][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.119280][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.139410][T23041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.169802][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.201509][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.231580][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.266618][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.279739][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.291541][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.307928][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.319247][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.333145][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.359417][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.386815][T23041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.398485][T23041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.434717][T23041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.463678][T23041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.473774][T23041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.484021][T23041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.494809][T23041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.754270][T23099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.887571][ T29] audit: type=1326 audit(1717973112.487:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23183 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1aa207cf69 code=0x0 [ 1336.928031][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.955860][T23099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.963477][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.976380][ T29] audit: type=1800 audit(1717973112.557:3126): pid=23186 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1337.040851][T10443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.048077][T10443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.068784][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.076016][T10443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.229964][ T2892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.293593][ T2892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.830776][T22815] Bluetooth: unknown link type 32 [ 1337.838653][T22815] Bluetooth: hci4: connection err: -111 [ 1337.864087][T23190] loop1: detected capacity change from 0 to 1024 [ 1337.875994][T23190] hfsplus: failed to load root directory [ 1337.883586][T22815] Bluetooth: hci7: command tx timeout [ 1339.135802][T22815] Bluetooth: unknown link type 32 [ 1339.141502][T22815] Bluetooth: hci6: connection err: -111 [ 1340.324180][T23099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.580701][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1340.642187][T23099] veth0_vlan: entered promiscuous mode [ 1340.814764][T23099] veth1_vlan: entered promiscuous mode [ 1341.127931][T23099] veth0_macvtap: entered promiscuous mode [ 1341.168759][T23099] veth1_macvtap: entered promiscuous mode [ 1341.201942][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.227584][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.249419][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.283431][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.346748][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.453419][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.693657][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.734622][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.756621][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.767522][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.777640][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.790510][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.801711][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.812574][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.829614][T23099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.842010][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.852789][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.864807][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.875755][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.886791][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.900270][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.933375][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.979118][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.009443][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.040527][ T29] audit: type=1800 audit(1717973117.647:3127): pid=23235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1342.078567][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.111386][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.155238][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.190864][T23099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.226682][T23099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.274866][T23099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.369909][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1342.423745][T23099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.494653][T23222] loop3: detected capacity change from 0 to 32768 [ 1342.496613][T23099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.533224][T23222] btrfs: Bad value for 'max_inline' [ 1342.558542][T23099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.597900][T23099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.907064][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.966592][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.195896][T23244] loop1: detected capacity change from 0 to 1024 [ 1344.207599][T23244] hfsplus: failed to load root directory [ 1344.225804][ T2892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.234383][ T2892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.249631][T22815] Bluetooth: unknown link type 32 [ 1344.255252][T22815] Bluetooth: hci4: connection err: -111 [ 1344.991547][ T29] audit: type=1326 audit(1717973120.597:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1345.189096][ T29] audit: type=1326 audit(1717973120.647:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1345.689600][ T29] audit: type=1326 audit(1717973120.647:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1345.820528][T23254] loop3: detected capacity change from 0 to 1024 [ 1345.832634][T22815] Bluetooth: unknown link type 32 [ 1345.838239][T22815] Bluetooth: hci2: connection err: -111 [ 1346.009985][ T29] audit: type=1326 audit(1717973120.647:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1346.423793][ T29] audit: type=1326 audit(1717973120.657:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1346.490132][T23254] hfsplus: failed to load root directory [ 1346.514426][T22815] Bluetooth: unknown link type 32 [ 1346.520317][T22815] Bluetooth: hci7: connection err: -111 [ 1346.532946][ T29] audit: type=1326 audit(1717973120.657:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1346.604728][T23256] loop2: detected capacity change from 0 to 1024 [ 1346.655252][T23256] hfsplus: failed to load root directory [ 1347.037542][ T29] audit: type=1326 audit(1717973120.657:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1347.562819][T22815] Bluetooth: unknown link type 32 [ 1347.611430][T22815] Bluetooth: hci5: connection err: -111 [ 1347.630644][ T29] audit: type=1326 audit(1717973120.667:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1347.902656][ T29] audit: type=1326 audit(1717973120.667:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1347.998895][ T29] audit: type=1326 audit(1717973120.667:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x7ffc0000 [ 1350.615744][T23295] loop2: detected capacity change from 0 to 8192 [ 1350.784340][T23295] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1350.799762][T23295] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1350.813047][T23295] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1350.826085][T23295] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1350.928543][T23295] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1351.840647][T22815] Bluetooth: unknown link type 32 [ 1351.846215][T22815] Bluetooth: hci2: connection err: -111 [ 1351.913712][T23302] loop3: detected capacity change from 0 to 1024 [ 1351.924522][T23302] hfsplus: failed to load root directory [ 1352.713184][T23319] loop3: detected capacity change from 0 to 128 [ 1352.750129][T23319] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1352.869100][T23319] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1352.975050][T23325] debugfs: Directory 'netdev:nicvf0' with parent 'phy121' already present! [ 1353.036677][T23324] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1353.503367][T22815] Bluetooth: unknown link type 32 [ 1353.529731][T22815] Bluetooth: hci6: connection err: -111 [ 1354.567931][ T5157] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1354.578638][T23341] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1354.722563][T23336] loop3: detected capacity change from 0 to 8192 [ 1354.775153][T23336] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1354.796960][T23336] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1354.806935][T23336] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1354.821143][T23336] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1354.841522][T23336] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1354.842288][ T5157] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1354.952490][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.017670][ T5157] usb 2-1: config 0 descriptor?? [ 1355.060247][ T5157] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1355.083562][ T5157] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1355.111672][ T5157] dvb-usb: bulk message failed: -22 (2/0) [ 1355.159000][ T5157] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1355.221057][ T5157] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1355.358365][T23334] loop1: detected capacity change from 0 to 1024 [ 1355.869947][T23331] loop2: detected capacity change from 0 to 32768 [ 1355.946380][T23331] BTRFS: device /dev/loop2 (7:2) using temp-fsid de3baa3e-982e-4c93-bb7d-54491926056f [ 1355.962460][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1355.966921][T23331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (23331) [ 1356.076655][ T5157] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1356.099120][T23331] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1356.135081][T23331] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1356.176724][T23331] BTRFS info (device loop2): using free-space-tree [ 1356.310459][ T5157] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1356.329617][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.395564][ T5157] usb 5-1: config 0 descriptor?? [ 1356.430391][ T5157] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1356.568161][ T5157] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1356.757450][ T5157] dvb-usb: bulk message failed: -22 (2/0) [ 1356.767755][T23355] loop3: detected capacity change from 0 to 32768 [ 1356.775982][T23355] btrfs: Bad value for 'max_inline' [ 1356.820780][ T5157] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1356.832396][ T29] audit: type=1804 audit(1717973132.427:3138): pid=23331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2114021429/syzkaller.ys6ZX9/5/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 1356.870686][ T5157] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1356.987442][ T29] audit: type=1804 audit(1717973132.467:3139): pid=23331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2114021429/syzkaller.ys6ZX9/5/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 1357.161272][ T29] audit: type=1804 audit(1717973132.467:3140): pid=23331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2114021429/syzkaller.ys6ZX9/5/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 1357.280723][T23099] BTRFS info (device loop2): last unmount of filesystem de3baa3e-982e-4c93-bb7d-54491926056f [ 1357.357727][ T785] usb 2-1: USB disconnect, device number 47 [ 1357.421112][ T29] audit: type=1326 audit(1717973133.017:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23351 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1357.551386][ T29] audit: type=1326 audit(1717973133.017:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23351 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1357.683503][ T29] audit: type=1326 audit(1717973133.027:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23351 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1357.951640][T22815] Bluetooth: unknown link type 32 [ 1357.961314][T22815] Bluetooth: hci4: connection err: -111 [ 1358.207874][ T29] audit: type=1326 audit(1717973133.027:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23351 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1358.283566][ T29] audit: type=1326 audit(1717973133.027:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23351 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1358.324976][T23377] loop1: detected capacity change from 0 to 1024 [ 1358.372500][ T29] audit: type=1326 audit(1717973133.027:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23351 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1358.457495][T23377] hfsplus: failed to load root directory [ 1358.505539][ T29] audit: type=1326 audit(1717973133.027:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23351 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1359.353312][T23387] loop2: detected capacity change from 0 to 128 [ 1359.796368][T23387] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1359.839798][ T5157] usb 5-1: USB disconnect, device number 53 [ 1359.861047][T23387] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1359.985239][T23387] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1360.947550][T22815] Bluetooth: unknown link type 32 [ 1360.952891][T22815] Bluetooth: hci4: connection err: -111 [ 1360.971415][T23392] loop1: detected capacity change from 0 to 1024 [ 1360.987222][T23392] hfsplus: failed to load root directory [ 1361.372864][T23405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1361.965757][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.976724][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.526907][ T5157] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1362.607438][T23417] loop2: detected capacity change from 0 to 8192 [ 1362.628968][T23417] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1362.647490][T23417] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1362.657119][T23417] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1362.670209][T23417] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1362.684256][T23417] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1362.756979][ T5157] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1362.793442][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.852791][ T5157] usb 2-1: config 0 descriptor?? [ 1362.898537][ T5157] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1362.932036][ T5157] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1362.959509][ T5157] dvb-usb: bulk message failed: -22 (2/0) [ 1362.981187][ T5157] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1363.034526][ T5157] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1363.164015][T23418] loop1: detected capacity change from 0 to 1024 [ 1364.353430][T23414] loop3: detected capacity change from 0 to 32768 [ 1364.405273][T23414] BTRFS: device /dev/loop3 (7:3) using temp-fsid 9bcc813c-0f71-440b-9c33-6ff12cb11a1f [ 1364.451177][T23414] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (23414) [ 1364.563511][T23414] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1364.620699][T23414] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1364.669844][T23414] BTRFS info (device loop3): using free-space-tree [ 1365.097021][T23414] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1365.434388][ T5156] usb 2-1: USB disconnect, device number 48 [ 1365.475837][T22815] Bluetooth: unknown link type 32 [ 1365.484654][T22815] Bluetooth: hci5: connection err: -111 [ 1365.496777][T23414] BTRFS error (device loop3): open_ctree failed [ 1365.942556][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1365.942569][ T29] audit: type=1326 audit(1717973141.547:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23450 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f86a7cf69 code=0x0 [ 1366.136611][ T785] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1366.270761][T23456] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1366.341209][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1366.349469][ T785] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1366.365474][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.377379][ T785] usb 3-1: config 0 descriptor?? [ 1366.946798][ T785] (null): keene_cmd_main failed (-110) [ 1366.956103][ T785] video4linux radio32: keene_cmd_main failed (-32) [ 1367.036884][ T785] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 1367.257132][T22815] Bluetooth: unknown link type 32 [ 1367.262672][T22815] Bluetooth: hci2: connection err: -111 [ 1367.267579][T23463] loop3: detected capacity change from 0 to 1024 [ 1367.280175][T23463] hfsplus: failed to load root directory [ 1369.266625][ T5154] usb 3-1: USB disconnect, device number 49 [ 1369.640053][ T785] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1369.878303][ T785] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1369.901145][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.945281][ T785] usb 2-1: config 0 descriptor?? [ 1369.963856][ T785] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1369.996342][ T785] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1370.022920][ T785] dvb-usb: bulk message failed: -22 (2/0) [ 1370.059220][ T785] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1370.111735][ T785] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1370.271680][T23490] loop1: detected capacity change from 0 to 1024 [ 1370.850433][T22815] Bluetooth: unknown link type 32 [ 1370.855742][T22815] Bluetooth: hci5: connection err: -111 [ 1371.605482][ T29] audit: type=1326 audit(1717973147.207:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23501 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1aa207cf69 code=0x0 [ 1371.813491][T23492] loop2: detected capacity change from 0 to 32768 [ 1371.838719][T23492] BTRFS: device /dev/loop2 (7:2) using temp-fsid 03895d15-38f0-4cbc-a897-1dade539d6de [ 1371.858262][T23492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (23492) [ 1371.898682][T23492] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1371.920633][T23492] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1371.942482][T23492] BTRFS info (device loop2): using free-space-tree [ 1372.132751][ T29] audit: type=1804 audit(1717973147.737:3153): pid=23492 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2114021429/syzkaller.ys6ZX9/12/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 1372.234604][ T29] audit: type=1804 audit(1717973147.737:3154): pid=23492 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2114021429/syzkaller.ys6ZX9/12/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 1372.295784][ T29] audit: type=1804 audit(1717973147.737:3155): pid=23492 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2114021429/syzkaller.ys6ZX9/12/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 1372.375140][ T5154] usb 2-1: USB disconnect, device number 49 [ 1372.393944][T23099] BTRFS info (device loop2): last unmount of filesystem 03895d15-38f0-4cbc-a897-1dade539d6de [ 1372.441900][T23522] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1372.952820][T22815] Bluetooth: unknown link type 32 [ 1372.961322][T22815] Bluetooth: hci5: connection err: -111 [ 1375.069281][T23543] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1375.666014][T23554] loop3: detected capacity change from 0 to 8192 [ 1375.750235][T23554] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1375.768436][T23554] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1375.808466][T23554] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1375.825883][T23554] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1375.838630][T23554] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1377.304054][T23559] loop1: detected capacity change from 0 to 40427 [ 1377.355389][T23559] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1377.386914][T23559] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1377.426577][T23559] F2FS-fs (loop1): invalid crc value [ 1377.573688][T23559] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1377.666688][T23577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1378.378314][T23572] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1378.677506][T23585] loop3: detected capacity change from 0 to 16 [ 1378.690535][T23585] erofs: (device loop3): mounted with root inode @ nid 36. [ 1378.834599][T23589] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1380.070577][ T785] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1380.076719][ T29] audit: type=1326 audit(1717973155.677:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23610 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f86a7cf69 code=0x0 [ 1380.259077][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1380.272015][ T785] usb 4-1: can't read configurations, error -61 [ 1380.456619][ T785] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1380.675223][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1380.704735][ T785] usb 4-1: can't read configurations, error -61 [ 1380.720134][ T785] usb usb4-port1: attempt power cycle [ 1381.157371][ T785] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1381.197847][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1381.214524][ T785] usb 4-1: can't read configurations, error -61 [ 1381.406591][ T785] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1381.464271][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1381.493531][ T785] usb 4-1: can't read configurations, error -61 [ 1381.514959][ T785] usb usb4-port1: unable to enumerate USB device [ 1381.715139][ T29] audit: type=1326 audit(1717973157.317:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23623 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a2507cf69 code=0x0 [ 1381.966237][T23618] loop1: detected capacity change from 0 to 32768 [ 1382.004989][T23618] BTRFS: device /dev/loop1 (7:1) using temp-fsid 8e2e82dc-8cda-4b35-aef0-affb2c642361 [ 1382.029699][T23618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (23618) [ 1382.066117][T23618] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1382.080203][T23618] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1382.090177][T23618] BTRFS info (device loop1): using free-space-tree [ 1382.215501][ T29] audit: type=1804 audit(1717973157.817:3158): pid=23618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir975672897/syzkaller.Psg58Y/54/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 1382.292545][ T29] audit: type=1804 audit(1717973157.817:3159): pid=23618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir975672897/syzkaller.Psg58Y/54/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 1382.355071][ T29] audit: type=1804 audit(1717973157.817:3160): pid=23618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir975672897/syzkaller.Psg58Y/54/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 1382.417222][T22898] BTRFS info (device loop1): last unmount of filesystem 8e2e82dc-8cda-4b35-aef0-affb2c642361 [ 1382.574594][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1383.602966][ T29] audit: type=1326 audit(1717973159.207:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23659 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1aa207cf69 code=0x0 [ 1383.818444][T23658] loop3: detected capacity change from 0 to 8192 [ 1383.898247][T23658] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1383.911562][T23658] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1383.923008][T23658] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1383.936270][T23658] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1383.949261][T23658] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1384.814356][T22815] Bluetooth: unknown link type 32 [ 1384.819706][T22815] Bluetooth: hci7: connection err: -111 [ 1384.841773][T23665] loop2: detected capacity change from 0 to 1024 [ 1384.862562][T23665] hfsplus: failed to load root directory [ 1385.633678][T23655] loop1: detected capacity change from 0 to 32768 [ 1385.666044][T23655] BTRFS: device /dev/loop1 (7:1) using temp-fsid bbb4c3f9-2801-4bf0-b5fb-d6235ae70066 [ 1385.719023][T23655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (23655) [ 1385.942667][T23655] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1385.990509][T23655] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1386.049102][T23655] BTRFS info (device loop1): using free-space-tree [ 1386.086628][T23655] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1386.147522][T23655] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1386.172555][T23655] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1386.184942][T23655] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1386.209850][T23655] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1386.229640][T23655] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1386.279634][ T5154] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1386.304522][T23655] BTRFS error (device loop1): open_ctree failed [ 1386.492748][ T5154] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1386.527472][ T5154] usb 1-1: can't read configurations, error -61 [ 1386.570613][T23698] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1386.697252][ T5154] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1386.917055][ T5154] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1386.939501][ T5154] usb 1-1: can't read configurations, error -61 [ 1386.958151][ T5154] usb usb1-port1: attempt power cycle [ 1387.406837][ T5154] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1387.471846][ T5154] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1387.486785][ T5154] usb 1-1: can't read configurations, error -61 [ 1387.666959][ T5154] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1387.725411][ T5154] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1387.746903][ T5154] usb 1-1: can't read configurations, error -61 [ 1387.763488][ T5154] usb usb1-port1: unable to enumerate USB device [ 1388.176815][ T29] audit: type=1326 audit(1717973163.777:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23710 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a2507cf69 code=0x0 [ 1388.224978][T23704] loop3: detected capacity change from 0 to 40427 [ 1388.266586][T23704] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1388.286107][T23704] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1388.323991][T23704] F2FS-fs (loop3): invalid crc value [ 1388.342859][T23704] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1388.515964][T23704] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1388.526617][T23704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1388.542001][T23704] syz-executor.3: attempt to access beyond end of device [ 1388.542001][T23704] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1388.673691][T23719] loop1: detected capacity change from 0 to 8192 [ 1388.703779][T23719] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1388.722052][T23719] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1388.736301][T23719] REISERFS warning (device loop1): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1388.751380][T23719] REISERFS warning (device loop1): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1388.764569][T23719] REISERFS warning (device loop1): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1389.282276][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1389.527841][T23735] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1390.509240][T23745] loop3: detected capacity change from 0 to 1024 [ 1390.532733][T22815] Bluetooth: unknown link type 32 [ 1390.538201][T22815] Bluetooth: hci2: connection err: -111 [ 1390.745488][T23745] hfsplus: failed to load root directory [ 1391.124695][ T29] audit: type=1326 audit(1717973166.727:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23747 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x0 [ 1391.512173][T23756] nfs4: Unknown parameter '017777777777777777777770xffffffffffffffff18446744073709551615' [ 1391.773699][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1392.167780][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1392.215266][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1392.225651][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1392.240689][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1392.248855][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1392.256276][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1392.356718][ T5157] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1392.657523][ T5157] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1392.671410][ T5157] usb 1-1: can't read configurations, error -61 [ 1392.726740][ T2411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.846740][ T5157] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1392.973426][ T2411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.050109][ T5157] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1393.084105][ T5157] usb 1-1: can't read configurations, error -61 [ 1393.116594][ T5157] usb usb1-port1: attempt power cycle [ 1393.257794][ T2411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.344466][T23757] loop3: detected capacity change from 0 to 32768 [ 1393.378389][T23757] btrfs: Bad value for 'max_inline' [ 1393.536771][ T2411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.548669][ T5157] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1393.640657][ T5157] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1393.650504][ T5157] usb 1-1: can't read configurations, error -61 [ 1393.816849][ T5157] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1393.901165][ T5157] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1393.911354][ T5157] usb 1-1: can't read configurations, error -61 [ 1393.920803][ T29] audit: type=1326 audit(1717973169.527:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1393.946140][ T5157] usb usb1-port1: unable to enumerate USB device [ 1394.046839][ T29] audit: type=1326 audit(1717973169.527:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1394.112371][ T29] audit: type=1326 audit(1717973169.547:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1394.245984][ T29] audit: type=1326 audit(1717973169.547:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1394.248385][T23760] chnl_net:caif_netlink_parms(): no params data found [ 1394.325052][ T2411] bridge_slave_1: left allmulticast mode [ 1394.331045][ T2411] bridge_slave_1: left promiscuous mode [ 1394.339378][ T2411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.357190][T22815] Bluetooth: hci4: command tx timeout [ 1394.394682][ T29] audit: type=1326 audit(1717973169.557:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1394.426564][ T29] audit: type=1326 audit(1717973169.557:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1394.451965][ T2411] bridge_slave_0: left allmulticast mode [ 1394.457179][ T29] audit: type=1326 audit(1717973169.557:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1394.560182][ T2411] bridge_slave_0: left promiscuous mode [ 1394.581664][ T2411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.140252][ T29] audit: type=1326 audit(1717973170.747:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x0 [ 1395.416940][ T5157] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1395.620009][ T5157] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1395.641176][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.682031][ T5157] usb 5-1: config 0 descriptor?? [ 1395.739963][ T5157] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1395.779537][ T5157] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1395.810447][ T5157] dvb-usb: bulk message failed: -22 (2/0) [ 1395.880724][ T5157] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1395.929735][ T5157] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1396.325622][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1396.436972][T22815] Bluetooth: hci4: command tx timeout [ 1397.443877][T23800] loop3: detected capacity change from 0 to 32768 [ 1397.457221][T23800] btrfs: Bad value for 'max_inline' [ 1397.822388][ T29] audit: type=1326 audit(1717973173.417:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23796 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1397.897772][ T2411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.929299][ T2411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.972732][ T29] audit: type=1326 audit(1717973173.417:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23796 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1397.978129][ T2411] bond0 (unregistering): Released all slaves [ 1398.177116][ T5158] usb 5-1: USB disconnect, device number 54 [ 1398.530389][T22815] Bluetooth: hci4: command tx timeout [ 1399.144026][T23760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.154967][T23760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.178419][T23760] bridge_slave_0: entered allmulticast mode [ 1399.196149][T23760] bridge_slave_0: entered promiscuous mode [ 1399.223522][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1399.223540][ T29] audit: type=1326 audit(1717973174.827:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23831 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x0 [ 1399.338027][T23760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.360062][T23760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.389629][T23760] bridge_slave_1: entered allmulticast mode [ 1399.414164][T23760] bridge_slave_1: entered promiscuous mode [ 1399.453274][T23838] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1399.521383][ T2411] hsr_slave_0: left promiscuous mode [ 1399.544717][ T2411] hsr_slave_1: left promiscuous mode [ 1399.689260][ T2411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.724886][ T2411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.769154][ T2411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.809070][ T2411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.886258][ T2411] veth1_macvtap: left promiscuous mode [ 1399.905302][ T2411] veth0_macvtap: left promiscuous mode [ 1399.925774][ T2411] veth1_vlan: left promiscuous mode [ 1399.948841][ T2411] veth0_vlan: left promiscuous mode [ 1400.263638][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1400.597618][T22815] Bluetooth: hci4: command tx timeout [ 1402.246059][T23849] loop3: detected capacity change from 0 to 32768 [ 1402.255728][T23849] btrfs: Bad value for 'max_inline' [ 1402.354908][T23858] loop2: detected capacity change from 0 to 128 [ 1402.389335][T23858] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1402.434860][T23858] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1402.481968][T23858] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1402.803146][ T29] audit: type=1326 audit(1717973178.407:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1402.903148][ T29] audit: type=1326 audit(1717973178.407:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1402.982977][ T29] audit: type=1326 audit(1717973178.437:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1403.024904][ T29] audit: type=1326 audit(1717973178.437:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1403.093670][ T29] audit: type=1326 audit(1717973178.437:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1403.126848][ T29] audit: type=1326 audit(1717973178.437:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1403.184138][ T29] audit: type=1326 audit(1717973178.437:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1403.238022][ T29] audit: type=1326 audit(1717973178.437:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1403.334484][ T29] audit: type=1326 audit(1717973178.437:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23847 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877ea7cf69 code=0x7ffc0000 [ 1403.407800][ T2411] team0 (unregistering): Port device team_slave_1 removed [ 1403.585756][ T2411] team0 (unregistering): Port device team_slave_0 removed [ 1404.011176][T23861] loop3: detected capacity change from 0 to 40427 [ 1404.028576][T23861] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1404.037805][T23861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1404.059246][T23861] F2FS-fs (loop3): invalid crc value [ 1404.074338][T23861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1404.129518][T23861] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1404.136656][T23861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1404.175481][T23861] syz-executor.3: attempt to access beyond end of device [ 1404.175481][T23861] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1404.409247][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1404.409265][ T29] audit: type=1326 audit(1717973180.017:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23871 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea2387cf69 code=0x0 [ 1405.103618][T23760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.126861][ T785] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1405.151314][T23760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.301679][T23760] team0: Port device team_slave_0 added [ 1405.339813][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1405.359018][ T785] usb 4-1: can't read configurations, error -61 [ 1405.397402][T23760] team0: Port device team_slave_1 added [ 1405.512418][T23760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.556021][T23760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.583108][ T785] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1405.676353][T23760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.717487][T23760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.743609][T23760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.823295][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1405.833281][ T785] usb 4-1: can't read configurations, error -61 [ 1405.841648][T23760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.853144][ T785] usb usb4-port1: attempt power cycle [ 1405.974559][T23760] hsr_slave_0: entered promiscuous mode [ 1405.998997][T23760] hsr_slave_1: entered promiscuous mode [ 1406.084137][T23760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1406.130698][T23760] Cannot create hsr debugfs directory [ 1406.287118][ T785] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1406.330655][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1406.346542][ T785] usb 4-1: can't read configurations, error -61 [ 1406.586778][ T785] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1406.631878][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1406.653635][T22815] Bluetooth: unknown link type 32 [ 1406.658821][T22815] Bluetooth: hci7: connection err: -111 [ 1406.677528][T23889] loop2: detected capacity change from 0 to 1024 [ 1406.686796][ T785] usb 4-1: can't read configurations, error -61 [ 1406.695099][ T785] usb usb4-port1: unable to enumerate USB device [ 1406.702091][T23889] hfsplus: failed to load root directory [ 1408.073309][T23907] loop2: detected capacity change from 0 to 256 [ 1408.365718][T23907] FAT-fs (loop2): Directory bread(block 64) failed [ 1408.373338][T23907] FAT-fs (loop2): Directory bread(block 65) failed [ 1408.381524][T23907] FAT-fs (loop2): Directory bread(block 66) failed [ 1408.388998][T23907] FAT-fs (loop2): Directory bread(block 67) failed [ 1408.397237][T23907] FAT-fs (loop2): Directory bread(block 68) failed [ 1408.404598][T23907] FAT-fs (loop2): Directory bread(block 69) failed [ 1408.412843][T23907] FAT-fs (loop2): Directory bread(block 70) failed [ 1408.420318][T23907] FAT-fs (loop2): Directory bread(block 71) failed [ 1408.427802][T23907] FAT-fs (loop2): Directory bread(block 72) failed [ 1408.434344][T23907] FAT-fs (loop2): Directory bread(block 73) failed [ 1408.648504][T23760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1408.703570][T23760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1408.759440][T23760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1408.788154][T23760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1408.925547][T23912] loop2: detected capacity change from 0 to 16 [ 1408.957226][T23912] erofs: (device loop2): mounted with root inode @ nid 36. [ 1409.102002][T23760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.166054][T23760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.220838][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.228066][T12904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.255726][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.262948][T12904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.125073][T23928] loop3: detected capacity change from 0 to 8192 [ 1410.178065][T23928] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1410.191353][T23928] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1410.201571][T23928] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1410.215176][T23928] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1410.234627][T23928] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1410.429525][T23760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1411.173213][T22815] Bluetooth: unknown link type 32 [ 1411.180351][T22815] Bluetooth: hci5: connection err: -111 [ 1411.346934][ T785] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1411.515062][T23760] veth0_vlan: entered promiscuous mode [ 1411.544802][T23760] veth1_vlan: entered promiscuous mode [ 1411.572524][ T785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1411.592566][ T785] usb 1-1: can't read configurations, error -61 [ 1411.682158][T23760] veth0_macvtap: entered promiscuous mode [ 1411.716966][T23760] veth1_macvtap: entered promiscuous mode [ 1411.782826][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.796718][ T785] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1411.822154][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.842953][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.856804][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.887322][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.914148][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.941529][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.985407][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.007361][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.031445][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.057296][ T785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1412.067880][ T785] usb 1-1: can't read configurations, error -61 [ 1412.080690][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.095698][ T785] usb usb1-port1: attempt power cycle [ 1412.108317][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.125873][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.153635][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.183530][T23760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.222835][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.242691][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.261475][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.277465][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.300053][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.315884][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.340248][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.361514][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.422785][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.454868][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.482114][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.522399][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.537104][ T785] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1412.548216][T23760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.572271][T23760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.608644][ T785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1412.637337][ T785] usb 1-1: can't read configurations, error -61 [ 1412.651129][T23760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.719538][T23760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.747538][T23760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.769917][T23760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.792207][T23760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.808580][ T785] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1412.852732][ T785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1412.860897][ T785] usb 1-1: can't read configurations, error -61 [ 1412.874717][ T785] usb usb1-port1: unable to enumerate USB device [ 1413.014438][T23951] loop3: detected capacity change from 0 to 32768 [ 1413.161954][ T2892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.181638][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.232302][ T2892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.257154][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.280053][T23951] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 1413.313172][T23951] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 1415.296826][T22815] Bluetooth: unknown link type 32 [ 1415.302398][T22815] Bluetooth: hci5: connection err: -111 [ 1416.948645][T23996] loop3: detected capacity change from 0 to 8192 [ 1417.054638][T23996] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1417.090595][T23996] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1417.125991][T23996] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1417.210950][T23996] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1417.239631][T23996] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1417.465514][T24006] loop1: detected capacity change from 0 to 8192 [ 1417.524310][T24006] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1417.546751][T24006] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1417.555966][T24006] REISERFS warning (device loop1): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1417.569580][T24006] REISERFS warning (device loop1): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1417.582310][T24006] REISERFS warning (device loop1): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1418.184663][T24018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1419.287476][T24028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1420.405316][T22815] Bluetooth: unknown link type 32 [ 1420.410448][T22815] Bluetooth: hci6: connection err: -111 [ 1422.159483][T24048] loop2: detected capacity change from 0 to 8192 [ 1422.182667][T24048] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1422.195967][T24048] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1422.205668][T24048] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1422.224391][T24048] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1422.247636][T24048] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1422.362770][T24030] loop3: detected capacity change from 0 to 32768 [ 1422.904596][T24030] syz-executor.3: vmalloc error: size 5242880, failed to allocated page array size 10240, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1423.004841][T24030] CPU: 1 PID: 24030 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de #0 [ 1423.015391][T24030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1423.025477][T24030] Call Trace: [ 1423.028763][T24030] [ 1423.031784][T24030] dump_stack_lvl+0x241/0x360 [ 1423.036477][T24030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1423.041676][T24030] ? __pfx__printk+0x10/0x10 [ 1423.046279][T24030] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1423.052713][T24030] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1423.059307][T24030] warn_alloc+0x278/0x410 [ 1423.063732][T24030] ? __pfx_warn_alloc+0x10/0x10 [ 1423.068587][T24030] ? __bch2_darray_resize+0xb5/0x1d0 [ 1423.073958][T24030] ? __get_vm_area_node+0x23d/0x270 [ 1423.079204][T24030] __vmalloc_node_range_noprof+0x69f/0x1460 [ 1423.085137][T24030] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1423.091472][T24030] ? rcu_is_watching+0x15/0xb0 [ 1423.096245][T24030] ? trace_kmalloc+0x1f/0xd0 [ 1423.100835][T24030] ? __kmalloc_node_noprof+0x247/0x440 [ 1423.106292][T24030] ? kvmalloc_node_noprof+0x72/0x190 [ 1423.111582][T24030] kvmalloc_node_noprof+0x142/0x190 [ 1423.116782][T24030] ? __bch2_darray_resize+0xb5/0x1d0 [ 1423.122074][T24030] __bch2_darray_resize+0xb5/0x1d0 [ 1423.127275][T24030] bch2_fs_btree_write_buffer_init+0x28f/0x2e0 [ 1423.133440][T24030] bch2_fs_alloc+0x1c99/0x2030 [ 1423.138226][T24030] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 1423.143353][T24030] ? __bch2_darray_resize+0x12f/0x1d0 [ 1423.148793][T24030] ? rcu_is_watching+0x15/0xb0 [ 1423.153566][T24030] ? bch2_fs_open+0x330/0xdf0 [ 1423.158239][T24030] bch2_fs_open+0x8cc/0xdf0 [ 1423.162756][T24030] ? __pfx_bch2_fs_open+0x10/0x10 [ 1423.167803][T24030] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1423.174227][T24030] ? __pfx_bch2_test_super+0x10/0x10 [ 1423.179600][T24030] ? sget+0x2b8/0x620 [ 1423.183586][T24030] ? __pfx_bch2_noset_super+0x10/0x10 [ 1423.188957][T24030] bch2_mount+0x6c0/0x1320 [ 1423.193388][T24030] ? __pfx_bch2_mount+0x10/0x10 [ 1423.198266][T24030] ? vfs_parse_fs_string+0x190/0x230 [ 1423.203583][T24030] ? kfree+0x4e/0x360 [ 1423.207604][T24030] ? vfs_parse_fs_string+0x190/0x230 [ 1423.212903][T24030] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 1423.218553][T24030] ? cap_capable+0x1b4/0x250 [ 1423.223162][T24030] legacy_get_tree+0xee/0x190 [ 1423.227837][T24030] ? __pfx_bch2_mount+0x10/0x10 [ 1423.232690][T24030] vfs_get_tree+0x90/0x2a0 [ 1423.237112][T24030] do_new_mount+0x2be/0xb40 [ 1423.241623][T24030] ? __pfx_do_new_mount+0x10/0x10 [ 1423.246656][T24030] __se_sys_mount+0x2d9/0x3c0 [ 1423.251338][T24030] ? __pfx___se_sys_mount+0x10/0x10 [ 1423.256535][T24030] ? do_syscall_64+0x100/0x230 [ 1423.261306][T24030] ? __x64_sys_mount+0x20/0xc0 [ 1423.266073][T24030] do_syscall_64+0xf3/0x230 [ 1423.270577][T24030] ? clear_bhb_loop+0x35/0x90 [ 1423.275286][T24030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.281190][T24030] RIP: 0033:0x7f877ea7e66a [ 1423.285606][T24030] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1423.305217][T24030] RSP: 002b:00007f877f744ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1423.313628][T24030] RAX: ffffffffffffffda RBX: 00007f877f744f80 RCX: 00007f877ea7e66a [ 1423.321682][T24030] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007f877f744f40 [ 1423.329737][T24030] RBP: 0000000020011a00 R08: 00007f877f744f80 R09: 0000000001200014 [ 1423.337730][T24030] R10: 0000000001200014 R11: 0000000000000202 R12: 0000000020011a40 [ 1423.345693][T24030] R13: 00007f877f744f40 R14: 00000000000119fc R15: 0000000020000100 [ 1423.353675][T24030] [ 1423.440429][T24030] Mem-Info: [ 1423.447131][T24030] active_anon:1476 inactive_anon:44200 isolated_anon:0 [ 1423.447131][T24030] active_file:6143 inactive_file:42753 isolated_file:0 [ 1423.447131][T24030] unevictable:0 dirty:18 writeback:0 [ 1423.447131][T24030] slab_reclaimable:11264 slab_unreclaimable:111865 [ 1423.447131][T24030] mapped:26303 shmem:24711 pagetables:785 [ 1423.447131][T24030] sec_pagetables:0 bounce:0 [ 1423.447131][T24030] kernel_misc_reclaimable:0 [ 1423.447131][T24030] free:1307315 free_pcp:843 free_cma:0 [ 1423.508819][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.510909][T24061] loop1: detected capacity change from 0 to 8192 [ 1423.522348][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.535732][T24030] Node 0 active_anon:5904kB inactive_anon:175924kB active_file:24500kB inactive_file:171012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105220kB dirty:68kB writeback:0kB shmem:97876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:3116kB sec_pagetables:0kB all_unreclaimable? no [ 1423.563479][T24068] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1423.579352][T24030] Node 1 active_anon:0kB inactive_anon:1536kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1423.610150][T24030] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.610584][T24061] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1423.694332][T24030] lowmem_reserve[]: 0 2571 2571 0 0 [ 1423.716387][T24061] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1423.728161][T24030] Node 0 DMA32 free:1255712kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:5900kB inactive_anon:176288kB active_file:24240kB inactive_file:173160kB unevictable:0kB writepending:2368kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:5220kB local_pcp:4220kB free_cma:0kB [ 1423.788316][T24061] REISERFS warning (device loop1): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1423.812614][T24061] REISERFS warning (device loop1): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1423.831824][T24061] REISERFS warning (device loop1): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1423.868186][T24030] lowmem_reserve[]: 0 0 0 0 0 [ 1423.877375][T24030] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:260kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1423.906078][T24030] lowmem_reserve[]: 0 0 0 0 0 [ 1423.923898][T24030] Node 1 Normal free:3951720kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:1536kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.992785][T24030] lowmem_reserve[]: 0 0 0 0 0 [ 1424.001318][T24030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1424.078958][T24030] Node 0 DMA32: 47*4kB (UME) 29*8kB (ME) 4*16kB (UE) 268*32kB (UE) 95*64kB (UE) 2*128kB (E) 13*256kB (UE) 10*512kB (UE) 9*1024kB (UME) 5*2048kB (UM) 296*4096kB (UM) = 1255716kB [ 1424.141369][T24030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.177626][T24030] Node 1 Normal: 10*4kB (U) 14*8kB (U) 9*16kB (U) 8*32kB (U) 9*64kB (UM) 4*128kB (U) 4*256kB (UM) 1*512kB (M) 2*1024kB (U) 3*2048kB (UM) 962*4096kB (M) = 3951720kB [ 1424.226598][T24030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.250115][T24030] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1424.281524][T24030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.308181][T24030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1424.331062][T24030] 67947 total pagecache pages [ 1424.353045][T24030] 0 pages in swap cache [ 1424.367105][T24030] Free swap = 124472kB [ 1424.375877][T24030] Total swap = 124996kB [ 1424.389038][T24030] 2097051 pages RAM [ 1424.397542][T24030] 0 pages HighMem/MovableOnly [ 1424.408285][T24030] 400873 pages reserved [ 1424.418280][T24030] 0 pages cma reserved [ 1424.431215][T24030] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 1424.812678][ T29] audit: type=1326 audit(1717973200.417:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24079 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1aa207cf69 code=0x0 [ 1424.959248][T24084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1425.187684][ T5158] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1425.499718][ T5158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1425.509905][ T5158] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1425.573514][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.665041][ T5158] usb 2-1: config 0 descriptor?? [ 1425.737079][ T29] audit: type=1804 audit(1717973201.337:3199): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1587299202/syzkaller.Lwev33/49/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1425.783891][ T29] audit: type=1804 audit(1717973201.347:3200): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1587299202/syzkaller.Lwev33/49/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1425.926674][ T29] audit: type=1804 audit(1717973201.347:3201): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1587299202/syzkaller.Lwev33/49/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1426.046678][ T29] audit: type=1804 audit(1717973201.347:3202): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1587299202/syzkaller.Lwev33/49/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1426.175525][ T29] audit: type=1804 audit(1717973201.347:3203): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1587299202/syzkaller.Lwev33/49/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1426.333282][ T5158] video4linux radio32: keene_cmd_set failed (-71) [ 1426.367333][ T5158] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 1426.385765][ T5158] usb 2-1: USB disconnect, device number 50 [ 1427.042817][T22815] Bluetooth: unknown link type 32 [ 1427.047956][T22815] Bluetooth: hci5: connection err: -111 [ 1427.747155][T24097] loop2: detected capacity change from 0 to 8192 [ 1427.837821][T24097] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1427.852585][T24097] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1427.865656][T24097] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1427.898380][T24097] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1427.920279][T24117] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1427.952987][T24097] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1428.096781][ T5158] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1428.308638][ T5158] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1428.370255][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.532994][ T5158] usb 2-1: config 0 descriptor?? [ 1428.944234][T22815] Bluetooth: unknown link type 32 [ 1428.960884][T24122] loop3: detected capacity change from 0 to 1024 [ 1428.969039][T22815] Bluetooth: hci2: connection err: -111 [ 1428.980426][ T5158] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1428.988771][ T5158] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1428.994916][ T5158] dvb-usb: bulk message failed: -22 (2/0) [ 1429.007481][T24122] hfsplus: failed to load root directory [ 1429.020101][ T5158] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1429.036725][ T5158] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1429.290721][ T29] audit: type=1326 audit(1717973204.897:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24125 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a2507cf69 code=0x0 [ 1429.392630][T24114] loop1: detected capacity change from 0 to 1024 [ 1429.472772][T12904] usb 2-1: USB disconnect, device number 51 [ 1429.506581][T10443] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1429.674333][ T29] audit: type=1804 audit(1717973205.277:3205): pid=24136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4023661766/syzkaller.M6QaIP/49/bus" dev="sda1" ino=1970 res=1 errno=0 [ 1429.731694][T10443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1429.759856][T10443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1429.777758][ T29] audit: type=1804 audit(1717973205.307:3206): pid=24136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4023661766/syzkaller.M6QaIP/49/bus" dev="sda1" ino=1970 res=1 errno=0 [ 1429.810225][T10443] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1429.909597][T10443] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1429.922261][T24139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1429.934978][T10443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.197343][ T29] audit: type=1804 audit(1717973205.307:3207): pid=24136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4023661766/syzkaller.M6QaIP/49/bus" dev="sda1" ino=1970 res=1 errno=0 [ 1430.574793][T10443] usb 5-1: config 0 descriptor?? [ 1430.581461][ T29] audit: type=1804 audit(1717973205.327:3208): pid=24136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4023661766/syzkaller.M6QaIP/49/bus" dev="sda1" ino=1970 res=1 errno=0 [ 1430.623639][ T29] audit: type=1804 audit(1717973205.327:3209): pid=24136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4023661766/syzkaller.M6QaIP/49/bus" dev="sda1" ino=1970 res=1 errno=0 [ 1430.820565][ T29] audit: type=1326 audit(1717973206.427:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24149 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f698067cf69 code=0x0 [ 1431.027532][T10443] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 1431.036648][ T5158] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1431.069774][T10443] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1431.260582][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1431.290434][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1431.300735][ T5158] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1431.316060][ T5158] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1431.349939][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.372290][ T5158] usb 1-1: config 0 descriptor?? [ 1431.717057][T24157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.725886][T24157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.809780][ T5158] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 1431.822701][T10443] usb 5-1: USB disconnect, device number 55 [ 1431.843646][ T5158] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1431.910366][T24163] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1432.100954][T24156] loop3: detected capacity change from 0 to 8192 [ 1432.163867][T24156] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1432.182836][T24156] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1432.192706][T24156] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1432.208782][T24156] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1432.233365][T24156] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1432.264103][T24162] loop2: detected capacity change from 0 to 8192 [ 1432.325230][T24162] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1432.348186][T24162] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1432.369224][T24162] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1432.379693][T24166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.397102][T24166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.405627][T24162] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1432.424165][T24162] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1432.467757][ T5156] usb 1-1: USB disconnect, device number 50 [ 1433.082781][ T29] audit: type=1326 audit(1717973208.687:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24176 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a2507cf69 code=0x0 [ 1433.155522][ T29] audit: type=1804 audit(1717973208.757:3212): pid=24180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3371349367/syzkaller.WfxLqm/292/bus" dev="sda1" ino=1961 res=1 errno=0 [ 1433.208796][ T29] audit: type=1804 audit(1717973208.797:3213): pid=24180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3371349367/syzkaller.WfxLqm/292/bus" dev="sda1" ino=1961 res=1 errno=0 [ 1433.235985][ T29] audit: type=1804 audit(1717973208.797:3214): pid=24180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3371349367/syzkaller.WfxLqm/292/bus" dev="sda1" ino=1961 res=1 errno=0 [ 1433.261086][ T29] audit: type=1804 audit(1717973208.797:3215): pid=24180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3371349367/syzkaller.WfxLqm/292/bus" dev="sda1" ino=1961 res=1 errno=0 [ 1433.300033][ T29] audit: type=1804 audit(1717973208.797:3216): pid=24180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3371349367/syzkaller.WfxLqm/292/bus" dev="sda1" ino=1961 res=1 errno=0 [ 1433.549844][T24185] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1433.643301][T24189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1434.476896][T24199] nfs4: Unknown parameter '017777777777777777777770xffffffffffffffff18446744073709551615' [ 1434.632969][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1435.147792][T24210] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1437.330707][T24220] loop3: detected capacity change from 0 to 8192 [ 1437.420958][T24220] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1437.434245][T24220] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1437.443604][T24220] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1437.467734][T24220] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1437.482826][T24220] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1438.962203][T22815] Bluetooth: unknown link type 32 [ 1438.967698][T22815] Bluetooth: hci6: connection err: -111 [ 1439.045807][T24239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1440.308533][T24246] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1441.854809][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1441.854827][ T29] audit: type=1326 audit(1717973217.457:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24257 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f877ea7cf69 code=0x0 [ 1442.149394][T24265] loop1: detected capacity change from 0 to 8192 [ 1442.204584][T24265] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1442.221908][T24265] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1442.232999][T24265] REISERFS warning (device loop1): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 1442.246023][T24265] REISERFS warning (device loop1): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 1442.267792][T24265] REISERFS warning (device loop1): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 1443.168221][T24288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1443.923108][T24287] nfs4: Unknown parameter '017777777777777777777770xffffffffffffffff18446744073709551615' [ 1444.185954][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1444.390576][T24304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1444.597817][ T30] INFO: task kworker/u8:4:17086 blocked for more than 143 seconds. [ 1444.611394][ T30] Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de #0 2024/06/09 22:47:00 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1444.995035][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1445.146608][ T30] task:kworker/u8:4 state:D stack:20592 pid:17086 tgid:17086 ppid:2 flags:0x00004000 [ 1445.232358][ T30] Workqueue: writeback wb_workfn (flush-btrfs-198) [ 1445.256591][ T30] Call Trace: [ 1445.260267][ T30] [ 1445.263549][ T30] __schedule+0x1796/0x49d0 [ 1445.321002][ T30] ? __pfx___schedule+0x10/0x10 [ 1445.323835][T24307] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1445.326326][ T30] ? __blk_flush_plug+0x449/0x500 [ 1445.363221][ T30] ? __pfx_lock_release+0x10/0x10 [ 1445.368851][ T30] ? kthread_data+0x52/0xd0 [ 1445.373840][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1445.379872][ T30] ? schedule+0x90/0x320 [ 1445.384584][ T30] schedule+0x14b/0x320 [ 1445.389255][ T30] lock_extent+0x69e/0x860 [ 1445.394160][ T30] ? __pfx_lock_extent+0x10/0x10 [ 1445.399647][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1445.406338][ T30] ? btrfs_is_subpage+0x56/0x140 [ 1445.413203][ T30] btrfs_invalidate_folio+0x272/0xad0 [ 1445.419335][ T30] ? folio_clear_dirty_for_io+0x25a/0xcf0 [ 1445.425631][ T30] ? __pfx_btrfs_invalidate_folio+0x10/0x10 [ 1445.432032][ T30] ? folio_invalidate+0x87/0xc0 [ 1445.437534][ T30] btrfs_writepages+0x10b1/0x26f0 [ 1445.443106][ T30] ? __pfx_btrfs_writepages+0x10/0x10 [ 1445.466653][ T30] ? writeback_sb_inodes+0x478/0x1380 [ 1445.472648][ T30] ? __pfx_btrfs_writepages+0x10/0x10 [ 1445.496586][ T30] do_writepages+0x359/0x870 [ 1445.501712][ T30] ? __pfx_do_writepages+0x10/0x10 [ 1445.516560][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1445.522089][ T30] ? writeback_sb_inodes+0x5ea/0x1380 [ 1445.546586][ T30] ? __pfx_lock_release+0x10/0x10 [ 1445.552037][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1445.566581][ T30] __writeback_single_inode+0x165/0x10b0 [ 1445.572846][ T30] writeback_sb_inodes+0x99c/0x1380 [ 1445.606570][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1445.612912][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1445.626554][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1445.632180][ T30] ? rcu_is_watching+0x15/0xb0 [ 1445.656572][ T30] ? queue_io+0x3d9/0x5a0 [ 1445.661821][ T30] wb_writeback+0x481/0xd40 [ 1445.676542][ T30] ? queue_io+0x321/0x5a0 [ 1445.681394][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 1445.696521][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1445.703152][ T30] wb_workfn+0x410/0x1090 [ 1445.726608][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 1445.734824][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1445.750106][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1445.782346][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1445.804283][ T30] ? process_scheduled_works+0x945/0x1830 [ 1445.816855][ T30] process_scheduled_works+0xa2c/0x1830 [ 1445.822484][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1445.854780][ T30] ? assign_work+0x364/0x3d0 [ 1445.868241][ T30] worker_thread+0x86d/0xd70 [ 1445.872897][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1445.897592][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1445.902681][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1445.916554][ T30] kthread+0x2f0/0x390 [ 1445.920669][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1445.925803][ T30] ? __pfx_kthread+0x10/0x10 [ 1445.946492][ T30] ret_from_fork+0x4b/0x80 [ 1445.950963][ T30] ? __pfx_kthread+0x10/0x10 [ 1445.955575][ T30] ret_from_fork_asm+0x1a/0x30 [ 1445.962401][T24290] Bluetooth: hci6: command 0x0406 tx timeout [ 1445.962467][T16395] Bluetooth: hci5: command 0x0406 tx timeout [ 1445.984814][ T30] [ 1445.992989][ T30] INFO: task syz-executor.4:22696 blocked for more than 144 seconds. [ 1446.036659][ T30] Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de #0 [ 1446.045298][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1446.054944][ T30] task:syz-executor.4 state:D stack:20208 pid:22696 tgid:22695 ppid:16660 flags:0x00004006 [ 1446.066339][ T30] Call Trace: [ 1446.070174][ T30] [ 1446.074001][ T30] __schedule+0x1796/0x49d0 [ 1446.079444][ T30] ? __pfx___schedule+0x10/0x10 [ 1446.084885][ T30] ? __pfx_lock_release+0x10/0x10 [ 1446.090788][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1446.097551][ T30] ? schedule+0x90/0x320 [ 1446.102331][ T30] schedule+0x14b/0x320 [ 1446.107114][ T30] wb_wait_for_completion+0x166/0x290 [ 1446.113166][ T30] ? __pfx_wb_wait_for_completion+0x10/0x10 [ 1446.119974][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1446.126957][ T30] __writeback_inodes_sb_nr+0x2d2/0x380 [ 1446.133139][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1446.141193][ T30] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 1446.148008][ T30] ? down_read_trylock+0x24f/0x3c0 [ 1446.154110][ T30] ? try_to_writeback_inodes_sb+0x21/0xc0 [ 1446.160651][ T30] ? timekeeping_get_ns+0x2c0/0x420 [ 1446.177705][ T30] ? get_nr_dirty_inodes+0x1b7/0x200 [ 1446.183943][ T30] try_to_writeback_inodes_sb+0x98/0xc0 [ 1446.205084][ T30] btrfs_commit_transaction+0x896/0x3740 [ 1446.218709][ T30] ? btrfs_commit_transaction+0x17f/0x3740 [ 1446.236764][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1446.245343][ T30] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 1446.261784][ T30] ? join_transaction+0x405/0xcf0 [ 1446.274236][ T30] ? btrfs_record_root_in_trans+0x92/0x190 [