last executing test programs: 1.623266684s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x1, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) 1.440795862s ago: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r1 = ioctl$NS_GET_PARENT(r0, 0x5450, 0x0) ioctl$KDSKBSENT(r1, 0x5452, &(0x7f00000002c0)={0x0, "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"}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x27, 0x3, 0x0, {0x2, 0x6, 0x0, '}&$}-*'}}, 0x27) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb01001800000000001c0000001c00000005000000000040a9e7e820fd4a0e52c459b5d4708900fcffffffffffff00"/71], &(0x7f0000000240)=""/130, 0x39, 0x82, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '$+\x00'}, &(0x7f00000000c0)=""/66, 0x42) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x0, 0x101}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f00000012c0)={0xeb, 0x1ff, 0x1f, 0xd0, &(0x7f0000000180)=""/208, 0x16, &(0x7f0000000280)=""/22, 0x1000, &(0x7f00000002c0)=""/4096}) r6 = syz_open_dev$dri(&(0x7f0000001300), 0xff, 0x4c6203) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000001340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000001380)={0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r9, &(0x7f0000001580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000200)=0x80) close_range(r10, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x13, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x0, [0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x3]}}}, 0x4c}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000013c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f00000014c0)={&(0x7f0000001400)=[r7, r8, r11], &(0x7f0000001440)=[0xfff, 0x4, 0x1, 0x1000100000000, 0x2, 0x80000000, 0x3, 0x2, 0xffffffff], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r7}) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYBLOB="08002dbd7000fddbdf25120000000800150002000000"], 0x1c}}, 0x0) 1.279189888s ago: executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x33, 0x8, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000001880)="f841", &(0x7f00000016c0)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f00000005c0)="420cb3ee49fdc52939ab4b554f8c", 0x0}, 0x20) 1.132935741s ago: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r1 = ioctl$NS_GET_PARENT(r0, 0x5450, 0x0) ioctl$KDSKBSENT(r1, 0x5452, &(0x7f00000002c0)={0x0, "1ac6a45da816cd8e7318b64217b0b2bf490df07b8cf94a2f90d4a19bf78139238c3a59133a964596403e0923b1f8d5b0dfcdd84a3cac187e2f31743229cbe8ad008f72566ba53b92dd1424c034e6a0fe1990ae5b6659f6502eff45cffef0b840caa79c97304525f65ef6a578cf8565105f5dd3545f0b96f92b70547126bb29003c5bade3eb1c826c0607448bcab3d2b94ffc753f00000000000000c39f371bfb81206842750cff88df61c2d833c0e9a50f0ed4e84569e40888e807aa3cffffffff8f17f908838fc96badcd33a59e628cbff58785b36ba8f759cc9b39871d91f4ae233eae5dc87375176912e35352f282c1f26544b9e67c83f681537ddd72d9f750465b0d8f500076ca47ce3ca461c168998fa5909e5cef0ba2203fc9a018018000000444edfdfed37a0d3b6682e6c1e857b6d5aa07944545974731a26bc5b377db891ca963b3e642035b2e4935b72e2917f91cba6fc13c74e14b5410b981292925abd2c85d20c9219a977e75d32ad56fb8970532344442ad64f8db30a9a7419b70b4a44bf391227488fab069865d082bbf19f7ac278a66c937435bcf66b90f6ebe1c6dcfcd35127911edc1db44cb5f647bf6e19bbbd7e8022132d27748be7eac9afc67c0b39f5de72d9f00"}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x27, 0x3, 0x0, {0x2, 0x6, 0x0, '}&$}-*'}}, 0x27) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb01001800000000001c0000001c00000005000000000040a9e7e820fd4a0e52c459b5d4708900fcffffffffffff00"/71], &(0x7f0000000240)=""/130, 0x39, 0x82, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '$+\x00'}, &(0x7f00000000c0)=""/66, 0x42) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x0, 0x101}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f00000012c0)={0xeb, 0x1ff, 0x1f, 0xd0, &(0x7f0000000180)=""/208, 0x16, &(0x7f0000000280)=""/22, 0x1000, &(0x7f00000002c0)=""/4096}) r6 = syz_open_dev$dri(&(0x7f0000001300), 0xff, 0x4c6203) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000001340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000001380)={0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r9, &(0x7f0000001580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000200)=0x80) close_range(r10, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x13, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x0, [0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x3]}}}, 0x4c}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000013c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f00000014c0)={&(0x7f0000001400)=[r7, r8, r11], &(0x7f0000001440)=[0xfff, 0x4, 0x1, 0x1000100000000, 0x2, 0x80000000, 0x3, 0x2, 0xffffffff], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000100)={r7}) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYBLOB="08002dbd7000fddbdf25120000000800150002000000"], 0x1c}}, 0x0) 986.816624ms ago: executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 931.103923ms ago: executing program 1: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 900.408258ms ago: executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 830.920899ms ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) dup3(r1, r0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) getcwd(0x0, 0x0) 830.775208ms ago: executing program 4: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 780.387877ms ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000180)={[{@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x30, 0x78, 0x25, 0x70, 0x2d, 0x2d, 0x78, 0x78]}}, {@autodefrag}, {@nobarrier}, {@clear_cache}, {@datacow}, {}, {@rescan_uuid_tree}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x3, 0x55a3, &(0x7f000000ac00)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x2000) 766.121849ms ago: executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$setown(r0, 0x8, r5) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) 748.727232ms ago: executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 644.962158ms ago: executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1}, 0x30) 624.010051ms ago: executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) fchdir(r0) close(r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) quotactl$Q_QUOTAON(0x0, &(0x7f0000000000), 0x0, 0x0) 596.239796ms ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x6) write$FUSE_ATTR(r1, 0x0, 0x0) 569.29935ms ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x4, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 503.10075ms ago: executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$setown(r0, 0x8, r5) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) 466.663066ms ago: executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 440.62054ms ago: executing program 4: r0 = memfd_create(&(0x7f0000000300)='systam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\xbf\xeahq\xa0\x12\xedb\xb3\xbf\t`\v\xc0\xc9\x0e<\xe0\xe1\xc8!\x99Bv\x82\xf4\x06s\xfe\xa9\xbccw\xc7d1\x05\x7f\x1a\x87\xd3\x16\xce\xcb?\xc3\xf4\xc4\xda4\xd1\xf5\xf9\xe6\xa5\x90\xd2\f\x9f \xd4\xdeA\xbc= iZ\x92\xf5x\x16G]\x03%^b\xeb\xd3)\xba\xe3\xcf\xbf\x91\xbc\xee\xb5\x9b8\xc8po\x91Y\x1a\xaab\xf1\xc8', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000051, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf7, &(0x7f0000001e40)=""/4107}, 0x4c) 435.159921ms ago: executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x5, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x10060, 0x0, 0x0) 347.959315ms ago: executing program 4: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 310.936591ms ago: executing program 3: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 310.353081ms ago: executing program 1: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000004c0), 0x4, 0x9606, &(0x7f0000012cc0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 265.288588ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 222.319805ms ago: executing program 4: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 196.647479ms ago: executing program 3: r0 = fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000001"], 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacwa}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) write(r4, &(0x7f0000000080)="b3", 0x1) fanotify_mark(r0, 0x1, 0x1, r5, 0x0) finit_module(r5, 0x0, 0x0) 189.784871ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 36.416794ms ago: executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000b80), 0x0, &(0x7f0000000c00)={0x1, 0x7000000, @d}, 0x18, 0xfffffffffffffffe) 14.640278ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x33, 0x8, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000001880)="f841", &(0x7f00000016c0)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f00000005c0)="420cb3ee49fdc52939ab4b554f8c", 0x0}, 0x20) 0s ago: executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$setown(r0, 0x8, r5) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) kernel console output (not intermixed with test programs): : 00007ff1e3df9f40 R14: 000000000001282e R15: 0000000020000240 [ 221.000847][ T5021] [ 221.006486][ T5021] kobject_add_internal failed for ([{{{+ with -EEXIST, don't try to register things with the same name in the same directory. [ 221.006507][ T5021] gfs2: fsid=([{{{+: error -17 adding sysfs files [ 221.157880][ T5012] gfs2: fsid=([{{{+.0: first mount done, others may mount [ 221.159425][ T4061] attempt to access beyond end of device [ 221.159425][ T4061] loop3: rw=2049, want=45104, limit=40427 [ 222.934211][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.445926][ T25] audit: type=1804 audit(1716913138.167:29): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2089669921/syzkaller.1aO1RX/22/bus" dev="sda1" ino=1964 res=1 errno=0 [ 223.937805][ T5095] loop1: detected capacity change from 0 to 40427 [ 224.081336][ T5102] loop2: detected capacity change from 0 to 32768 [ 224.081434][ T5095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 224.194283][ T5102] gfs2: fsid=([{{{+: Trying to join cluster "lock_nolock", "([{{{+" [ 224.211643][ T5095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 224.214896][ T5102] gfs2: fsid=([{{{+: Now mounting FS (format 0)... [ 224.240705][ T5102] gfs2: fsid=([{{{+.0: journal 0 mapped with 22 extents in 0ms [ 224.256059][ T3585] gfs2: fsid=([{{{+.0: jid=0, already locked for use [ 224.269316][ T3585] gfs2: fsid=([{{{+.0: jid=0: Looking at journal... [ 224.309895][ T5147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.376464][ T5117] loop4: detected capacity change from 0 to 32768 [ 224.470726][ T5117] sysfs: cannot create duplicate filename '/fs/gfs2/([{{{+' [ 224.498333][ T3585] gfs2: fsid=([{{{+.0: jid=0: Journal head lookup took 229ms [ 224.506135][ T3585] gfs2: fsid=([{{{+.0: jid=0: Done [ 224.511453][ T5102] gfs2: fsid=([{{{+.0: first mount done, others may mount [ 224.552410][ T5117] CPU: 0 PID: 5117 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 224.560959][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 224.571028][ T5117] Call Trace: [ 224.574326][ T5117] [ 224.577279][ T5117] dump_stack_lvl+0x1e3/0x2d0 [ 224.581999][ T5117] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 224.587641][ T5117] ? panic+0x860/0x860 [ 224.591714][ T5117] ? sysfs_create_dir_ns+0x282/0x390 [ 224.597002][ T5117] sysfs_create_dir_ns+0x2c6/0x390 [ 224.602130][ T5117] ? sysfs_warn_dup+0xa0/0xa0 [ 224.606900][ T5117] ? do_raw_spin_unlock+0x137/0x8b0 [ 224.612090][ T5117] ? kobject_set_name_vargs+0xca/0x110 [ 224.617541][ T5117] kobject_add_internal+0x6e0/0xe00 [ 224.622740][ T5117] kobject_init_and_add+0x120/0x190 [ 224.627926][ T5117] ? lockdep_softirqs_off+0x420/0x420 [ 224.633285][ T5117] ? widen_string+0x3a/0x310 [ 224.637865][ T5117] ? kobject_add+0x210/0x210 [ 224.642448][ T5117] ? __init_swait_queue_head+0xaa/0x140 [ 224.647984][ T5117] gfs2_sys_fs_add+0x237/0x4a0 [ 224.652741][ T5117] ? gfs2_recover_set+0x240/0x240 [ 224.657754][ T5117] ? snprintf+0xd6/0x120 [ 224.662013][ T5117] ? invalidate_bh_lrus+0x30/0x30 [ 224.667030][ T5117] ? vscnprintf+0x80/0x80 [ 224.671352][ T5117] ? set_blocksize+0x2ff/0x370 [ 224.676110][ T5117] ? read_word_at_a_time+0xe/0x20 [ 224.681121][ T5117] ? strscpy+0x89/0x220 [ 224.685268][ T5117] gfs2_fill_super+0x1299/0x2750 [ 224.690307][ T5117] ? gfs2_reconfigure+0xcf0/0xcf0 [ 224.695320][ T5117] ? ptr_to_hashval+0x60/0x60 [ 224.699990][ T5117] ? up_write+0x19d/0x580 [ 224.704320][ T5117] ? set_blocksize+0x1ec/0x370 [ 224.709080][ T5117] get_tree_bdev+0x3fe/0x620 [ 224.713864][ T5117] ? gfs2_reconfigure+0xcf0/0xcf0 [ 224.718922][ T5117] gfs2_get_tree+0x50/0x210 [ 224.723431][ T5117] ? bpf_lsm_capable+0x5/0x10 [ 224.728103][ T5117] vfs_get_tree+0x88/0x270 [ 224.732509][ T5117] do_new_mount+0x2ba/0xb40 [ 224.737002][ T5117] ? do_move_mount_old+0x160/0x160 [ 224.742106][ T5117] ? user_path_at_empty+0x12b/0x180 [ 224.747307][ T5117] __se_sys_mount+0x2d5/0x3c0 [ 224.751978][ T5117] ? __x64_sys_mount+0xc0/0xc0 [ 224.756729][ T5117] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.762697][ T5117] ? lockdep_hardirqs_on+0x94/0x130 [ 224.767884][ T5117] ? __x64_sys_mount+0x1c/0xc0 [ 224.772633][ T5117] do_syscall_64+0x3b/0xb0 [ 224.777046][ T5117] ? clear_bhb_loop+0x15/0x70 [ 224.781725][ T5117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.787606][ T5117] RIP: 0033:0x7f96507505ea [ 224.792033][ T5117] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 224.811622][ T5117] RSP: 002b:00007f964ecc1ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 224.820027][ T5117] RAX: ffffffffffffffda RBX: 00007f964ecc1f80 RCX: 00007f96507505ea [ 224.827985][ T5117] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 00007f964ecc1f40 [ 224.835944][ T5117] RBP: 0000000020000000 R08: 00007f964ecc1f80 R09: 0000000000008c1b [ 224.843899][ T5117] R10: 0000000000008c1b R11: 0000000000000206 R12: 00000000200001c0 [ 224.851854][ T5117] R13: 00007f964ecc1f40 R14: 000000000001282e R15: 0000000020000240 [ 224.859827][ T5117] [ 225.276740][ T5121] loop3: detected capacity change from 0 to 32768 [ 225.294043][ T5117] kobject_add_internal failed for ([{{{+ with -EEXIST, don't try to register things with the same name in the same directory. [ 225.307409][ T5117] gfs2: fsid=([{{{+: error -17 adding sysfs files [ 225.514768][ T5121] sysfs: cannot create duplicate filename '/fs/gfs2/([{{{+' [ 225.522180][ T5121] CPU: 0 PID: 5121 Comm: syz-executor.3 Not tainted 5.15.160-syzkaller #0 [ 225.529073][ T4071] attempt to access beyond end of device [ 225.529073][ T4071] loop1: rw=2049, want=45104, limit=40427 [ 225.530687][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 225.530702][ T5121] Call Trace: [ 225.530708][ T5121] [ 225.530717][ T5121] dump_stack_lvl+0x1e3/0x2d0 [ 225.530744][ T5121] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 225.568490][ T5121] ? panic+0x860/0x860 [ 225.572587][ T5121] ? sysfs_create_dir_ns+0x282/0x390 [ 225.577892][ T5121] sysfs_create_dir_ns+0x2c6/0x390 [ 225.583025][ T5121] ? sysfs_warn_dup+0xa0/0xa0 [ 225.587726][ T5121] ? do_raw_spin_unlock+0x137/0x8b0 [ 225.592947][ T5121] ? kobject_set_name_vargs+0xca/0x110 [ 225.598433][ T5121] kobject_add_internal+0x6e0/0xe00 [ 225.603662][ T5121] kobject_init_and_add+0x120/0x190 [ 225.608887][ T5121] ? lockdep_softirqs_off+0x420/0x420 [ 225.614363][ T5121] ? widen_string+0x3a/0x310 [ 225.619009][ T5121] ? kobject_add+0x210/0x210 [ 225.623628][ T5121] ? __init_swait_queue_head+0xaa/0x140 [ 225.629198][ T5121] gfs2_sys_fs_add+0x237/0x4a0 [ 225.633985][ T5121] ? gfs2_recover_set+0x240/0x240 [ 225.639033][ T5121] ? snprintf+0xd6/0x120 [ 225.643301][ T5121] ? vscnprintf+0x80/0x80 [ 225.647659][ T5121] ? set_blocksize+0x306/0x370 [ 225.652444][ T5121] ? read_word_at_a_time+0xe/0x20 [ 225.657488][ T5121] ? strscpy+0x89/0x220 [ 225.661660][ T5121] gfs2_fill_super+0x1299/0x2750 [ 225.666617][ T5121] ? gfs2_reconfigure+0xcf0/0xcf0 [ 225.671631][ T5121] ? ptr_to_hashval+0x60/0x60 [ 225.676307][ T5121] ? up_write+0x19d/0x580 [ 225.680659][ T5121] ? set_blocksize+0x1ec/0x370 [ 225.685424][ T5121] get_tree_bdev+0x3fe/0x620 [ 225.690007][ T5121] ? gfs2_reconfigure+0xcf0/0xcf0 [ 225.695212][ T5121] gfs2_get_tree+0x50/0x210 [ 225.699712][ T5121] ? bpf_lsm_capable+0x5/0x10 [ 225.704380][ T5121] vfs_get_tree+0x88/0x270 [ 225.708792][ T5121] do_new_mount+0x2ba/0xb40 [ 225.713286][ T5121] ? do_move_mount_old+0x160/0x160 [ 225.718387][ T5121] ? user_path_at_empty+0x12b/0x180 [ 225.723570][ T5121] __se_sys_mount+0x2d5/0x3c0 [ 225.728236][ T5121] ? __x64_sys_mount+0xc0/0xc0 [ 225.732983][ T5121] ? syscall_enter_from_user_mode+0x2e/0x240 [ 225.738949][ T5121] ? lockdep_hardirqs_on+0x94/0x130 [ 225.744133][ T5121] ? __x64_sys_mount+0x1c/0xc0 [ 225.748882][ T5121] do_syscall_64+0x3b/0xb0 [ 225.753282][ T5121] ? clear_bhb_loop+0x15/0x70 [ 225.757967][ T5121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.763845][ T5121] RIP: 0033:0x7fb4821495ea [ 225.768246][ T5121] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 225.787852][ T5121] RSP: 002b:00007fb4806baef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 225.796252][ T5121] RAX: ffffffffffffffda RBX: 00007fb4806baf80 RCX: 00007fb4821495ea [ 225.804210][ T5121] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 00007fb4806baf40 [ 225.812164][ T5121] RBP: 0000000020000000 R08: 00007fb4806baf80 R09: 0000000000008c1b [ 225.820122][ T5121] R10: 0000000000008c1b R11: 0000000000000206 R12: 00000000200001c0 [ 225.828076][ T5121] R13: 00007fb4806baf40 R14: 000000000001282e R15: 0000000020000240 [ 225.836049][ T5121] [ 225.933634][ T5121] kobject_add_internal failed for ([{{{+ with -EEXIST, don't try to register things with the same name in the same directory. [ 225.972602][ T5121] gfs2: fsid=([{{{+: error -17 adding sysfs files [ 226.265691][ T25] audit: type=1804 audit(1716913140.987:30): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2692151674/syzkaller.HKUg92/18/bus" dev="sda1" ino=1966 res=1 errno=0 [ 226.501869][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.716331][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.856562][ T5182] loop0: detected capacity change from 0 to 2048 [ 227.021860][ T5182] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.905923][ T5186] loop1: detected capacity change from 0 to 32768 [ 227.946115][ T5188] loop4: detected capacity change from 0 to 32768 [ 227.994073][ T5186] gfs2: fsid=([{{{+: Trying to join cluster "lock_nolock", "([{{{+" [ 228.013820][ T5188] sysfs: cannot create duplicate filename '/fs/gfs2/([{{{+' [ 228.023487][ T5186] gfs2: fsid=([{{{+: Now mounting FS (format 0)... [ 228.033472][ T5188] CPU: 0 PID: 5188 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 228.042010][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 228.052075][ T5188] Call Trace: [ 228.055365][ T5188] [ 228.058283][ T5188] dump_stack_lvl+0x1e3/0x2d0 [ 228.062963][ T5188] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 228.068587][ T5188] ? panic+0x860/0x860 [ 228.072649][ T5188] ? sysfs_create_dir_ns+0x282/0x390 [ 228.077928][ T5188] sysfs_create_dir_ns+0x2c6/0x390 [ 228.083030][ T5188] ? sysfs_warn_dup+0xa0/0xa0 [ 228.087698][ T5188] ? do_raw_spin_unlock+0x137/0x8b0 [ 228.092883][ T5188] ? kobject_set_name_vargs+0xca/0x110 [ 228.098330][ T5188] kobject_add_internal+0x6e0/0xe00 [ 228.103522][ T5188] kobject_init_and_add+0x120/0x190 [ 228.108707][ T5188] ? lockdep_softirqs_off+0x420/0x420 [ 228.114062][ T5188] ? widen_string+0x3a/0x310 [ 228.118652][ T5188] ? kobject_add+0x210/0x210 [ 228.123232][ T5188] ? __init_swait_queue_head+0xaa/0x140 [ 228.128767][ T5188] gfs2_sys_fs_add+0x237/0x4a0 [ 228.133520][ T5188] ? gfs2_recover_set+0x240/0x240 [ 228.138556][ T5188] ? snprintf+0xd6/0x120 [ 228.142809][ T5188] ? vscnprintf+0x80/0x80 [ 228.147130][ T5188] ? set_blocksize+0x306/0x370 [ 228.151884][ T5188] ? read_word_at_a_time+0xe/0x20 [ 228.156897][ T5188] ? strscpy+0x89/0x220 [ 228.161041][ T5188] gfs2_fill_super+0x1299/0x2750 [ 228.165988][ T5188] ? gfs2_reconfigure+0xcf0/0xcf0 [ 228.170999][ T5188] ? ptr_to_hashval+0x60/0x60 [ 228.175667][ T5188] ? up_write+0x19d/0x580 [ 228.180000][ T5188] ? set_blocksize+0x1ec/0x370 [ 228.184758][ T5188] get_tree_bdev+0x3fe/0x620 [ 228.189341][ T5188] ? gfs2_reconfigure+0xcf0/0xcf0 [ 228.194355][ T5188] gfs2_get_tree+0x50/0x210 [ 228.198847][ T5188] ? bpf_lsm_capable+0x5/0x10 [ 228.203513][ T5188] vfs_get_tree+0x88/0x270 [ 228.207937][ T5188] do_new_mount+0x2ba/0xb40 [ 228.212432][ T5188] ? do_move_mount_old+0x160/0x160 [ 228.217532][ T5188] ? user_path_at_empty+0x12b/0x180 [ 228.222736][ T5188] __se_sys_mount+0x2d5/0x3c0 [ 228.227406][ T5188] ? __x64_sys_mount+0xc0/0xc0 [ 228.232154][ T5188] ? syscall_enter_from_user_mode+0x2e/0x240 [ 228.238144][ T5188] ? lockdep_hardirqs_on+0x94/0x130 [ 228.243329][ T5188] ? __x64_sys_mount+0x1c/0xc0 [ 228.248078][ T5188] do_syscall_64+0x3b/0xb0 [ 228.252483][ T5188] ? clear_bhb_loop+0x15/0x70 [ 228.257149][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.263027][ T5188] RIP: 0033:0x7f96507505ea [ 228.267435][ T5188] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 228.287022][ T5188] RSP: 002b:00007f964ecc1ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 228.295428][ T5188] RAX: ffffffffffffffda RBX: 00007f964ecc1f80 RCX: 00007f96507505ea [ 228.303385][ T5188] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 00007f964ecc1f40 [ 228.311344][ T5188] RBP: 0000000020000000 R08: 00007f964ecc1f80 R09: 0000000000008c1b [ 228.319323][ T5188] R10: 0000000000008c1b R11: 0000000000000206 R12: 00000000200001c0 [ 228.327279][ T5188] R13: 00007f964ecc1f40 R14: 000000000001282e R15: 0000000020000240 [ 228.335250][ T5188] [ 228.388346][ T5186] gfs2: fsid=([{{{+.0: journal 0 mapped with 22 extents in 0ms [ 228.424002][ T3586] gfs2: fsid=([{{{+.0: jid=0, already locked for use [ 228.434237][ T3586] gfs2: fsid=([{{{+.0: jid=0: Looking at journal... [ 228.667975][ T5188] kobject_add_internal failed for ([{{{+ with -EEXIST, don't try to register things with the same name in the same directory. [ 229.498375][ T5223] sched: RT throttling activated [ 230.231595][ T3586] gfs2: fsid=([{{{+.0: jid=0: Journal head lookup took 1797ms [ 230.257746][ T3586] gfs2: fsid=([{{{+.0: jid=0: Done [ 230.277083][ T5186] gfs2: fsid=([{{{+.0: first mount done, others may mount [ 230.333785][ T5188] gfs2: fsid=([{{{+: error -17 adding sysfs files [ 233.358739][ T5260] loop1: detected capacity change from 0 to 2048 [ 233.643273][ T5260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.170564][ T5305] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 236.207583][ T5305] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.245394][ T5305] device bond0 entered promiscuous mode [ 236.294655][ T5305] device bond_slave_0 entered promiscuous mode [ 236.324886][ T5305] device bond_slave_1 entered promiscuous mode [ 236.344373][ T5305] bridge0: port 3(bond0) entered blocking state [ 236.353713][ T5270] loop2: detected capacity change from 0 to 32768 [ 236.366465][ T5305] bridge0: port 3(bond0) entered disabled state [ 236.401459][ T5305] bridge0: port 3(bond0) entered blocking state [ 236.408208][ T5305] bridge0: port 3(bond0) entered forwarding state [ 236.432086][ T5308] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 236.541031][ T5308] device syz_tun entered promiscuous mode [ 236.571037][ T5308] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 237.417766][ T5316] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 237.431024][ T5316] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.499470][ T5316] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 237.659271][ T5323] loop3: detected capacity change from 0 to 4096 [ 237.762692][ T5318] loop4: detected capacity change from 0 to 4096 [ 238.634696][ T5330] loop1: detected capacity change from 0 to 4096 [ 238.702188][ T5337] syz-executor.2 (pid 5337) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 238.931041][ T5341] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 238.998302][ T5341] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.050379][ T5341] device bond0 entered promiscuous mode [ 239.078507][ T5341] device bond_slave_0 entered promiscuous mode [ 239.102266][ T5341] device bond_slave_1 entered promiscuous mode [ 239.138271][ T5341] bridge0: port 3(bond0) entered blocking state [ 239.178445][ T5341] bridge0: port 3(bond0) entered disabled state [ 239.201135][ T5341] bridge0: port 3(bond0) entered blocking state [ 239.207495][ T5341] bridge0: port 3(bond0) entered forwarding state [ 239.241425][ T5342] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 239.311251][ T5342] device syz_tun entered promiscuous mode [ 239.336948][ T5342] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 239.897051][ T5358] loop0: detected capacity change from 0 to 4096 [ 239.989782][ T5344] loop4: detected capacity change from 0 to 40427 [ 240.058921][ T5344] F2FS-fs (loop4): invalid crc value [ 240.089055][ T5344] F2FS-fs (loop4): Found nat_bits in checkpoint [ 240.213658][ T5344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 240.364636][ T5362] loop0: detected capacity change from 0 to 4096 [ 240.479060][ T5356] loop2: detected capacity change from 0 to 32768 [ 240.611807][ T5356] XFS (loop2): Mounting V5 Filesystem [ 240.726074][ T4495] attempt to access beyond end of device [ 240.726074][ T4495] loop4: rw=2049, want=45104, limit=40427 [ 240.884497][ T5356] XFS (loop2): Ending clean mount [ 240.951632][ T5356] XFS (loop2): Quotacheck needed: Please wait. [ 241.103206][ T5356] XFS (loop2): Quotacheck: Done. [ 241.284959][ T5364] loop3: detected capacity change from 0 to 40427 [ 241.307017][ T4458] XFS (loop2): Unmounting Filesystem [ 241.339485][ T5364] F2FS-fs (loop3): invalid crc value [ 241.365461][ T5364] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.417197][ T5364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.636803][ T5385] loop4: detected capacity change from 0 to 4096 [ 241.663853][ T5378] chnl_net:caif_netlink_parms(): no params data found [ 241.734017][ T4061] attempt to access beyond end of device [ 241.734017][ T4061] loop3: rw=2049, want=45104, limit=40427 [ 241.776105][ T5371] loop1: detected capacity change from 0 to 40427 [ 241.803644][ T5378] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.823763][ T5378] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.831904][ T5378] device bridge_slave_0 entered promiscuous mode [ 241.841285][ T5378] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.848668][ T5378] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.857157][ T5378] device bridge_slave_1 entered promiscuous mode [ 241.869183][ T5371] F2FS-fs (loop1): invalid crc value [ 241.901197][ T5371] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.920161][ T5378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.933026][ T5378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.035797][ T5378] team0: Port device team_slave_0 added [ 242.050528][ T5371] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 242.061924][ T5378] team0: Port device team_slave_1 added [ 242.139181][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.160349][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.229959][ T5378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.261047][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.285815][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.359740][ T5378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.530520][ T5378] device hsr_slave_0 entered promiscuous mode [ 242.537541][ T4071] attempt to access beyond end of device [ 242.537541][ T4071] loop1: rw=2049, want=45104, limit=40427 [ 242.549567][ T5378] device hsr_slave_1 entered promiscuous mode [ 242.578003][ T5378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.608836][ T5378] Cannot create hsr debugfs directory [ 242.894658][ T5393] loop2: detected capacity change from 0 to 40427 [ 242.952695][ T5393] F2FS-fs (loop2): invalid crc value [ 242.989582][ T5393] F2FS-fs (loop2): Found nat_bits in checkpoint [ 242.998292][ T5378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.115485][ T5378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.138869][ T5393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 243.208898][ T5378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.232419][ T3585] Bluetooth: hci0: command 0x0409 tx timeout [ 243.368791][ T5378] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.424212][ T5406] loop1: detected capacity change from 0 to 4096 [ 243.581769][ T5378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.613979][ T4458] attempt to access beyond end of device [ 243.613979][ T4458] loop2: rw=2049, want=45104, limit=40427 [ 243.640434][ T5378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.664747][ T5400] loop3: detected capacity change from 0 to 40427 [ 243.666822][ T5378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.696761][ T5378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.708951][ T5400] F2FS-fs (loop3): invalid crc value [ 243.738827][ T5400] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.876010][ T5400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.900804][ T5378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.943589][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.944610][ T5403] loop4: detected capacity change from 0 to 40427 [ 243.951748][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.969827][ T5378] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.007136][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.020746][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.026819][ T5403] F2FS-fs (loop4): invalid crc value [ 244.042696][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.049845][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.079536][ T5403] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.100068][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.114106][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.139804][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.159172][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.166315][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.200966][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.234888][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.246512][ T5403] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 244.249393][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.275444][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.295459][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.313386][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.350813][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.359108][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.385244][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.407721][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.429671][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.446616][ T4061] attempt to access beyond end of device [ 244.446616][ T4061] loop3: rw=2049, want=45104, limit=40427 [ 244.447262][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.686073][ T5378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.719100][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.727792][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.772600][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.781415][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.797165][ T4495] attempt to access beyond end of device [ 244.797165][ T4495] loop4: rw=2049, want=45104, limit=40427 [ 244.817140][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.826256][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.836074][ T5378] device veth0_vlan entered promiscuous mode [ 244.843707][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.852263][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.868802][ T5378] device veth1_vlan entered promiscuous mode [ 244.955184][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.966400][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.997762][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.013379][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.041707][ T5412] loop1: detected capacity change from 0 to 32768 [ 245.043352][ T5378] device veth0_macvtap entered promiscuous mode [ 245.089681][ T5378] device veth1_macvtap entered promiscuous mode [ 245.136233][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.169996][ T5412] XFS (loop1): Mounting V5 Filesystem [ 245.187594][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.201284][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.256780][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.312464][ T3581] Bluetooth: hci0: command 0x041b tx timeout [ 245.318116][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.345112][ T5412] XFS (loop1): Ending clean mount [ 245.358184][ T5412] XFS (loop1): Quotacheck needed: Please wait. [ 245.393630][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.419279][ T5435] loop3: detected capacity change from 0 to 4096 [ 245.428450][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.448418][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.460959][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.461021][ T5412] XFS (loop1): Quotacheck: Done. [ 245.491994][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.512847][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.524158][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.532493][ T4071] XFS (loop1): Unmounting Filesystem [ 245.558193][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.566693][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.578634][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.604080][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.633987][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.675530][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.706821][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.746577][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.766311][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.792574][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.817137][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.827481][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.838351][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.879691][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.924375][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.944590][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.968926][ T5378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.992694][ T5378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.001421][ T5378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.024697][ T5378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.239429][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.252015][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.289280][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.313913][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.322107][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.382256][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.657197][ T5447] loop0: detected capacity change from 0 to 4096 [ 246.667900][ T5437] loop2: detected capacity change from 0 to 40427 [ 246.743690][ T5437] F2FS-fs (loop2): invalid crc value [ 246.761709][ T5437] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.903520][ T5437] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.139411][ T5445] loop1: detected capacity change from 0 to 40427 [ 247.212498][ T5445] F2FS-fs (loop1): invalid crc value [ 247.277801][ T5445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 247.392699][ T3586] Bluetooth: hci0: command 0x040f tx timeout [ 247.472578][ T5445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 247.472920][ T4458] attempt to access beyond end of device [ 247.472920][ T4458] loop2: rw=2049, want=45104, limit=40427 [ 247.501558][ T5471] loop0: detected capacity change from 0 to 256 [ 247.573598][ T5471] exfat: Unknown parameter '01777777777777777777777' [ 247.847650][ T5458] loop3: detected capacity change from 0 to 40427 [ 247.918429][ T5458] F2FS-fs (loop3): invalid crc value [ 247.949926][ T5458] F2FS-fs (loop3): Found nat_bits in checkpoint [ 247.989531][ T4071] attempt to access beyond end of device [ 247.989531][ T4071] loop1: rw=2049, want=45104, limit=40427 [ 248.016525][ T5483] loop4: detected capacity change from 0 to 128 [ 248.087528][ T5483] FAT-fs (loop4): bogus number of directory entries (1) [ 248.100972][ T5458] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 248.102038][ T5483] FAT-fs (loop4): Can't find a valid FAT filesystem [ 248.161377][ T5481] loop0: detected capacity change from 0 to 4096 [ 248.246222][ T5481] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 249.038833][ T5481] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 249.182460][ T5378] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 249.193485][ T5378] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 249.200064][ T5378] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 249.238880][ T4061] attempt to access beyond end of device [ 249.238880][ T4061] loop3: rw=2049, want=45104, limit=40427 [ 249.315976][ T5499] loop1: detected capacity change from 0 to 256 [ 249.373446][ T5499] exfat: Unknown parameter '01777777777777777777777' [ 249.472548][ T3581] Bluetooth: hci0: command 0x0419 tx timeout [ 249.547710][ T5486] loop2: detected capacity change from 0 to 40427 [ 249.634150][ T5486] F2FS-fs (loop2): invalid crc value [ 249.646393][ T5486] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.732884][ T5486] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.892487][ T3584] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 250.031677][ T4458] attempt to access beyond end of device [ 250.031677][ T4458] loop2: rw=2049, want=45104, limit=40427 [ 250.182443][ T3584] usb 2-1: Using ep0 maxpacket: 16 [ 250.342193][ T5519] ucma_write: process 113 (syz-executor.4) changed security contexts after opening file descriptor, this is not allowed. [ 250.355602][ T3584] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 250.367322][ T3584] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.392353][ T3584] usb 2-1: config 0 has no interface number 0 [ 250.398629][ T3584] usb 2-1: config 0 interface 212 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 250.431208][ T3584] usb 2-1: config 0 interface 212 altsetting 0 has a duplicate endpoint with address 0x86, skipping [ 250.472734][ T3584] usb 2-1: config 0 interface 212 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 250.502717][ T3584] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=61.ee [ 250.529501][ T3584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.542460][ T5513] loop3: detected capacity change from 0 to 40427 [ 250.555994][ T3584] usb 2-1: config 0 descriptor?? [ 250.607932][ T5513] F2FS-fs (loop3): invalid crc value [ 250.645787][ T5513] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.724157][ T5538] loop0: detected capacity change from 0 to 256 [ 250.740257][ T5542] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.753130][ T5542] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.757018][ T5513] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 250.763490][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.782229][ T5543] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.793651][ T5538] exfat: Unknown parameter '01777777777777777777777' [ 250.821135][ T3584] usb 2-1: USB disconnect, device number 2 [ 250.935823][ T5547] loop2: detected capacity change from 0 to 1024 [ 250.941080][ T5549] loop0: detected capacity change from 0 to 1024 [ 250.967575][ T5551] loop4: detected capacity change from 0 to 128 [ 250.978342][ T5547] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 250.993971][ T5547] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.997871][ T5549] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 251.030393][ T5547] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 251.035492][ T5549] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.081545][ T5551] FAT-fs (loop4): bogus number of directory entries (1) [ 251.089123][ T5551] FAT-fs (loop4): Can't find a valid FAT filesystem [ 251.121185][ T5549] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 251.145212][ T4061] attempt to access beyond end of device [ 251.145212][ T4061] loop3: rw=2049, want=45104, limit=40427 [ 251.195766][ T5547] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 251.197893][ T5549] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 251.427370][ T5557] loop0: detected capacity change from 0 to 128 [ 252.149922][ T5557] FAT-fs (loop0): bogus number of directory entries (1) [ 252.172099][ T5561] loop2: detected capacity change from 0 to 128 [ 252.182438][ T5557] FAT-fs (loop0): Can't find a valid FAT filesystem [ 252.256957][ T5561] FAT-fs (loop2): bogus number of directory entries (1) [ 252.264297][ T5561] FAT-fs (loop2): Can't find a valid FAT filesystem [ 252.292284][ T5559] loop1: detected capacity change from 0 to 4096 [ 252.331449][ T5559] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 252.450686][ T5559] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 252.844861][ T4071] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 252.925400][ T4071] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 252.962594][ T4071] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 252.979635][ T5578] loop0: detected capacity change from 0 to 1024 [ 253.005337][ T5582] loop4: detected capacity change from 0 to 128 [ 253.047577][ T5578] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 253.057033][ T5578] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.067460][ T5582] FAT-fs (loop4): bogus number of directory entries (1) [ 253.092533][ T5578] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 253.115507][ T5582] FAT-fs (loop4): Can't find a valid FAT filesystem [ 253.171369][ T5587] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.199462][ T5578] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 253.228816][ T5587] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.407904][ T5594] loop3: detected capacity change from 0 to 128 [ 253.458042][ T5594] FAT-fs (loop3): bogus number of directory entries (1) [ 254.212453][ T5594] FAT-fs (loop3): Can't find a valid FAT filesystem [ 254.261416][ T5603] loop4: detected capacity change from 0 to 128 [ 254.571751][ T5607] loop0: detected capacity change from 0 to 256 [ 255.647729][ T5608] loop1: detected capacity change from 0 to 256 [ 256.214898][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.226757][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.934239][ T5603] FAT-fs (loop4): bogus number of directory entries (1) [ 257.998027][ T5603] FAT-fs (loop4): Can't find a valid FAT filesystem [ 258.011443][ T5608] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 258.190817][ T5612] loop0: detected capacity change from 0 to 128 [ 258.247943][ T5616] loop3: detected capacity change from 0 to 128 [ 258.399944][ T5612] FAT-fs (loop0): bogus number of directory entries (1) [ 258.412489][ T5612] FAT-fs (loop0): Can't find a valid FAT filesystem [ 258.424176][ T5616] FAT-fs (loop3): bogus number of directory entries (1) [ 258.449743][ T5616] FAT-fs (loop3): Can't find a valid FAT filesystem [ 258.635280][ T5621] loop4: detected capacity change from 0 to 256 [ 258.720611][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.055238][ T5621] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 259.188140][ T5626] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.304829][ T5626] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.518513][ T5635] loop2: detected capacity change from 0 to 128 [ 260.623070][ T5635] FAT-fs (loop2): bogus number of directory entries (1) [ 260.630442][ T5635] FAT-fs (loop2): Can't find a valid FAT filesystem [ 260.979606][ T5648] loop3: detected capacity change from 0 to 256 [ 261.283744][ T5648] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 261.446624][ T5646] loop4: detected capacity change from 0 to 4096 [ 261.613397][ T5646] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 261.650548][ T5653] loop1: detected capacity change from 0 to 128 [ 262.655824][ T5653] FAT-fs (loop1): bogus number of directory entries (1) [ 262.693129][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.698133][ T5646] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 262.712613][ T5653] FAT-fs (loop1): Can't find a valid FAT filesystem [ 262.767365][ T4495] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 262.802887][ T5662] loop2: detected capacity change from 0 to 128 [ 262.811130][ T4495] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 262.811180][ T4495] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 262.823506][ T5661] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 263.185827][ T5650] loop0: detected capacity change from 0 to 32768 [ 263.544323][ T5662] FAT-fs (loop2): bogus number of directory entries (1) [ 263.551305][ T5662] FAT-fs (loop2): Can't find a valid FAT filesystem [ 263.705571][ T5672] loop3: detected capacity change from 0 to 128 [ 263.904685][ T5673] loop1: detected capacity change from 0 to 256 [ 264.991464][ T5672] FAT-fs (loop3): bogus number of directory entries (1) [ 265.017922][ T5672] FAT-fs (loop3): Can't find a valid FAT filesystem [ 265.266405][ T5673] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 265.436663][ T5669] loop4: detected capacity change from 0 to 32768 [ 265.458462][ T5677] loop2: detected capacity change from 0 to 128 [ 265.547404][ T5669] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5669) [ 265.569685][ T5677] FAT-fs (loop2): bogus number of directory entries (1) [ 265.582535][ T5677] FAT-fs (loop2): Can't find a valid FAT filesystem [ 266.556739][ T5669] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 266.592831][ T5669] BTRFS info (device loop4): use zlib compression, level 3 [ 266.603399][ T5669] BTRFS info (device loop4): turning on sync discard [ 266.619925][ T5669] BTRFS info (device loop4): max_inline at 0 [ 266.634769][ T5669] BTRFS info (device loop4): enabling ssd optimizations [ 266.644580][ T5669] BTRFS info (device loop4): using spread ssd allocation scheme [ 266.652465][ T5669] BTRFS info (device loop4): using free space tree [ 266.659172][ T5669] BTRFS info (device loop4): has skinny extents [ 267.776036][ T5669] BTRFS error (device loop4): open_ctree failed [ 268.227295][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.313182][ T25] audit: type=1804 audit(1716913183.037:31): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/71/bus" dev="sda1" ino=1962 res=1 errno=0 [ 268.364731][ T5723] Invalid ELF header magic: != ELF [ 268.379851][ T5725] Invalid ELF header magic: != ELF [ 268.409318][ T25] audit: type=1804 audit(1716913183.057:32): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/71/bus" dev="sda1" ino=1962 res=1 errno=0 [ 268.439344][ T25] audit: type=1804 audit(1716913183.077:33): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/71/bus" dev="sda1" ino=1962 res=1 errno=0 [ 268.790649][ T5734] loop1: detected capacity change from 0 to 256 [ 268.955383][ T5738] loop2: detected capacity change from 0 to 256 [ 269.210469][ T5734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 269.315033][ T5738] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 269.335324][ T25] audit: type=1804 audit(1716913183.077:34): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2643027454/syzkaller.YHOump/23/bus" dev="sda1" ino=1964 res=1 errno=0 [ 269.375575][ T5741] loop0: detected capacity change from 0 to 128 [ 269.388908][ T25] audit: type=1804 audit(1716913183.097:35): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2643027454/syzkaller.YHOump/23/bus" dev="sda1" ino=1964 res=1 errno=0 [ 269.482464][ T25] audit: type=1804 audit(1716913183.097:36): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2643027454/syzkaller.YHOump/23/bus" dev="sda1" ino=1964 res=1 errno=0 [ 269.497801][ T5741] FAT-fs (loop0): bogus number of directory entries (1) [ 269.558892][ T5741] FAT-fs (loop0): Can't find a valid FAT filesystem [ 270.782467][ T25] audit: type=1804 audit(1716913185.497:37): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2643027454/syzkaller.YHOump/25/bus" dev="sda1" ino=1963 res=1 errno=0 [ 270.801919][ T5765] Invalid ELF header magic: != ELF [ 270.815316][ T5762] Invalid ELF header magic: != ELF [ 270.879043][ T25] audit: type=1804 audit(1716913185.497:38): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2643027454/syzkaller.YHOump/25/bus" dev="sda1" ino=1963 res=1 errno=0 [ 270.923770][ T25] audit: type=1804 audit(1716913185.497:39): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2643027454/syzkaller.YHOump/25/bus" dev="sda1" ino=1963 res=1 errno=0 [ 270.980331][ T25] audit: type=1804 audit(1716913185.507:40): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2692151674/syzkaller.HKUg92/60/bus" dev="sda1" ino=1969 res=1 errno=0 [ 271.127172][ T5770] loop0: detected capacity change from 0 to 32768 [ 271.257605][ T5770] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5770) [ 271.311979][ T5775] loop3: detected capacity change from 0 to 32768 [ 271.317596][ T5770] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 271.328091][ T5770] BTRFS info (device loop0): force zlib compression, level 3 [ 271.335844][ T5770] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 271.345678][ T5770] BTRFS info (device loop0): use zstd compression, level 3 [ 271.352981][ T5770] BTRFS info (device loop0): enabling ssd optimizations [ 271.359936][ T5770] BTRFS info (device loop0): using free space tree [ 271.366496][ T5770] BTRFS info (device loop0): has skinny extents [ 271.539277][ T5775] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (5775) [ 271.634677][ T5784] loop4: detected capacity change from 0 to 32768 [ 271.690602][ T5772] loop1: detected capacity change from 0 to 32768 [ 271.747577][ T5784] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (5784) [ 271.795810][ T5775] loop3: detected capacity change from 0 to 1024 [ 271.816107][ T5772] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (5772) [ 271.880035][ T5775] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.891375][ T5775] ext4 filesystem being mounted at /root/syzkaller-testdir1006718241/syzkaller.iuaIQS/77/file0 supports timestamps until 2038 (0x7fffffff) [ 271.981109][ T5784] loop4: detected capacity change from 0 to 1024 [ 272.071170][ T5784] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.082005][ T5784] ext4 filesystem being mounted at /root/syzkaller-testdir2692151674/syzkaller.HKUg92/62/file0 supports timestamps until 2038 (0x7fffffff) [ 272.227912][ T5771] loop1: detected capacity change from 0 to 1024 [ 272.328210][ T5771] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.356867][ T5771] ext4 filesystem being mounted at /root/syzkaller-testdir3283339789/syzkaller.rIqjEB/79/file0 supports timestamps until 2038 (0x7fffffff) [ 272.381507][ T5811] loop2: detected capacity change from 0 to 32768 [ 272.435764][ T5811] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (5811) [ 272.642777][ T5811] loop2: detected capacity change from 0 to 1024 [ 272.747702][ T5811] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.758687][ T5811] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/65/file0 supports timestamps until 2038 (0x7fffffff) [ 272.991731][ T5833] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.080845][ T5833] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.117436][ T5853] Invalid ELF header magic: != ELF [ 273.174496][ T5833] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.403454][ T5856] loop0: detected capacity change from 0 to 32768 [ 273.459941][ T5856] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5856) [ 273.499312][ T5858] loop2: detected capacity change from 0 to 32768 [ 273.500202][ T5833] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.526063][ T5856] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 273.535611][ T5856] BTRFS info (device loop0): force zlib compression, level 3 [ 273.543310][ T5856] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 273.554744][ T5856] BTRFS info (device loop0): use zstd compression, level 3 [ 273.561983][ T5856] BTRFS info (device loop0): enabling ssd optimizations [ 273.568995][ T5856] BTRFS info (device loop0): using free space tree [ 273.575570][ T5856] BTRFS info (device loop0): has skinny extents [ 273.597150][ T5858] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (5858) [ 273.742046][ T5833] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.793177][ T5858] loop2: detected capacity change from 0 to 1024 [ 273.800340][ T5833] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.818972][ T5833] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.836812][ T5833] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.904829][ T5858] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.915532][ T5858] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/66/file0 supports timestamps until 2038 (0x7fffffff) [ 274.209176][ T5892] loop1: detected capacity change from 0 to 32768 [ 274.256155][ T5892] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (5892) [ 274.517277][ T5900] loop3: detected capacity change from 0 to 32768 [ 274.538568][ T5892] loop1: detected capacity change from 0 to 1024 [ 274.581909][ T5900] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5900) [ 274.595057][ T5706] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 274.647290][ T5900] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 274.657518][ T5900] BTRFS info (device loop3): force zlib compression, level 3 [ 274.665032][ T5900] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 274.674617][ T5900] BTRFS info (device loop3): use zstd compression, level 3 [ 274.681840][ T5900] BTRFS info (device loop3): enabling ssd optimizations [ 274.688830][ T5900] BTRFS info (device loop3): using free space tree [ 274.695812][ T5900] BTRFS info (device loop3): has skinny extents [ 274.735758][ T5892] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.746591][ T5892] ext4 filesystem being mounted at /root/syzkaller-testdir3283339789/syzkaller.rIqjEB/84/file0 supports timestamps until 2038 (0x7fffffff) [ 274.782085][ T5918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.913009][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 274.965510][ T5921] loop0: detected capacity change from 0 to 32768 [ 274.971497][ T5918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.995476][ T5921] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (5921) [ 275.052802][ T5706] usb 5-1: config 0 has an invalid interface number: 212 but max is 0 [ 275.061566][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.073762][ T5706] usb 5-1: config 0 has no interface number 0 [ 275.079891][ T5706] usb 5-1: config 0 interface 212 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 275.090764][ T5706] usb 5-1: config 0 interface 212 altsetting 0 has a duplicate endpoint with address 0x86, skipping [ 275.101638][ T5706] usb 5-1: config 0 interface 212 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 275.116434][ T5706] usb 5-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=61.ee [ 275.147058][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.163903][ T5706] usb 5-1: config 0 descriptor?? [ 275.174817][ T5918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.212635][ T5921] loop0: detected capacity change from 0 to 1024 [ 275.258772][ T5918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.279622][ T5921] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.290369][ T5921] ext4 filesystem being mounted at /root/syzkaller-testdir2643027454/syzkaller.YHOump/30/file0 supports timestamps until 2038 (0x7fffffff) [ 275.398936][ T5918] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.429267][ T5706] usb 5-1: USB disconnect, device number 2 [ 275.466633][ T5918] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.529313][ T5918] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.689203][ T5918] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.805326][ T5953] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.830220][ T5957] loop1: detected capacity change from 0 to 128 [ 275.894395][ T5953] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.895938][ T5957] FAT-fs (loop1): bogus number of directory entries (1) [ 275.909391][ T5960] loop2: detected capacity change from 0 to 164 [ 275.918757][ T5957] FAT-fs (loop1): Can't find a valid FAT filesystem [ 275.976324][ T5953] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.240317][ T5963] loop0: detected capacity change from 0 to 32768 [ 276.948384][ T5963] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5963) [ 277.038225][ T5953] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.056104][ T5963] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 277.065913][ T5963] BTRFS info (device loop0): force zlib compression, level 3 [ 277.073502][ T5963] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 277.082953][ T5963] BTRFS info (device loop0): use zstd compression, level 3 [ 277.090174][ T5963] BTRFS info (device loop0): enabling ssd optimizations [ 277.097206][ T5963] BTRFS info (device loop0): using free space tree [ 277.100612][ T5973] loop1: detected capacity change from 0 to 64 [ 277.103775][ T5963] BTRFS info (device loop0): has skinny extents [ 278.569130][ T6009] loop1: detected capacity change from 0 to 32768 [ 278.588802][ T6009] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6009) [ 278.646385][ T6009] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 278.655938][ T6009] BTRFS info (device loop1): force zlib compression, level 3 [ 278.663498][ T6009] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 278.673175][ T6009] BTRFS info (device loop1): use zstd compression, level 3 [ 278.680403][ T6009] BTRFS info (device loop1): enabling ssd optimizations [ 278.687473][ T6009] BTRFS info (device loop1): using free space tree [ 278.694116][ T6009] BTRFS info (device loop1): has skinny extents [ 282.073228][ T5953] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.088128][ T5953] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.140825][ T5953] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.162243][ T5953] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.243325][ T6045] loop1: detected capacity change from 0 to 128 [ 282.307483][ T6045] FAT-fs (loop1): bogus number of directory entries (1) [ 282.324358][ T6045] FAT-fs (loop1): Can't find a valid FAT filesystem [ 282.534064][ T6048] loop4: detected capacity change from 0 to 32768 [ 282.617753][ T6048] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6048) [ 282.639905][ T6062] loop2: detected capacity change from 0 to 64 [ 282.657630][ T6063] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.671885][ T6048] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 282.681455][ T6048] BTRFS info (device loop4): force zlib compression, level 3 [ 282.688936][ T6048] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 282.698373][ T6048] BTRFS info (device loop4): use zstd compression, level 3 [ 282.705743][ T6048] BTRFS info (device loop4): enabling ssd optimizations [ 282.712780][ T6048] BTRFS info (device loop4): using free space tree [ 282.719289][ T6048] BTRFS info (device loop4): has skinny extents [ 283.659126][ T6063] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.742931][ T6063] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.786380][ T6095] loop0: detected capacity change from 0 to 4096 [ 283.815924][ T6063] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.839109][ T6100] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 283.855717][ T6095] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 283.890386][ T6103] loop2: detected capacity change from 0 to 64 [ 284.382089][ T6122] loop0: detected capacity change from 0 to 64 [ 284.465524][ T6126] loop4: detected capacity change from 0 to 256 [ 284.551580][ T6130] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 285.052525][ T6155] loop0: detected capacity change from 0 to 256 [ 285.077681][ T6157] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 285.269178][ T6162] loop0: detected capacity change from 0 to 256 [ 285.613149][ T6176] loop4: detected capacity change from 0 to 256 [ 285.658783][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 285.980214][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 286.449126][ T6210] loop0: detected capacity change from 0 to 512 [ 286.458864][ T6208] loop4: detected capacity change from 0 to 512 [ 286.514316][ T6208] EXT4-fs (loop4): fragment/cluster size (268435456) != block size (4096) [ 286.525315][ T6210] EXT4-fs (loop0): fragment/cluster size (268435456) != block size (4096) [ 286.709525][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 286.918855][ T6232] loop1: detected capacity change from 0 to 164 [ 287.250218][ T6234] loop4: detected capacity change from 0 to 32768 [ 287.314784][ T6234] ERROR: (device loop4): dtSearch: stack overrun! [ 287.314784][ T6234] [ 287.324489][ T6234] ERROR: (device loop4): remounting filesystem as read-only [ 287.331801][ T6234] btstack dump: [ 287.338228][ T6239] loop0: detected capacity change from 0 to 32768 [ 287.341553][ T6234] bn = 0, index = 0 [ 287.349381][ T6234] bn = 0, index = 0 [ 287.353369][ T6234] bn = 0, index = 0 [ 287.357182][ T6234] bn = 0, index = 0 [ 287.360981][ T6234] bn = 0, index = 0 [ 287.364835][ T6234] bn = 0, index = 0 [ 287.368729][ T6234] bn = 0, index = 0 [ 287.373188][ T6234] bn = 0, index = 0 [ 287.377030][ T6234] jfs_lookup: dtSearch returned -5 [ 287.383953][ T6240] ERROR: (device loop4): dtSearch: stack overrun! [ 287.383953][ T6240] [ 287.392888][ T6240] btstack dump: [ 287.396444][ T6240] bn = 0, index = 0 [ 287.402165][ T6240] bn = 0, index = 0 [ 287.404127][ T6239] ERROR: (device loop0): dtSearch: stack overrun! [ 287.404127][ T6239] [ 287.406153][ T6240] bn = 0, index = 0 [ 287.418702][ T6240] bn = 0, index = 0 [ 287.422972][ T6240] bn = 0, index = 0 [ 287.426928][ T6240] bn = 0, index = 0 [ 287.430809][ T6239] ERROR: (device loop0): remounting filesystem as read-only [ 287.439266][ T6240] bn = 0, index = 0 [ 287.443185][ T6240] bn = 0, index = 0 [ 287.447018][ T6240] jfs_lookup: dtSearch returned -5 [ 287.453776][ T6239] btstack dump: [ 287.457251][ T6239] bn = 0, index = 0 [ 287.461044][ T6239] bn = 0, index = 0 [ 287.465006][ T6239] bn = 0, index = 0 [ 287.468807][ T6239] bn = 0, index = 0 [ 287.472706][ T6239] bn = 0, index = 0 [ 287.476517][ T6239] bn = 0, index = 0 [ 287.480327][ T6239] bn = 0, index = 0 [ 287.484336][ T6239] bn = 0, index = 0 [ 287.492413][ T6239] jfs_lookup: dtSearch returned -5 [ 287.497688][ T6241] ERROR: (device loop0): dtSearch: stack overrun! [ 287.497688][ T6241] [ 287.508546][ T6241] btstack dump: [ 287.512117][ T6241] bn = 0, index = 0 [ 287.519417][ T6241] bn = 0, index = 0 [ 287.523649][ T6241] bn = 0, index = 0 [ 287.527580][ T6241] bn = 0, index = 0 [ 287.531392][ T6241] bn = 0, index = 0 [ 287.535276][ T6241] bn = 0, index = 0 [ 287.539088][ T6241] bn = 0, index = 0 [ 287.560372][ T6241] bn = 0, index = 0 [ 287.564395][ T6241] jfs_lookup: dtSearch returned -5 [ 287.626858][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 287.789949][ T6250] loop0: detected capacity change from 0 to 512 [ 287.864210][ T6250] EXT4-fs (loop0): fragment/cluster size (268435456) != block size (4096) [ 288.234135][ T6265] loop4: detected capacity change from 0 to 512 [ 288.290971][ T6265] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.302193][ T6265] ext4 filesystem being mounted at /root/syzkaller-testdir2692151674/syzkaller.HKUg92/93/file0 supports timestamps until 2038 (0x7fffffff) [ 288.430099][ T6275] loop4: detected capacity change from 0 to 64 [ 288.442349][ T3615] Bluetooth: hci2: command 0x0406 tx timeout [ 288.448979][ T3615] Bluetooth: hci3: command 0x0406 tx timeout [ 288.610902][ T6278] loop4: detected capacity change from 0 to 64 [ 288.638440][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.646684][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.754249][ T6284] loop0: detected capacity change from 0 to 256 [ 288.818376][ T6284] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 289.170887][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.178453][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.417754][ T6317] loop4: detected capacity change from 0 to 64 [ 289.563515][ T6063] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.578926][ T6063] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.593569][ T6063] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.607646][ T6063] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.642777][ T6319] loop4: detected capacity change from 0 to 64 [ 289.669411][ T6315] loop0: detected capacity change from 0 to 32768 [ 289.738618][ T6315] ERROR: (device loop0): dtSearch: stack overrun! [ 289.738618][ T6315] [ 289.766120][ T6315] ERROR: (device loop0): remounting filesystem as read-only [ 289.777367][ T6330] loop2: detected capacity change from 0 to 64 [ 289.786194][ T6315] btstack dump: [ 289.799263][ T6315] bn = 0, index = 0 [ 289.810025][ T6315] bn = 0, index = 0 [ 289.818606][ T6315] bn = 0, index = 0 [ 289.832594][ T6315] bn = 0, index = 0 [ 289.852211][ T6315] bn = 0, index = 0 [ 289.880116][ T6315] bn = 0, index = 0 [ 289.926635][ T6315] bn = 0, index = 0 [ 289.962619][ T6315] bn = 0, index = 0 [ 289.975409][ T6315] jfs_lookup: dtSearch returned -5 [ 289.980738][ T6331] ERROR: (device loop0): dtSearch: stack overrun! [ 289.980738][ T6331] [ 290.026718][ T6331] btstack dump: [ 290.045714][ T6331] bn = 0, index = 0 [ 290.055935][ T6331] bn = 0, index = 0 [ 290.063944][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.071338][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.079241][ T6331] bn = 0, index = 0 [ 290.083416][ T6331] bn = 0, index = 0 [ 290.087382][ T6331] bn = 0, index = 0 [ 290.091374][ T6331] bn = 0, index = 0 [ 290.095415][ T6331] bn = 0, index = 0 [ 290.106179][ T6331] bn = 0, index = 0 [ 290.118210][ T6331] jfs_lookup: dtSearch returned -5 [ 290.221477][ T6352] loop4: detected capacity change from 0 to 4096 [ 290.338722][ T6356] loop1: detected capacity change from 0 to 4096 [ 290.360565][ T6358] loop3: detected capacity change from 0 to 4096 [ 290.421822][ T6364] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.471721][ T6365] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.491837][ T6366] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.538385][ T6347] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 290.554224][ T6356] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 290.556315][ T6358] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 290.574172][ T6347] NILFS (loop4): repaired inode bitmap for reserved inodes [ 290.583278][ T6356] NILFS (loop1): repaired inode bitmap for reserved inodes [ 290.608036][ T6358] NILFS (loop3): repaired inode bitmap for reserved inodes [ 290.659369][ T6368] loop0: detected capacity change from 0 to 4096 [ 290.787290][ T6377] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.871261][ T6368] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 290.886351][ T6368] NILFS (loop0): repaired inode bitmap for reserved inodes [ 291.152460][ T5707] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 291.194617][ T6408] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.209060][ T6408] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.217854][ T6404] loop3: detected capacity change from 0 to 4096 [ 291.317700][ T6417] Zero length message leads to an empty skb [ 291.319836][ T6418] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.359516][ T6404] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 291.364563][ T6421] loop2: detected capacity change from 0 to 256 [ 291.368639][ T6404] NILFS (loop3): repaired inode bitmap for reserved inodes [ 291.404007][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 291.532697][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 291.555443][ T5707] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 291.584047][ T6432] loop0: detected capacity change from 0 to 256 [ 291.589902][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 291.593172][ T6433] loop3: detected capacity change from 0 to 256 [ 291.619322][ T5707] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 291.770239][ T6439] loop1: detected capacity change from 0 to 256 [ 291.786800][ T6441] loop2: detected capacity change from 0 to 512 [ 291.793616][ T5707] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 291.803006][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.810239][ T6444] loop3: detected capacity change from 0 to 256 [ 291.821173][ T5707] usb 5-1: Product: syz [ 291.831483][ T5707] usb 5-1: Manufacturer: syz [ 291.836970][ T5707] usb 5-1: SerialNumber: syz [ 291.844423][ T5707] usb 5-1: config 0 descriptor?? [ 291.895010][ T6441] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 291.913553][ T5707] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 291.921007][ T6447] loop0: detected capacity change from 0 to 4096 [ 291.932494][ T6441] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/90/file0 supports timestamps until 2038 (0x7fffffff) [ 291.971449][ T5707] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 291.988952][ T6450] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.041244][ T6447] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 292.052676][ T6447] NILFS (loop0): repaired inode bitmap for reserved inodes [ 292.166863][ T5707] usb 5-1: USB disconnect, device number 3 [ 292.212007][ T6461] loop2: detected capacity change from 0 to 256 [ 292.220853][ T5707] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 292.253275][ T5707] iuu_phoenix 5-1:0.0: device disconnected [ 292.279601][ T6465] loop3: detected capacity change from 0 to 256 [ 292.311463][ T6467] loop0: detected capacity change from 0 to 256 [ 292.413817][ T6471] loop1: detected capacity change from 0 to 256 [ 292.424614][ T6473] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.434952][ T6473] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.492064][ T6475] loop3: detected capacity change from 0 to 256 [ 292.515096][ T6477] loop2: detected capacity change from 0 to 256 [ 292.749751][ T6494] loop4: detected capacity change from 0 to 256 [ 292.807044][ T6499] loop1: detected capacity change from 0 to 256 [ 292.903714][ T6508] bond0: (slave caif0): Error: Device type is different from other slaves [ 292.986692][ T6513] bond0: (slave caif0): Error: Device type is different from other slaves [ 293.008694][ T6515] loop2: detected capacity change from 0 to 256 [ 293.015230][ T6514] bond0: (slave caif0): Error: Device type is different from other slaves [ 293.244242][ T3615] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 293.261172][ T3615] Bluetooth: hci0: Injecting HCI hardware error event [ 293.286385][ T3555] Bluetooth: hci0: hardware error 0x00 [ 293.963151][ T3585] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 293.979148][ T3585] Bluetooth: hci3: Injecting HCI hardware error event [ 293.987827][ T146] Bluetooth: hci3: hardware error 0x00 [ 294.192610][ T5845] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 294.201150][ T5845] Bluetooth: hci4: Injecting HCI hardware error event [ 294.210234][ T3541] Bluetooth: hci4: hardware error 0x00 [ 294.362478][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 294.612467][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 294.640153][ T6617] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 294.732696][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.752850][ T6621] loop4: detected capacity change from 0 to 4096 [ 294.755855][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.772498][ T5845] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 294.775923][ T21] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 294.800833][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.834694][ T21] usb 1-1: config 0 descriptor?? [ 295.042447][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 295.182642][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.205026][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.235375][ T5845] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 295.258141][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.276342][ T5845] usb 2-1: config 0 descriptor?? [ 295.287453][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 295.287467][ T25] audit: type=1804 audit(1716913210.007:46): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/112/file0" dev="sda1" ino=1965 res=1 errno=0 [ 295.316467][ T21] lenovo 0003:17EF:6047.0001: global environment stack underflow [ 295.349643][ T21] lenovo 0003:17EF:6047.0001: item 0 4 1 11 parsing failed [ 295.376504][ T21] lenovo 0003:17EF:6047.0001: hid_parse failed [ 295.398041][ T21] lenovo: probe of 0003:17EF:6047.0001 failed with error -22 [ 295.541285][ T5707] usb 1-1: USB disconnect, device number 2 [ 295.600832][ T6624] loop2: detected capacity change from 0 to 40427 [ 295.658360][ T6624] F2FS-fs (loop2): invalid crc value [ 295.671681][ T6624] F2FS-fs (loop2): Found nat_bits in checkpoint [ 295.704965][ T6624] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 295.745582][ T4458] attempt to access beyond end of device [ 295.745582][ T4458] loop2: rw=2049, want=45104, limit=40427 [ 295.772542][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 295.813752][ T5845] lenovo 0003:17EF:6047.0002: global environment stack underflow [ 295.821485][ T5845] lenovo 0003:17EF:6047.0002: item 0 4 1 11 parsing failed [ 295.842857][ T5845] lenovo 0003:17EF:6047.0002: hid_parse failed [ 295.861769][ T5845] lenovo: probe of 0003:17EF:6047.0002 failed with error -22 [ 296.012593][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 296.028380][ T1066] usb 2-1: USB disconnect, device number 3 [ 296.142733][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 296.158063][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 296.168842][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 296.190956][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 296.353519][ T21] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 296.374821][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.401014][ T21] usb 5-1: Product: syz [ 296.415410][ T21] usb 5-1: Manufacturer: syz [ 296.425821][ T21] usb 5-1: SerialNumber: syz [ 296.438189][ T21] usb 5-1: config 0 descriptor?? [ 296.530214][ T21] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 296.561492][ T21] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 296.661413][ T25] audit: type=1804 audit(1716913211.377:47): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/118/bus/file0" dev="overlay" ino=1952 res=1 errno=0 [ 296.747250][ T21] usb 5-1: USB disconnect, device number 4 [ 296.761962][ T21] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 296.780692][ T21] iuu_phoenix 5-1:0.0: device disconnected [ 296.798643][ T25] audit: type=1804 audit(1716913211.517:48): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3283339789/syzkaller.rIqjEB/141/bus/file0" dev="overlay" ino=1972 res=1 errno=0 [ 296.831871][ T3616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.924771][ T3616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.960822][ T25] audit: type=1804 audit(1716913211.677:49): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2961794728/syzkaller.ATUUzO/111/file0" dev="sda1" ino=1946 res=1 errno=0 [ 297.048721][ T3616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.081048][ T6691] loop1: detected capacity change from 0 to 4096 [ 297.106188][ T6678] chnl_net:caif_netlink_parms(): no params data found [ 297.163842][ T3616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.214242][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.221413][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.229552][ T6678] device bridge_slave_0 entered promiscuous mode [ 297.246010][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.258590][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.268021][ T6678] device bridge_slave_1 entered promiscuous mode [ 297.321674][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 297.360325][ T6678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.384822][ T25] audit: type=1804 audit(1716913212.107:50): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3283339789/syzkaller.rIqjEB/143/bus/file0" dev="overlay" ino=1960 res=1 errno=0 [ 297.420991][ T6678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.545753][ T6678] team0: Port device team_slave_0 added [ 297.562589][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 297.567444][ T6678] team0: Port device team_slave_1 added [ 297.609698][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.613735][ T6713] loop4: detected capacity change from 0 to 4096 [ 297.624400][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.655903][ T6678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.682604][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.682642][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.690225][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.727952][ T6678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.740065][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.759957][ T21] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 297.772242][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.794612][ T6678] device hsr_slave_0 entered promiscuous mode [ 297.802998][ T21] usb 3-1: config 0 descriptor?? [ 297.808853][ T3615] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 297.812815][ T6678] device hsr_slave_1 entered promiscuous mode [ 297.823592][ T6678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.831171][ T6678] Cannot create hsr debugfs directory [ 297.940556][ T25] audit: type=1804 audit(1716913212.657:51): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/120/bus/file0" dev="overlay" ino=1964 res=1 errno=0 [ 298.040786][ T25] audit: type=1804 audit(1716913212.757:52): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2692151674/syzkaller.HKUg92/133/bus/file0" dev="overlay" ino=1970 res=1 errno=0 [ 298.122654][ T3615] usb 2-1: Using ep0 maxpacket: 8 [ 298.165997][ T25] audit: type=1804 audit(1716913212.887:53): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/122/bus/file0" dev="overlay" ino=1960 res=1 errno=0 [ 298.243044][ T3615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.254230][ T3615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.264793][ T3615] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 298.274112][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.284529][ T3615] usb 2-1: config 0 descriptor?? [ 298.324194][ T21] lenovo 0003:17EF:6047.0003: global environment stack underflow [ 298.331944][ T21] lenovo 0003:17EF:6047.0003: item 0 4 1 11 parsing failed [ 298.341292][ T21] lenovo 0003:17EF:6047.0003: hid_parse failed [ 298.349835][ T21] lenovo: probe of 0003:17EF:6047.0003 failed with error -22 [ 298.483142][ T6678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.502545][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 298.513785][ T6678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.538423][ T6678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.548740][ T3585] usb 3-1: USB disconnect, device number 2 [ 298.587114][ T6678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.664918][ T3616] device hsr_slave_0 left promiscuous mode [ 298.672549][ T5845] Bluetooth: hci0: command 0x0409 tx timeout [ 298.678970][ T3616] device hsr_slave_1 left promiscuous mode [ 298.691435][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.707410][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.727464][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.738756][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.753717][ T3616] device bridge_slave_1 left promiscuous mode [ 298.760213][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.776055][ T3616] device bridge_slave_0 left promiscuous mode [ 298.785024][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.796321][ T3615] lenovo 0003:17EF:6047.0004: global environment stack underflow [ 298.809685][ T3615] lenovo 0003:17EF:6047.0004: item 0 4 1 11 parsing failed [ 298.819869][ T3616] device veth1_macvtap left promiscuous mode [ 298.825899][ T3615] lenovo 0003:17EF:6047.0004: hid_parse failed [ 298.825934][ T3615] lenovo: probe of 0003:17EF:6047.0004 failed with error -22 [ 298.860579][ T6739] loop3: detected capacity change from 0 to 32768 [ 298.864060][ T3616] device veth0_macvtap left promiscuous mode [ 298.874403][ T3616] device veth1_vlan left promiscuous mode [ 298.880194][ T3616] device veth0_vlan left promiscuous mode [ 298.892523][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.912521][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.935507][ T21] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.944783][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.954467][ T21] usb 5-1: config 0 descriptor?? [ 298.967835][ T6739] XFS (loop3): Mounting V5 Filesystem [ 299.024646][ T6739] XFS (loop3): Starting recovery (logdev: internal) [ 299.045342][ T1066] usb 2-1: USB disconnect, device number 4 [ 299.050208][ T6739] XFS (loop3): Ending recovery (logdev: internal) [ 299.085914][ T4061] XFS (loop3): Unmounting Filesystem [ 299.121596][ T25] audit: type=1326 audit(1716913213.837:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c994ee9 code=0x0 [ 299.352456][ T3616] team0 (unregistering): Port device team_slave_1 removed [ 299.372104][ T3616] team0 (unregistering): Port device team_slave_0 removed [ 299.398326][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.421165][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.430398][ T25] audit: type=1804 audit(1716913214.137:55): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/128/bus/file0" dev="overlay" ino=1964 res=1 errno=0 [ 299.540620][ T3616] bond0 (unregistering): Released all slaves [ 299.593283][ T6754] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 299.740972][ T6678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.773427][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.786613][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.807635][ T6678] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.836755][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.847588][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.856474][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.863612][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.885303][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.893680][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.903429][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.912124][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.919315][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.928022][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.954149][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.975412][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.994275][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.023040][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.036720][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.055674][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.068731][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.083546][ T6768] loop2: detected capacity change from 0 to 128 [ 300.090643][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.122631][ T6678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.132718][ T21] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 300.134816][ T6678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.181628][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.196246][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.368663][ T21] usb 5-1: USB disconnect, device number 5 [ 300.431008][ T6779] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 300.499915][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.508040][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.541764][ T6678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.601909][ T6756] loop1: detected capacity change from 0 to 40427 [ 300.605546][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.629892][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.681616][ T6756] F2FS-fs (loop1): invalid crc value [ 300.690776][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.706284][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.723672][ T6756] F2FS-fs (loop1): Found nat_bits in checkpoint [ 300.729736][ T6678] device veth0_vlan entered promiscuous mode [ 300.747429][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.752705][ T5707] Bluetooth: hci0: command 0x041b tx timeout [ 300.772761][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.795222][ T6678] device veth1_vlan entered promiscuous mode [ 300.856910][ T6756] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 300.865139][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.883475][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.905641][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.928898][ T5848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.969675][ T6678] device veth0_macvtap entered promiscuous mode [ 300.971878][ T6804] loop4: detected capacity change from 0 to 128 [ 300.997929][ T6678] device veth1_macvtap entered promiscuous mode [ 301.009464][ T4071] attempt to access beyond end of device [ 301.009464][ T4071] loop1: rw=2049, want=45104, limit=40427 [ 301.031334][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.044739][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.077586][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.109609][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.130673][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.145812][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.159242][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.169770][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.180536][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.200822][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.214594][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.242081][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.261428][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.286102][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.319148][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.341139][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.374457][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.397695][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.431172][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.452481][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.474322][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.495886][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.518033][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.539123][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.560769][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.585203][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.629872][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.643064][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.654294][ T6678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.684782][ T6678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.704656][ T6678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.718116][ T25] audit: type=1326 audit(1716913216.437:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965074eee9 code=0x0 [ 301.773593][ T6678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.931531][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.970359][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.013756][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.047074][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.082497][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.114045][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.230486][ T6810] loop2: detected capacity change from 0 to 40427 [ 302.288695][ T6810] F2FS-fs (loop2): invalid crc value [ 302.328124][ T6810] F2FS-fs (loop2): Found nat_bits in checkpoint [ 302.452069][ T6810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 302.571061][ T4458] attempt to access beyond end of device [ 302.571061][ T4458] loop2: rw=2049, want=45104, limit=40427 [ 302.745474][ T6853] tap0: tun_chr_ioctl cmd 1074025676 [ 302.750787][ T6853] tap0: owner set to 0 [ 302.779115][ T6855] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 302.783361][ T6853] tap0: tun_chr_ioctl cmd 35108 [ 302.832600][ T1066] Bluetooth: hci0: command 0x040f tx timeout [ 302.867549][ T6855] netlink: 184248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.009047][ T6859] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 303.062450][ T6859] netlink: 184248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.081251][ T6825] loop1: detected capacity change from 0 to 40427 [ 303.180588][ T6825] F2FS-fs (loop1): invalid crc value [ 303.218232][ T6825] F2FS-fs (loop1): Found nat_bits in checkpoint [ 303.225842][ T5848] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 303.349519][ T6845] loop3: detected capacity change from 0 to 32768 [ 303.367253][ T6825] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 303.503156][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 303.512583][ T6845] XFS (loop3): Mounting V5 Filesystem [ 303.545270][ T4071] attempt to access beyond end of device [ 303.545270][ T4071] loop1: rw=2049, want=45104, limit=40427 [ 303.626486][ T6845] XFS (loop3): Starting recovery (logdev: internal) [ 303.648720][ T6887] loop4: detected capacity change from 0 to 512 [ 303.652102][ T6845] XFS (loop3): Ending recovery (logdev: internal) [ 303.668330][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.680184][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.694464][ T5848] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 303.703691][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.713396][ T5848] usb 1-1: config 0 descriptor?? [ 303.804684][ T6894] loop2: detected capacity change from 0 to 64 [ 303.835882][ T6887] EXT4-fs (loop4): 1 orphan inode deleted [ 303.841658][ T6887] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.863630][ T4061] XFS (loop3): Unmounting Filesystem [ 303.951786][ T6887] ext4 filesystem being mounted at /root/syzkaller-testdir2692151674/syzkaller.HKUg92/146/file1 supports timestamps until 2038 (0x7fffffff) [ 304.029093][ T25] audit: type=1804 audit(1716913218.747:57): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2692151674/syzkaller.HKUg92/146/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 304.244322][ T5848] lenovo 0003:17EF:6047.0006: global environment stack underflow [ 304.261417][ T5848] lenovo 0003:17EF:6047.0006: item 0 4 1 11 parsing failed [ 304.272078][ T6899] tap0: tun_chr_ioctl cmd 1074025676 [ 304.291404][ T5848] lenovo 0003:17EF:6047.0006: hid_parse failed [ 304.305924][ T6899] tap0: owner set to 0 [ 304.310974][ T5848] lenovo: probe of 0003:17EF:6047.0006 failed with error -22 [ 304.325941][ T6899] tap0: tun_chr_ioctl cmd 35108 [ 304.494969][ T5848] usb 1-1: USB disconnect, device number 3 [ 304.646023][ T6927] loop1: detected capacity change from 0 to 64 [ 304.840620][ T6938] loop4: detected capacity change from 0 to 512 [ 304.867585][ T6939] loop2: detected capacity change from 0 to 512 [ 304.913220][ T5706] Bluetooth: hci0: command 0x0419 tx timeout [ 304.991496][ T6938] EXT4-fs (loop4): 1 orphan inode deleted [ 305.005250][ T6947] tap0: tun_chr_ioctl cmd 1074025676 [ 305.015071][ T6938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.028166][ T6939] EXT4-fs (loop2): 1 orphan inode deleted [ 305.034932][ T6938] ext4 filesystem being mounted at /root/syzkaller-testdir2692151674/syzkaller.HKUg92/153/file1 supports timestamps until 2038 (0x7fffffff) [ 305.059854][ T6939] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.073300][ T6947] tap0: owner set to 0 [ 305.078020][ T6952] tap0: tun_chr_ioctl cmd 35108 [ 305.112511][ T6939] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/132/file1 supports timestamps until 2038 (0x7fffffff) [ 305.127073][ T25] audit: type=1804 audit(1716913219.837:58): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2692151674/syzkaller.HKUg92/153/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 305.239047][ T6915] loop3: detected capacity change from 0 to 32768 [ 305.257000][ T6956] loop0: detected capacity change from 0 to 512 [ 305.281880][ T25] audit: type=1804 audit(1716913219.997:59): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2961794728/syzkaller.ATUUzO/132/file1/bus" dev="loop2" ino=16 res=1 errno=0 [ 305.391142][ T6915] XFS (loop3): Mounting V5 Filesystem [ 305.432602][ T6956] EXT4-fs (loop0): 1 orphan inode deleted [ 305.439113][ T6956] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.490391][ T6956] ext4 filesystem being mounted at /root/syzkaller-testdir16785433/syzkaller.uz0Z3r/7/file1 supports timestamps until 2038 (0x7fffffff) [ 305.521434][ T6980] loop4: detected capacity change from 0 to 512 [ 305.581601][ T25] audit: type=1804 audit(1716913220.297:60): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir16785433/syzkaller.uz0Z3r/7/file1/bus" dev="loop0" ino=16 res=1 errno=0 [ 305.624505][ T6915] XFS (loop3): Starting recovery (logdev: internal) [ 305.668635][ T6915] XFS (loop3): Ending recovery (logdev: internal) [ 305.668823][ T6980] EXT4-fs (loop4): 1 orphan inode deleted [ 305.724087][ T6980] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.737690][ T6980] ext4 filesystem being mounted at /root/syzkaller-testdir2692151674/syzkaller.HKUg92/155/file1 supports timestamps until 2038 (0x7fffffff) [ 305.797052][ T25] audit: type=1804 audit(1716913220.517:61): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2692151674/syzkaller.HKUg92/155/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 305.862108][ T4061] XFS (loop3): Unmounting Filesystem [ 305.952732][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 306.099547][ T7002] loop4: detected capacity change from 0 to 256 [ 306.160614][ T7004] loop2: detected capacity change from 0 to 512 [ 306.266208][ T7004] EXT4-fs (loop2): 1 orphan inode deleted [ 306.271981][ T7004] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 306.295829][ T7004] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/136/file1 supports timestamps until 2038 (0x7fffffff) [ 306.362895][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.373925][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 306.381411][ T25] audit: type=1804 audit(1716913221.097:62): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2961794728/syzkaller.ATUUzO/136/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 306.415233][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.436440][ T5901] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 306.446602][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.456380][ T5901] usb 2-1: config 0 descriptor?? [ 306.633872][ T7019] loop2: detected capacity change from 0 to 512 [ 306.710601][ T7019] EXT4-fs (loop2): 1 orphan inode deleted [ 306.737740][ T7019] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 306.762226][ T7019] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/137/file1 supports timestamps until 2038 (0x7fffffff) [ 306.808640][ T7010] loop4: detected capacity change from 0 to 32768 [ 306.830576][ T25] audit: type=1804 audit(1716913221.547:63): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2961794728/syzkaller.ATUUzO/137/file1/bus" dev="loop2" ino=16 res=1 errno=0 [ 306.837697][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.887229][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.910527][ T5848] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 306.922118][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.939347][ T7014] loop3: detected capacity change from 0 to 40427 [ 306.940873][ T5848] usb 1-1: config 0 descriptor?? [ 306.957466][ T7010] XFS (loop4): Mounting V5 Filesystem [ 306.987040][ T7014] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 306.996448][ T7014] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 307.023801][ T7010] XFS (loop4): Starting recovery (logdev: internal) [ 307.030564][ T7014] F2FS-fs (loop3): invalid crc value [ 307.035818][ T7010] XFS (loop4): Ending recovery (logdev: internal) [ 307.050145][ T7014] F2FS-fs (loop3): Found nat_bits in checkpoint [ 307.104772][ T4495] XFS (loop4): Unmounting Filesystem [ 307.115314][ T7037] loop2: detected capacity change from 0 to 512 [ 307.130482][ T7014] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 307.156909][ T7014] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 307.215071][ T7037] EXT4-fs (loop2): 1 orphan inode deleted [ 307.221007][ T7037] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 307.232460][ T7037] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/138/file1 supports timestamps until 2038 (0x7fffffff) [ 307.289230][ T25] audit: type=1804 audit(1716913222.007:64): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2961794728/syzkaller.ATUUzO/138/file1/bus" dev="loop2" ino=16 res=1 errno=0 [ 307.314602][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.303432][ T5901] uclogic 0003:256C:006D.0007: interface is invalid, ignoring [ 309.350313][ T25] audit: type=1800 audit(1716913224.067:65): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1958 res=0 errno=0 [ 309.382126][ T7061] loop4: detected capacity change from 0 to 64 [ 309.762676][ T5848] uclogic 0003:256C:006D.0008: interface is invalid, ignoring [ 309.994665][ T7063] device wireguard0 entered promiscuous mode [ 310.094007][ T5699] usb 2-1: USB disconnect, device number 5 [ 310.151518][ T5706] usb 1-1: USB disconnect, device number 4 [ 311.031835][ T7072] device wireguard0 entered promiscuous mode [ 311.057172][ T7076] loop2: detected capacity change from 0 to 512 [ 311.196342][ T7076] EXT4-fs (loop2): 1 orphan inode deleted [ 311.234653][ T7076] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.248244][ T7081] loop1: detected capacity change from 0 to 512 [ 311.287165][ T7076] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/141/file1 supports timestamps until 2038 (0x7fffffff) [ 311.356775][ T7093] loop4: detected capacity change from 0 to 512 [ 311.367020][ T7081] EXT4-fs (loop1): 1 orphan inode deleted [ 311.379602][ T7081] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.400072][ T7081] ext4 filesystem being mounted at /root/syzkaller-testdir3283339789/syzkaller.rIqjEB/156/file1 supports timestamps until 2038 (0x7fffffff) [ 311.422548][ T25] audit: type=1804 audit(1716913226.137:66): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2961794728/syzkaller.ATUUzO/141/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 311.440003][ T7066] loop3: detected capacity change from 0 to 32768 [ 311.478511][ T7093] EXT4-fs (loop4): 1 orphan inode deleted [ 311.484625][ T7093] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.487928][ T25] audit: type=1804 audit(1716913226.207:67): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3283339789/syzkaller.rIqjEB/156/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 311.496675][ T7093] ext4 filesystem being mounted at /root/syzkaller-testdir2692151674/syzkaller.HKUg92/164/file1 supports timestamps until 2038 (0x7fffffff) [ 311.744273][ T7102] device wireguard0 entered promiscuous mode [ 312.303654][ T7066] XFS (loop3): Mounting V5 Filesystem [ 312.335593][ T7110] xt_l2tp: v2 sid > 0xffff: 16777216 [ 312.359530][ T25] audit: type=1804 audit(1716913227.077:68): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2692151674/syzkaller.HKUg92/164/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 312.417747][ T7066] XFS (loop3): Starting recovery (logdev: internal) [ 312.480544][ T7066] XFS (loop3): Ending recovery (logdev: internal) [ 312.588122][ T7125] loop2: detected capacity change from 0 to 512 [ 312.605028][ T4061] XFS (loop3): Unmounting Filesystem [ 312.738299][ T7129] device wireguard0 entered promiscuous mode [ 313.360681][ T7125] EXT4-fs (loop2): 1 orphan inode deleted [ 313.382548][ T7125] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 313.688883][ T7125] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/144/file1 supports timestamps until 2038 (0x7fffffff) [ 314.130272][ T7141] device wireguard0 entered promiscuous mode [ 314.191607][ T25] audit: type=1804 audit(1716913228.917:69): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2961794728/syzkaller.ATUUzO/144/file1/bus" dev="loop2" ino=16 res=1 errno=0 [ 314.217981][ T7148] loop1: detected capacity change from 0 to 512 [ 314.321663][ T7148] EXT4-fs (loop1): 1 orphan inode deleted [ 314.327819][ T7148] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 314.354070][ T7148] ext4 filesystem being mounted at /root/syzkaller-testdir3283339789/syzkaller.rIqjEB/159/file1 supports timestamps until 2038 (0x7fffffff) [ 314.483332][ T25] audit: type=1804 audit(1716913229.207:70): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3283339789/syzkaller.rIqjEB/159/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 314.804386][ T7163] device wireguard0 entered promiscuous mode [ 315.298355][ T7157] loop2: detected capacity change from 0 to 512 [ 315.444739][ T7157] EXT4-fs (loop2): 1 orphan inode deleted [ 315.450511][ T7157] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 315.482666][ T7157] ext4 filesystem being mounted at /root/syzkaller-testdir2961794728/syzkaller.ATUUzO/145/file1 supports timestamps until 2038 (0x7fffffff) [ 315.566130][ T25] audit: type=1804 audit(1716913230.287:71): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2961794728/syzkaller.ATUUzO/145/file1/bus" dev="loop2" ino=16 res=1 errno=0 [ 315.686307][ T7193] syz-executor.0[7193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.686414][ T7193] syz-executor.0[7193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.742032][ T7196] syz-executor.3[7196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.754490][ T7196] syz-executor.3[7196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.849477][ T7202] syz-executor.0[7202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.863123][ T7202] syz-executor.0[7202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.875185][ T7205] xt_l2tp: v2 sid > 0xffff: 16777216 [ 315.894073][ T7203] syz-executor.4[7203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.894161][ T7203] syz-executor.4[7203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.915876][ T7208] syz-executor.2[7208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.940611][ T7208] syz-executor.2[7208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.715955][ T4071] bond0: (slave syz_tun): Releasing backup interface [ 316.745446][ T4071] device syz_tun left promiscuous mode [ 317.077450][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.083861][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.099863][ T7280] chnl_net:caif_netlink_parms(): no params data found [ 317.230098][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.256612][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.292747][ T7280] device bridge_slave_0 entered promiscuous mode [ 317.306463][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.327866][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.345219][ T7280] device bridge_slave_1 entered promiscuous mode [ 317.447416][ T7280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.460508][ T7280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.464610][ T7313] syz-executor.0 (7313) used greatest stack depth: 18680 bytes left [ 317.533348][ T7280] team0: Port device team_slave_0 added [ 317.550437][ T7325] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 317.563435][ T7280] team0: Port device team_slave_1 added [ 317.954009][ T7330] device wireguard0 entered promiscuous mode [ 318.347412][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.416948][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.471694][ T7280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.516843][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.534570][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.560680][ T7280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.683295][ T7280] device hsr_slave_0 entered promiscuous mode [ 318.696078][ T7280] device hsr_slave_1 entered promiscuous mode [ 318.716563][ T7280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.737029][ T7280] Cannot create hsr debugfs directory [ 318.965730][ T7280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.993713][ T5848] Bluetooth: hci3: command 0x0409 tx timeout [ 319.089170][ T7280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.205005][ T7280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.309372][ T7280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.497562][ T7280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.516568][ T7280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.554168][ T7280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.577969][ T7280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.821892][ T7280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.893066][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.901579][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.917109][ T7414] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 319.923051][ T7280] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.959851][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.970955][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.986777][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.993927][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.023143][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.032042][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.049002][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.058109][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.065260][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.100811][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.193655][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.207910][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.231235][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.246827][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.280770][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.289781][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.309979][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.329350][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.347930][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.380318][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.397233][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.577169][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.586123][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.609690][ T7280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.627204][ T7401] loop2: detected capacity change from 0 to 32768 [ 320.651904][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.659462][ T7441] loop0: detected capacity change from 0 to 2048 [ 320.665634][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.699164][ T7401] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 320.699202][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.715525][ T7441] loop0: p2 < > [ 320.725472][ T7401] dlm: no local IP address has been set [ 320.729676][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.747466][ T7280] device veth0_vlan entered promiscuous mode [ 320.750374][ T7401] dlm: cannot start dlm midcomms -107 [ 320.766110][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.769323][ T7401] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 320.776280][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.807403][ T7280] device veth1_vlan entered promiscuous mode [ 320.865831][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.885496][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.912065][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.949821][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.987683][ T7280] device veth0_macvtap entered promiscuous mode [ 321.011725][ T7280] device veth1_macvtap entered promiscuous mode [ 321.072633][ T5699] Bluetooth: hci3: command 0x041b tx timeout [ 321.095164][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.127744][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.164165][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.194593][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.230407][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.252225][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.282651][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.315448][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.315560][ T7472] loop3: detected capacity change from 0 to 2048 [ 321.335264][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.351710][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.363033][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.617811][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.940024][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.057305][ T25] audit: type=1804 audit(1716913236.727:72): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1006718241/syzkaller.iuaIQS/186/bus" dev="sda1" ino=1938 res=1 errno=0 [ 322.093725][ T7472] loop3: p2 < > [ 322.107801][ T7478] device wireguard0 entered promiscuous mode [ 322.127765][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.136523][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.145274][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.154269][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.171690][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.192195][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.218135][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.268693][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.305666][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.341498][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.360927][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.381345][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.391496][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.410274][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.421106][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.442490][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.466798][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.486939][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.506490][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.562468][ T7280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.597372][ T7280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.617486][ T7280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.636362][ T7280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.888232][ T3725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.923066][ T3725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.962607][ T7509] serio: Serial port pts0 [ 322.977423][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.987684][ T7510] loop2: detected capacity change from 0 to 2048 [ 323.001187][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.024620][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.062438][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.098307][ T7510] loop2: p2 < > [ 323.154823][ T5699] Bluetooth: hci3: command 0x040f tx timeout [ 323.273040][ T7524] Invalid ELF header len 1 [ 323.273331][ T7527] Invalid ELF header len 1 [ 323.283543][ T7529] Invalid ELF header len 1 [ 323.340861][ T7533] Invalid ELF header len 1 [ 323.376594][ T7537] serio: Serial port pts0 [ 323.394404][ T7536] Invalid ELF header len 1 [ 323.450837][ T7544] Invalid ELF header len 1 [ 323.655747][ T7542] loop0: detected capacity change from 0 to 32768 [ 323.686924][ T7542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7542) [ 323.735320][ T7542] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 323.744569][ T7542] BTRFS info (device loop0): turning off barriers [ 323.747006][ T7557] Invalid ELF header len 1 [ 323.751035][ T7542] BTRFS info (device loop0): max_inline at 0 [ 323.761517][ T7542] BTRFS info (device loop0): enabling auto defrag [ 323.768223][ T7542] BTRFS info (device loop0): force clearing of disk cache [ 323.775509][ T7542] BTRFS info (device loop0): allowing degraded mounts [ 323.782375][ T7542] BTRFS info (device loop0): doing ref verification [ 323.788980][ T7542] BTRFS info (device loop0): use no compression [ 323.795934][ T7542] BTRFS info (device loop0): using free space tree [ 323.803733][ T7542] BTRFS info (device loop0): has skinny extents [ 323.884382][ T7575] Invalid ELF header len 1 [ 323.904327][ T7577] Invalid ELF header len 1 [ 323.975497][ T7542] BTRFS info (device loop0): enabling ssd optimizations [ 323.985199][ T7542] BTRFS info (device loop0): clearing free space tree [ 323.992717][ T7542] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 324.001122][ T7591] Invalid ELF header len 1 [ 324.002900][ T7542] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 324.029487][ T7590] Invalid ELF header len 1 [ 324.039280][ T7542] BTRFS info (device loop0): creating free space tree [ 324.048614][ T7542] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 324.058253][ T7542] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 324.073661][ T7542] BTRFS info (device loop0): checking UUID tree [ 324.167123][ T21] [ 324.169479][ T21] ====================================================== [ 324.176492][ T21] WARNING: possible circular locking dependency detected [ 324.183514][ T21] 5.15.160-syzkaller #0 Not tainted [ 324.188710][ T21] ------------------------------------------------------ [ 324.195713][ T21] kworker/1:0/21 is trying to acquire lock: [ 324.201594][ T21] ffff8880203279c0 (&stab->lock){+.-.}-{2:2}, at: sock_map_delete_elem+0x161/0x230 [ 324.210887][ T21] [ 324.210887][ T21] but task is already holding lock: [ 324.218229][ T21] ffff888063597290 (&psock->link_lock){+...}-{2:2}, at: sock_map_unref+0xcc/0x5d0 [ 324.227452][ T21] [ 324.227452][ T21] which lock already depends on the new lock. [ 324.227452][ T21] [ 324.237836][ T21] [ 324.237836][ T21] the existing dependency chain (in reverse order) is: [ 324.246828][ T21] [ 324.246828][ T21] -> #1 (&psock->link_lock){+...}-{2:2}: [ 324.254632][ T21] lock_acquire+0x1db/0x4f0 [ 324.259663][ T21] _raw_spin_lock_bh+0x31/0x40 [ 324.264932][ T21] sock_map_update_common+0x31c/0x5b0 [ 324.270806][ T21] sock_map_update_elem_sys+0x440/0x770 [ 324.276853][ T21] map_update_elem+0x6a0/0x7c0 [ 324.282121][ T21] __sys_bpf+0x2fd/0x670 [ 324.286866][ T21] __x64_sys_bpf+0x78/0x90 [ 324.291785][ T21] do_syscall_64+0x3b/0xb0 [ 324.296704][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 324.303097][ T21] [ 324.303097][ T21] -> #0 (&stab->lock){+.-.}-{2:2}: [ 324.310371][ T21] validate_chain+0x1649/0x5930 [ 324.315725][ T21] __lock_acquire+0x1295/0x1ff0 [ 324.321074][ T21] lock_acquire+0x1db/0x4f0 [ 324.326092][ T21] _raw_spin_lock_bh+0x31/0x40 [ 324.331359][ T21] sock_map_delete_elem+0x161/0x230 [ 324.337058][ T21] bpf_prog_8161253d7ad234e1+0x3f/0xd24 [ 324.343107][ T21] bpf_trace_run2+0x19e/0x340 [ 324.348289][ T21] __bpf_trace_kfree+0x6e/0x90 [ 324.353556][ T21] kfree+0x22f/0x270 [ 324.357960][ T21] sock_map_unref+0x3ac/0x5d0 [ 324.363161][ T21] sock_hash_free+0x4d5/0x780 [ 324.368340][ T21] process_one_work+0x8a1/0x10c0 [ 324.373781][ T21] worker_thread+0xaca/0x1280 [ 324.378961][ T21] kthread+0x3f6/0x4f0 [ 324.383531][ T21] ret_from_fork+0x1f/0x30 [ 324.388450][ T21] [ 324.388450][ T21] other info that might help us debug this: [ 324.388450][ T21] [ 324.398660][ T21] Possible unsafe locking scenario: [ 324.398660][ T21] [ 324.406089][ T21] CPU0 CPU1 [ 324.411451][ T21] ---- ---- [ 324.416795][ T21] lock(&psock->link_lock); [ 324.421480][ T21] lock(&stab->lock); [ 324.428052][ T21] lock(&psock->link_lock); [ 324.435144][ T21] lock(&stab->lock); [ 324.439191][ T21] [ 324.439191][ T21] *** DEADLOCK *** [ 324.439191][ T21] [ 324.447334][ T21] 6 locks held by kworker/1:0/21: [ 324.452338][ T21] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 324.462672][ T21] #1: ffffc90000db7d20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 324.473698][ T21] #2: ffff8880202b4120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sock_hash_free+0x443/0x780 [ 324.483336][ T21] #3: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 324.492627][ T21] #4: ffff888063597290 (&psock->link_lock){+...}-{2:2}, at: sock_map_unref+0xcc/0x5d0 [ 324.502262][ T21] #5: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 324.511558][ T21] [ 324.511558][ T21] stack backtrace: [ 324.517455][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 5.15.160-syzkaller #0 [ 324.525525][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 324.535581][ T21] Workqueue: events bpf_map_free_deferred [ 324.541310][ T21] Call Trace: [ 324.544616][ T21] [ 324.547705][ T21] dump_stack_lvl+0x1e3/0x2d0 [ 324.552383][ T21] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 324.558026][ T21] ? print_circular_bug+0x12b/0x1a0 [ 324.563210][ T21] check_noncircular+0x2f8/0x3b0 [ 324.568236][ T21] ? add_chain_block+0x850/0x850 [ 324.573153][ T21] ? lockdep_lock+0x11f/0x2a0 [ 324.577813][ T21] ? deref_stack_reg+0xbe/0x110 [ 324.582652][ T21] validate_chain+0x1649/0x5930 [ 324.587484][ T21] ? hlock_conflict+0x53/0x1f0 [ 324.592234][ T21] ? check_noncircular+0x1e1/0x3b0 [ 324.597326][ T21] ? reacquire_held_locks+0x660/0x660 [ 324.602683][ T21] ? lockdep_unlock+0x166/0x300 [ 324.607519][ T21] ? lockdep_lock+0x2a0/0x2a0 [ 324.612179][ T21] ? lockdep_unlock+0x166/0x300 [ 324.617013][ T21] ? reacquire_held_locks+0x660/0x660 [ 324.622385][ T21] ? validate_chain+0x13bd/0x5930 [ 324.627411][ T21] ? mark_lock+0x98/0x340 [ 324.631723][ T21] __lock_acquire+0x1295/0x1ff0 [ 324.636561][ T21] lock_acquire+0x1db/0x4f0 [ 324.641073][ T21] ? sock_map_delete_elem+0x161/0x230 [ 324.646440][ T21] ? read_lock_is_recursive+0x10/0x10 [ 324.651798][ T21] ? sock_map_delete_elem+0x161/0x230 [ 324.657152][ T21] ? __bpf_trace_softirq+0x10/0x10 [ 324.662249][ T21] ? sock_map_delete_elem+0x161/0x230 [ 324.667608][ T21] _raw_spin_lock_bh+0x31/0x40 [ 324.672470][ T21] ? sock_map_delete_elem+0x161/0x230 [ 324.677851][ T21] sock_map_delete_elem+0x161/0x230 [ 324.683053][ T21] ? sock_map_update_elem+0x380/0x380 [ 324.688414][ T21] bpf_prog_8161253d7ad234e1+0x3f/0xd24 [ 324.693943][ T21] bpf_trace_run2+0x19e/0x340 [ 324.698610][ T21] ? bpf_trace_run1+0x2f0/0x2f0 [ 324.703440][ T21] ? sock_map_unref+0x3ac/0x5d0 [ 324.708274][ T21] ? do_raw_spin_lock+0x14a/0x370 [ 324.713282][ T21] ? __bpf_trace_softirq+0x10/0x10 [ 324.718395][ T21] ? sock_map_unref+0x3ac/0x5d0 [ 324.723232][ T21] __bpf_trace_kfree+0x6e/0x90 [ 324.727996][ T21] ? sock_map_unref+0x3ac/0x5d0 [ 324.732831][ T21] kfree+0x22f/0x270 [ 324.736711][ T21] ? sock_map_unref+0xcc/0x5d0 [ 324.741482][ T21] sock_map_unref+0x3ac/0x5d0 [ 324.746150][ T21] sock_hash_free+0x4d5/0x780 [ 324.750901][ T21] ? sock_hash_alloc+0x520/0x520 [ 324.755822][ T21] ? bpf_map_free_deferred+0x1d3/0x2e0 [ 324.761276][ T21] process_one_work+0x8a1/0x10c0 2024/05/28 16:20:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 324.766202][ T21] ? worker_detach_from_pool+0x260/0x260 [ 324.771820][ T21] ? _raw_spin_lock_irqsave+0x120/0x120 [ 324.777355][ T21] ? kthread_data+0x4e/0xc0 [ 324.781843][ T21] ? wq_worker_running+0x97/0x170 [ 324.786851][ T21] worker_thread+0xaca/0x1280 [ 324.791523][ T21] kthread+0x3f6/0x4f0 [ 324.795594][ T21] ? rcu_lock_release+0x20/0x20 [ 324.800428][ T21] ? kthread_blkcg+0xd0/0xd0 [ 324.804999][ T21] ret_from_fork+0x1f/0x30 [ 324.809424][ T21]