last executing test programs: 48.450980113s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "0096b2e46243b6a0", "d83000584724000000eade0d660607624300", "00001200"}, 0x38) 47.4085799s ago: executing program 3: socket$inet(0x2, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="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", 0x2000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53b, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00000000000000000000000000000000000000000000000000000000ffffffff"]) 45.842439563s ago: executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) 45.332052199s ago: executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x200000000000019d, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x47, 0x10001, 0x8, 0x1}, 0x48) pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='./file0\x00') bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000000), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/98}, 0x20) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000020000001c"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000033c0)='fd/3\x00') pread64(r3, &(0x7f0000000040)=""/123, 0x7b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r6, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) getdents(r5, &(0x7f0000000040)=""/104, 0x68) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000002c0)={0x6, 0x3}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x30, r0, 0x3894e000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) msgsnd(0x0, 0x0, 0x4f, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) 44.132780351s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 44.042415304s ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 43.703475334s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 43.352930828s ago: executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000003300)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f00000000c0), 0x84, 0x4ee, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x121301, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x36}, 0x20) write$binfmt_aout(r4, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, "ff011f0000024c7f7e5c7000"}) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) 43.350341005s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(0x0, 0x0, 0x0, 0x0) 42.805837595s ago: executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 42.737631692s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000007c0)=r0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0xc, 0x1b, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) readv(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000a19a465ef40b4c18680000000000998f4709dc5d9da18973049f5765bfbbcc61eee0b92e5f64ad959758eae2c2a0a26b77e68dc62e497554a0b4efd5d984100c706899761edc9549de92be26e30a81e6cd1fa38aea9bb38a45f59a84ebed2e694c4c3af58ac074afde6004f76c29039f5fcfa957b4", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000280)="be804525e2538486682441c7c26cdd432c465057b0551a67073784994f022b41ea4610928a67772484517833dde7434a3f1ae12c33e91979683d46755f3070560182247ce61de6ecbddec5827ce81ae02e9d39401d0888bbd71fab3a72b062a59e480419a27c50e7d1020c18c62bb31b571e02202301890a1dac4e4f6cb7572f68c705659423a0d141fa84bf33a00f37e46e7c2c76bcea39ccf984a06e3fba470efb6ce9978026290cd63f9c14baf080be8d605e9957a57064f62d5770d02895eda60964111a0e5ddcbf698c026aea", &(0x7f0000000180)=""/146, &(0x7f0000000100)="607ea162726beb894ee6d7", &(0x7f0000000380)="70f692a958f9b1f1106fd39739ccfc6cb2c377893a8b6a425d0a4df428a303cd0c98049f38b714f306e099ec3bfa2ebdaa64e444f6f983b3932ee5d7036fcdd7455fc2383d951e16ae5d97ef05bd9efe2b45ca", 0x5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) readv(r6, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x66b, &(0x7f0000000900)="$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") r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r7, 0x0) 42.56552803s ago: executing program 1: syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7a, 0x1e0, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 42.32469788s ago: executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ftruncate(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 42.164070648s ago: executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xc0001, 0x0) write$tcp_mem(r0, 0x0, 0x0) 41.791267644s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440)={[{@noblock_validity}, {@nobh}, {@abort}, {@norecovery}, {@nojournal_checksum}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000100)=ANY=[], 0x835, 0x0) 41.3908316s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(&(0x7f0000000040)='./file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) 41.187369286s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='^.}-].\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) 41.099247786s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 40.695171561s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r2, 0x0, 0xe) 39.215592161s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 32.414489755s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@empty, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) 32.311229128s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") r1 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000380)='./file1\x00', 0x147142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000211005) io_uring_setup(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', '', [], 0xa, "cce59b9d6ec91edf32e21af871eab6763ee225c5fee8e3ac33beadb40bb76d989100d2fda397d8ea6bcac35554defe1a79857aa0cc7cc787bacfd7708236533a5d27719d550ef33242faf4469c8a4a"}, 0x53) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffff1) r3 = epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) socket$netlink(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000600)=[{}], 0x1, 0x0, 0x0, 0x0) 31.302693599s ago: executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) rt_sigreturn() select(0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) 31.033953877s ago: executing program 2: syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f00000008c0)={[{@usrquota}, {@errors_continue}, {@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@noquota}, {@usrquota}, {@gid}]}, 0x1, 0x6238, &(0x7f000000d740)="$eJzs3UuPHFfZB/Cn+jYXv3GsLKK8FkKTxFxCiK/BGAIkWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo89ma4en99PGlc9faqmT/nf1Zepqj4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Djc1VEXPlVuuFExP9FP6IXsdLUaxGxsnYiLz+IiBdiuzmej4jhUkSz/vY/z0a8HhEfH4+4/+DOenPz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5692DbDAAAAKWp67qu0sf8k+nzfa/rTgEAc5Ff/+sk365euHpzwfqjVqvV6iNYt9WT3W0XEbHZXqd5z+BwPAAcMZvxSdddoEPyL9ogIo513QlgoVVdd4BDcf/BnfUq5Vu1Xw/WdtrzuSB78t+sdq/vmDadZfwck3k9vraiH89N6c/KnPqwSHL+vfH8r+y0j9Jyh53/vEzLf7Rz6VNxcv798fzHPD359ybmX6qc/+Cx8u/LHwAAAAAAFlj++/+Jjo//Lh18U/blUcd/1+bUBwAAAAAAAAD4vB10/L9dxv8DAACAhdV8Vm/87vjD26Z9F1tz++Uq4pmx5YHCpItlVrvuBwAAAAAAAAAAAACUZLBzDu/lKmIYEc+srtZ13fy0jdeP66DrH3Wlbz+UrOsneQAA2PHx8bFr+auI5Yi4nL7rb7i6ulrXyyur9Wq9spTfz46WluuV1ufaPG1uWxrt4w3xYFQ3v2y5tV7brM/Ls9rHf19zX6O6v4+OzUeHgQNAROy8Gt33ivSUqetno+t3ORwN9v+nj/2f/ej6cQoAAAAcvrqu6yp9nffJdMy/13WnAIC5yK//48cF1Gq1Wq1WP311Wz3Z3XYREZvtdZr3DIbjB4AjZjM+6boLdEj+RRtExAtddwJYaFXXHeBQ3H9wZ71K+Vbt14M0vns+F2RP/pvV9np5/UnTWcbPMZnX42sr+vHclP48P6c+LJKcf288/ys77aO03JPmPy3Xrs4xmpZ/s50nOuhP13L+/fH8xxz2/j8vW9GbmH+pcv6Dx8q/L38AAAAAAFhg+e//Jxbq+O/oSTdnpkcd/107tHsFAAAAAAAAgMN1/8Gd9Xzdaz7+/4UJy7n+8+mU86/kX6Scf28s/6+OLddvzd97+2H+/35wZ/2Pt/71/3m63/yX8kyVHllVekRU6Z6qQZoeZOs+a2vYHzX3NKx6/eYe1nZ///XYiLN7lu2l/496+G5c224/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+N6vLPd3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp495Hvc/s9+3ppPt569oXf3P28Ddnpq3o725bW7N9L3XQn+3/k2Oj+OXNjRunb1+9devGuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfTR67PwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/9Oap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4lLquty8RfSsiLqbrf7q6NhMAmK/8+l8n+fZ51f05359afcTrasH6M9f603qx+qNWH8W6rZ7szXYREX9rr9O8Z/j1pF8GACyyTyPin113gs7Iv2D5+/6a6amuOwPM1c0PPvzp1evXN27c7LonAAAAAAAAAMCTyuN/rrXGfz5V1/XdseX2jP/6dqwddPzPQZ7ZHWB0ykDV/cffpkfZ6o36vdZw4y9Ge3zu9gjFw925R43/PZhxf8MZ7aMZ7Usz2pdntE+80KMl5/9ia7zzUxFxcmz49RLGfx0f874EOf+XWo/nJv+vjC3Xzr/+/VHOv7cn/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/7tsMeHK+efx752HmhZcv45c/mXJef/pVTLvyw5/y+nWv5lyfnn93vyL0vOP3/2kX9Zcv6vpFr+Zcn5fy3V8i9Lzv/VVMu/LDn/r6da/mXJ+b+WavmXJed/OtXyL0vO/0yq95n/ymH3i/nI+ecjXPb/suT885kN8i9Lzv98quVflpz/hVTLvyw5/9dTLf+y5Py/kWr5lyXnfzHV8i9Lzv+bqZZ/WXL+l1It/7Lk/L+VavmXJef/7VTLvyw5/zdSLf+y5Py/k2r5lyXn/91Uy78sOf/vpVr+Zcn5v5lq+Zfl4ff/L+pMvsR+UfpjxkwJM10/MwEAAAAAAAAAAAAA4+ZxOnHX2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9jBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYu9cYuc7yDuBnr147kBgIqZMasnaMMc4mu77EF1oXE64NtxIIhV6wXe/aLPgWr10CjWRHgRIJoyJE2/ChLSDURqoqrIoPtAooH1CrSpVI+4F+QVSoSI2qgAJSpbaCbDXnvO+7M7OzM7ve8XrmnN9Psh/vzJl53znzztl5dv2fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPW2vGnmMwNZltX+5H9tzLKX1P69fnxjftnrb/QMAQAAgNX6Rf73C7ekCw4v40Z12/zjq7/7jfn5+fnsg0N/PPLF+fl0xXiWjazLsvy66OoPPzRQv03weDY2MFj39WCH4Yc6XD/c4fqRDtePdrh+XYfrxzpcv2gHLLK++HlMfmfb8n9uLHZpdms2kl+3rcWtHh9YNzgYf5aTG8hvMz9yIpvNTmUz2VTD9sW2A/n2T2+pjfX2LI41WDfW5toK+emjx+McBsI+3tYw1sJ9Rj9+Yzb+s58+evwvLzx/e6vacTc03F8xzx1ba/P8VLikmOtAti7tkzjPwbp5bm7xnAw1zHMgv13t383zfGGZ8xxamOaaan7Ox7LB/N/P5vtpuP7Hemk/bQ6X/c9dWZZdXph28zaLxsoGsw0NlwwuPD9jxYqs3UdtKb08G17ROt2yjHVaq9PbGtdp82siPv9bwu2Gl5hD/dP048dG6573n89fyzqNao96qddK8xrs9mulV9ZgXBfP5g/6iZZrcFt4/I9uX3oNtlw7LdZgetx1a3BrpzU4ODqUzzk9CQP5bRbW4K6G7YfykQby+tz29mtw8sLpc5Nzn/jkPbOnj52cOTlzZs+uXVN79u07cODA5InZUzNTxd/XuLd734ZsML0GtoZ9F18Dr23atn6pzn9ldNHx91pfh2NtXocbm7bt9utwuPnBDazNC3Lxmi5eG++v7fSxK4PZEq+x/PnZufrXYXrcda/D4brXYcvvKS1eh8PLeB3Wtjm3c3nvWYbr/rSaw9LfC1a3BjfWrcHm9yPNa7Db70d6ZQ2OhXXx/Z1Lfy/YHOb7xMRK348MLVqD6eGGY0/tkvR+f+xAXlqtyztqV9w0ml2cmzl/7yPHLlw4vysLZU28om6tNK/XDXWPKVu0XgdXvF4Pz776iTtaXL4x7Kuxe2p/jS35XNW22Xtv++cq/+7Wen82XLo7C6XL1np/tvpuXtufo1n2pe889uC3Hv3Sm5bcn7V+81OTq38vnvrSuuPvyBLH39j3v1iMl+7q8aGR4eL1O5T2zkjD8bjxqRrOj10D+dgvTC7veDwS/qz18fjWNsfjTU3bdvt4PNL84OLxeKDTTztWp/n5HAvr5NRU++NxbZtNu1e6JofbHo/vCnUg7P/XhU4h9UV1a2epdZvGGh4eCY9rOI7QuE73NGw/Enqz2lhP7b62dbrjruK+htKjW7BW63S8adtur9P0s6+l1ulAp5++XZvm53MsrItb97Rfp7Vtntm7+mPn+vjPumPnaKc1ODI0WpvzSFqE+fE+m18f1+C92fHsbHYqm86vHc3X00A+1sR9y1uDo+HPWh8rN7VZgzuatu32Gkzfx5ZaewPDix98FzQ/n2NhXTx5X/s1WNvmzfu7+951R7gkbVP33rX552tL/czrjqbddL3WynCY53f2t//ZbG2bUwdW2me23093h0tuarGfml+/S72mprO12U+bwjyfP7D0fqrNp7bNFw8ucz0dzrLs0sP35z/vDb9f+duL3/tGw+9dWv1O59LD9//kpSf+YSXzB6D/vViUDcX3urrfTC3n9/8AAABAX4h9/2Coif4fAAAASiP2/fF/hSf6fwAAACiN2PcPh5pUpP/f9ObnZ1+8lKVk/nwQr0+74YFiu5hxnQpfj88vqF1+/9dm/vvvLy1v7MEsy37+wB+03H7TA3FehfEwz6tvabx8kW/cs6yxjz50KY1bn1//crj/+HiWuwxaRXCnsix7+pbP5eOMf+hKXp954GheH7z8xOO1bV44WHwdb//cK4rt/yyEfw+fONZw++fCfvhRqFPvaL0/4u2+fuV1m/d/YGG8eLuBrTfnD/vJDxf3Gz8n5/OPF9vH/bzU/L/12ae+Xtv+kde0nv+lwdbzfyrc79dC/d9XFdvXPwe1r+PtPh3mXxuvtkLj7e796rdbzv/qZ4rtz7212O5oqHH8HeHrbW99frZ+fz0ycKzhcWVvK7aL409974/y6+P9xftvnv/YkSsN+6N5fTzzr8X9TDZtHy+P40R/1zR+7X7q12cc/6k/PNqwnzuNf/XB515Vu9/m8e9u2u7cwzvz8Rfur/ETm/78059rOV6cz+G/OdfweA6/N7yOw/hPfjisx3D9/10t7q/50xWOvrfx+BO3//LGSw2PJ3r7z4rxr77hZF7Xja3fcNNLXnrz5Ttr+y7Lnl1X3F+n8U/+xdmG+X/ltmJ/xOtjRr95/KXE8c9/fOLM2bmLs9Nprz56S/7ZOe8s5hPne0s4tjZ/feTshY/MnB+fGp/KsvHyfoTeNftqqD8pyuX2W88vOoLufCg8n3f86dMbtv/LZ+Pl//b+4vIr7yi+b702bPf5cPnG8PytbPzFntxyW/76HngmzHB+8ecFr8bmbf91YFkbhsff/L4grvdzr/xIvh9q1+XfN+LrepXz/8F0cT/fDPt1Pnwy89bbFsar3z5+NsKV9xWv91Xvv3CYi8/rX4Xn+10/Ku4/zis+3h+E9zHf3tR4vIvr45uXBpvvP/8Uj8vheJJdLq6PW8X9feWF21pOL34OSXb59vzrL6T7uX1FD3Mpc5+Ymzw1e+biI5MXZuYuTM594pNHTp+9eObCkfyzPI98tNPtF45PG/Lj0/TMvr1ZfrQ6W5Tr7EbP/9xDx6f3T22fnjlx7OKJCw+dmzl/8vjc3PGZ6bntx06cmPl4p9vPTh/atfvgnv27J07OTh86cPDgnoMTs2fO1qZRTKqDfVMfmzhz/kh+k7lDew/uuu++vVMTp89OzxzaPzU1cbHT7fPvTRO1W//+xPmZU8cuzJ6emZib/eTMoV0H9+3b3fHTAE+fOzE3Pnn+4pnJi3Mz5yeLxzJ+Ib+49r2v0+0pp7l/L97PNhsoPogve8/d+9Lns9Z87bEl76rYpOkDRJ8Pn0XzTy87d2A5X8e+fyTUpCL9PwAAAFRB7PtHQ030/wAAAFAase9fF2qi/wcAAIDSiH3/WKhJRfr/0uX/N11a1vjy//2X/8/k/+X/mx7PNef/39dr+f/ieCH/3x2rzd/L/wfy//L/8v/y//L/dEGv5f9j378+yyrZ/wMAAEAVxL5/Q6iJ/h8AAABKI/b9N4Wa6P8BAACgNGLf/5JQk4r0//L/8v/y//L/8v+tx19B/n9dtgzy/2tD/r+9iuf/BztOQP5/MqtW/v9yN+df3fx/0UPJ/9NKr+X/Y9//0lCTivT/AAAAUCr/2fri2PffHGqi/wcAAIDSiH3/LaEm+n8AAAAojdj3bww1qUj/L/8v/y//L/8v/996fOf/70/y/+1VPP/fmfy/8//L/zv/P13Va/n/2Pe/LNSkIv0/AAAAVEHs+18eaqL/BwAAgN4zfG03i33/K0JNFvX/1zgAAAAAcMPFvv/WrCkIXpHf/8v/y//L/8v/y/+3Hn/5+f+hTP6/d8j/tyf/34H8v/y//L/8P13Va/n/vO/PxrJXhppUpP8HAACAKoh9/22hJvp/AAAAKI3Y9/9SqIn+HwAAAEoj9v2bQk0q0v/L/5cy/197muT/5f+XHF/+v6/O/z8TApvy/8sk/9+e/H8H8v/y//L/8v90Va/l/2Pff3uoSUX6fwAAAKiC2PffEWqi/wcAAIDSiH3/L4ea6P8BAACgNGLfvznUpCL9v/x/j+f/Y3LU+f/l/xfy/w/L/xcqkv93/v8Vkv9vT/6/A/l/+X/5f/l/uqrX8v+x739VqElF+n8AAACogtj3vzrURP8PAAAApRH7/jtDTfT/AAAAUBqx7x8PNalI/y//3+P5/2s7/7/8f7nz/ys6//+d8v/y/xUj/9+e/H8H8v/y//L/8v90Va/l/2PfvyXUpCL9PwAAAFRB7Pu3hpro/wEAAKA0Yt9/V6iJ/h8AAABKI/b920JNKtL/y//L/8v/lzv/32p8+X/5/zKT/29P/r8D+X/5f/l/+X+6qtfy/7Hvf02oSUX6fwAAAKiC2PdvDzXR/wMAAEBpxL7/taEm+n8AAAAojdj37wg1qUj/L/8v/y//L/9f8fz/Jfn/cpH/b0/+vwP5/27k598l/y//L/9P1Gv5/9j3vy7UpCL9PwAAAFRB7Pt3hpro/wEAAKA0Yt9/d6iJ/h8AAABKI/b9E6EmFen/5f/l/+X/5f8rnv93/v+S6YH8/9hqxpf/l/8vQf7f+f/l/+X/SW5U/j/LWuf/Y99/T6hJRfp/AAAAqILY998baqL/BwAAgD60vuWlse+fDDXR/wMAAEBpxL5/KtSkIv2//L/8v/x/pfP/l1ec/79z4X7l/wvy/73luuX/BzPn/5f/l//voN/y/82/HeyN/P+I/D+l0mvn/499/65Qk4r0/wAAAFAFse/fHWqi/wcAAIDSiH3/nlAT/T8AAACURuz794aaVKT/l/9fu/z/cCb/L//fc/l/5/+X/y+dHjj//6rG77/8f3yI8v/y//2X/+/2/J3/X/6fxXot/x/7/vtCTSrS/wMAAEAVxL5/X6iJ/h8AAABKI/b9+0NN9P8AAABQGrHvPxBqUpH+X/7f+f/l/+X/5f9bjy//35/k/9tz/v8O5P/l/+X/5f/pql7L/8e+/2CoSUX6fwAAAKiC2Pe/PtRE/w8AAAClEfv+Xwk10f8DAABAacS+/1dDTSrS/8v/y//L/8v/y/+3Hl/+vz/J/7cn/9+B/L/8v/y//D9d1Wv5/9j3Hwo1qUj/DwAAAFUQ+/5fCzXR/wMAAEBpxL7/DaEm+n8AAAAojdj3Hw41qUj/L/+/zPz/+vb3J//fOH/5/9brQ/5f/l/+//qT/29P/r8D+X/5/xLm/x+T/+cG6rX8f+z73xhqUpH+HwAAAKog9v33h5ro/wEAAKA0Yt//plAT/T8AAACURuz73xxqUpH+X/7f+f/l/+X/5f9bjy//35/k/9uT/+9A/l/+v4T5f+f/50Zabv4/vq+63vn/2Pe/JdSkIv0/AAAAVEHs+98aaqL/BwAAgNKIff/bQk30/wAAAFAase9/e6hJRfp/+X/5f/l/+X/5/9bjy//3J/n/9uT/O5D/l/+X/5f/p6t67fz/se//9VCTivT/AAAAUAWx738g1ET/DwAAAKUR+/53hJro/wEAAKA0Yt//zlCTivT/3cv/j8r/N5H/l/9vXh/y//L/8v/Xn/x/e32W///FzeFy+f+C/P91mv/4F4odX8b8/w+Xyv/Pr2u+vfw/10Ov5f9j3/+uUJOK9P8AAABQBbHvf3eoif4fAAAASiP2/e8JNdH/AwAAQP+bL+IDse//jVCTivT/zv9fm8dCevk65///Wv5f/l/+X/5f/v/6kv9vr8/y/87/30T+v7fn35P5f+f/5wbrtfx/7PvfG2pSkf4fAAAAqiD2/Q+Gmuj/AQAAoDRi3/++UBP9PwAAAJRG7PvfH2pSkf5f/t/5/+X/+zz/P55lmfy//D+J/H978v8dyP/L//da/v8/5P/pb72W/499/0OhJhXp/wEAAKAKYt//gVAT/T8AAACURuz7fzPURP8PAAAApRH7/g+GmlSk/5f/75f8/7j8v/y/8/83PR75f/n/VuT/21v7/P/K3lDJ/8v/9/P8nf9f/p/Fei3/H/v+D4WaLP/b1diytwQAAABuiNj3/1aoSUV+/w8AAABVEPv+3w410f8DAABAacS+/3dCTSrS/8v/90v+3/n/M/l/+f+mxyP/L//fytrl/+ORR/7f+f/l/yP5f/l/+X+a9Vr+P/b9vxtqUpH+HwAAAKog9v0fDjXR/wMAAEBfaPV/spvFvv9IqEnn/n/F/6cPAAAAuDFi33801KQiv/+X/5f/l//v0fz/n2z95+9/991Hd8n/y//L/6/Imp7/v/bid/5/+X/5/0T+X/6/Zf5/nfx/lfVa/j/2/cdCTSrS/wMAAEAVxL7/90JN9P8AAABQGrHvPx5qov8HAACA0oh9/3SoSUX6f/l/+X/5/x7N/6/w/P8DYZxeyP/H/SH/36hr+f940JX/b2lN8/8fWMiJy/+vNP8/2vJS+f9l5//zN27y/701f/l/5/9nsW7l/4e6lP+Pff9MqElF+n8AAACogtD3D54o6sIV+n8AAAAojdj3nww10f8DAABAacS+/yOhJhXp/+X/5f/l/8uR/3f+/4XtS5//d/7/tuT/2+ud/H9r8v/O/9/P85f/l/9nsV47/3/s+2dDTSrS/wMAAEAVxL7/o6Em+n8AAAAojdj3fyzURP8PAAAApRH7/lOhJhXp/+X/5f/l/+X/5f9bjy//35/k/9uT/+9A/l/+X/5f/p+u6rX8f+z7T4eaVKT/h/9n7z6aLK2vO47fxj3lmWLhcpWrvPDC3vslsIC1/QK88MYbV7m8wAGcA4NzxDnhAM4RSwIJoYQiCqCEhLJQRDkjJCEk1aiYPudMh9vP7Zm+3f3c//l8Fj52W+PbGk/N8BN86w8AANBB7v6b4xb7HwAAAIaRu/+n4hb7HwAAAIaRu/+n45Ym+1//r/8ftv+/Uf9/2Ofr//X/I9P/T9P/r7BB/f/3nNf/z+371//r/zlobv1/7v6fiVua7H8AAADoIHf/z8Yt9j8AAAAMI3f/LXGL/Q8AAADDyN1/a9zSZP/v6/+3Fj37/8x49f8j9f/e/z/08/X/+v+RnW7/f/uzv/Pp//X/3v8P+n/9v/6f/ebW/+fu/7m4pcn+BwAAgA5y9/983GL/AwAAwDBy9/9C3GL/AwAAwDBy9/9i3NJk/x/v/f/tUfr/sob+fytbdP2//n//rw/9v/5f/3/yvP8/rVP/f8tj19/85P3f98DVfL7+X/+v/9f/s15z6/9z9/9S3NJk/wMAAEAHuft/OW6x/wEAAGAYuft/JW6x/wEAAGAYuft/NW5psv+P1/8P8/5/8f6//v/yF/T/+n/9/8bS/0/r1P9fy+fr//X/1/D91x+D+n/9PwfNrf/P3f9rcUuT/Q8AAAAd5O7/9bjF/gcAAIBh5O6/LW6x/wEAAGAYufsvxi1N9r/+/+T7/2/p/ze+/z+30P/v0P/r/+dP/z9N/7+C/l//7/1//T9rNbf+P3f/7XFLk/0PAAAAHeTu/424xf4HAACAYeTu/824xf4HAACAYeTu/624pcn+1/97/1//7/1//f/yz9f/byb9/zT9/wr6/+P28+f0//p//T+7XWX//8zEb9tr6f9z9/923NJk/wMAAEAHuft/J26x/wEAAGAYuft/N26x/wEAAGAYuft/L25psv/1//p//b/+X/+//PP1/5tJ/z9tNv3/1vbSL+v/N77/9/6//l//zx5ze/8/d//vxy1N9j8AAAB0kLv/D+IW+x8AAACGkbv/D+MW+x8AAACGkbv/j+KWJvtf/6//1//r//X/yz9/qv9/YNf3p/+fl7X2/1v6f+//6//1//p//T/HMbf+P3f/H8ctTfY/AAAAdJC7/464xf4HAACAYeTu/5O4Zdf+3//PogIAAACbJXf/n8YtTf7+//L+/8r/Xv9/NKfU/2/r//X/O///3vm/qP+f7P9v8v5/T97/n7a6/8/fUfX/+n/9/1r6/8XWKP3/hVU/Xv/PMnPr/3P3/1nc0mT/AwAAQAe5+/88brH/AQAAYBi5+/8ibrH/AQAAYBi5+/8ybmmy/73/v1H9v/f/e/X/d5/z/v9lc3z/f3Hq/f+2/v+I9P/TvP+/gv5f/+/9f+//s1Zz6/9z9/9V3NJk/wMAAEAHufv/Om6x/wEAAGAz7P5nBw55xD93/9/ELfY/AAAADCN3/9/GLU32/+D9/42H/cv0//r/3T9fM+3/D33/X/+/o1f/7/3/o9L/T9P/r6D/P4l+fnuw/v+uw378HPr/2/T/zMye/v/BK18/q/4/d//fxS1N9j8AAAB0kLv/zrjF/gcAAIBh5O7/+7jF/gcAAIBh5O7/h7ilyf4/8f7/wuGf7f1//b/+X/+v/9f/r5v+f5r+f4X9/f+zf2mo//f+v/f/9f9csz39/y5n1f/n7v/HuKXJ/gcAAIAOcvf/U9xi/wMAAMAwcvffFbfY/wAAADCM3P13xy1N9v/g7/8fSv+v/9/986X/1/8v+3z9/2bS/0/T/6/g/X/9/1n0//ELQP/PiObW/+fu/+e4pcn+BwAAgA5y9/9L3GL/AwAAwDBy9/9r3GL/AwAAwDBy9/9b3NJk/+v/T7b/z6/r//X/C/2//l//fyra9v9by/4kOuiQ/v+Rn7j4w3u/ov/X/w/Z/z9xot+/9//1/xw0i/7/0pW/uszd/+9xS5P9DwAAAB3k7v+PuMX+BwAAgGHk7v/PuMX+BwAAgGHk7v+vuKXJ/t/V/2dyof/3/r/+X/+v/9f/b6y2/f8Ref9/2tPx71f/P2r/f7Lfv/5f/89Bs+j/d/3Pufv/O25psv8BAACgg9z9/xO32P8AAAAwjNz9/xu32P8AAAAwjNz9/xe3NNn/3v/X/+v/9f/6/+Wfr//fTPr/afr/Fbz/r//X/+v/Wau59f+5+++JW5rsfwAAAOggd///xy32PwAAAAwjd/9z4hb7HwAAAIaRu/+5cUuT/a//P6T/X+j/9f/6f/2//n8T6f+nnXX/v+zPy91Opf+/d+IbWNb/X/pO/f+G9//nj/jj9f/6f9Zvbv1/7v7nxS1N9j8AAAB0kLv/3rjF/gcAAIBh5O6/L26x/wEAAGAYufufH7c02f/6f+//6//1//r/5Z+v/99M+v9py/v/6w5+yfv/3v8fqP/3/r/+n7Mzt/4/d/8L4pYm+x8AAAA6yN1/f9xi/wMAAMAwcve/MG6x/wEAAGAYufsfiFua7H/9v/5f/6//1/8v/3z9/2Y6uf5/MXD/v4T+X/+v/9f/6/9Zg7n1/7n7XxS3NNn/AAAA0EHu/hfHLfY/AAAADCN3/0viFvsfAAAAhpG7/6VxS5P9f1b9/036f/2//l//r/+vn1X9//p4/3+a/n8F/b/+X/+v/2et5tb/5+5/WdzSZP8DAABAB7n7H4xb7H8AAAAYRu7+l8ct9j8AAAAMI3f/K+KWJvvf+//6/739/2Kh/9f/6/93nEL/f36h/187/f80/f8K+v8x+//rFgP1/xcO/fH6f+Zobv1/7v5Xxi1N9j8AAAB0kLv/VXGL/Q8AAADDyN3/6rjF/gcAAIBh5O5/TdzSZP/r//X/3v8fp/9/6Knlvx71/7Pt/+tnVf+/Pvr/afr/FfT/Y/b/3v/X/3Nm5tb/5+5/KG5psv8BAACgg9z9r41b7H8AAAAYRu7+18Ut9j8AAAAMI3f/6+OWJvtf/6//1/+P0/97/3+H/r83/f80/f8K+n/9v/5f/89aza3/z93/hrilyf4HAACADnL3Pxy32P8AAAAwjNz9j8Qt9j8AAAAMI3f/G+OWJvtf/6//1/9vZv9/Xv8/fP+f35n+/+rMpf+/4YYfelT/r//X/+v/9f/6/+7m1v/n7n9T3NJk/wMAAEAHufvfHLfY/wAAADCM3P1viVvsfwAAABhG7v63xi1N9v/B/v/cYqdQ3bGs/49GTf+/i/5/7/ev/1/+68P7//p/7/+fvLn0/97/v7bvf279/636f/3/SfX/P3Dwx+v/GdHc+v/c/Y/GLU32PwAAAHSQu/9tcYv9DwAAAMPI3f/2uMX+BwAAgGHk7n8sbmmy/73/r//X/+v/9f/LP1//v5n0/9P0/yt4/1//3+j9//jzr36fqv7/O/T/rM/c+v/c/e+IW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAMPI3f/uuKXJ/tf/r7X/3979Nf2//n/frw/9v/5f/38K9P/T9P8r6P/1/436//28/89JmFv/n7v/PXFLk/0PAAAAHeTuf2/ccqT9f+GEvisAAABgnXL3vy9u8ff/AQAAYBi5+98ftzTZ/3Pt/2/bzP5/D/3/XPr/H9P/7/t8/b/+f2T6//wTfTn9/wr6f/2//l//z1rNrf/P3f943NJk/wMAAEAHufs/ELfY/wAAADCM3P0fjFvsfwAAABhG7v4PxS1N9v9c+/8Nff9/jzn2/1uLjv2/9//1//r/TvT/0/T/K6y3/79d/6//1//r/7ubW/+fu//DcUuT/Q8AAACb6kd+8CcfP+q/Nnf/R+IW+x8AAACGkbv/o3GL/Q8AAADDyN3/RNzSZP/r/3v1/z3f/9f/6//1/53o/6fp/1fw/r/+X/+v/2et5tb/5+7/WNyya/htX/W/SwAAAGBOcvd/PG5p8vf/AQAAoIPc/Z+IWw7s/0tH/KfaAQAAgLnJ3f/JuKXJ3/8/dv+/2NL/n2T/v9D/6//1//p//f/V0P9PO2b/f2lL/6//n6D/1//r/9ntwgz7/9z9n4pbmux/AAAAGNSe/0Qhd/+n4xb7HwAAAIaRu/8zcYv9DwAAAMPI3f/ZuKXJ/vf+/8z7/2t6//9C/Xf6/+b9/x3nl36+/l//PzL9/6G+O26n9/8vfZf+/6qcdT+/6d+//l//z0Fz6/9z938ubmmy/wEAAKCD3P2fj1vsfwAAABhG7v4vxC32PwAAAAwjd/8X45Ym+1//P2L/7/1//f/054/T/3/v9Rcf/tEfv+8e/T9XnGb/n78WNqT/v+yY7/9vWv9/NZ9/5+X/qv/X/+v/9f+s1dz6/9z9X4pbmux/AAAA6CB3/5Nxi/0PAAAAw8jd/+W4xf4HAACAYeTufypuabL/N6r//379/8j9f/5cn0H/f3Hz+v9sirv3/97/1/8f5P3/afr/FfT/+n/9v/6ftZpb/5+7/ytxS5P9DwAAAB3k7v9q3GL/AwAAwDBy938tbrH/AQAAYBi5+5+OW5rs/43q/73/P3T/n66l/8/P9/6//n+h/29P/7/L9sEv6f9X0P/r//X/+n/Wam79f+7+r8ctTfY/AAAAdJC7/5m4xf4HAACAYeTu/0bcYv8DAADAMHL3fzNuabL/9f/6/xH6/2O+/382/f+zv93o//X/+v+10/9P0/+voP/X/+v/9f+s1dz6/9z93w4AAP//kgtiuA==") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x39, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/104, 0x4d) 30.045256047s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x80000003, 0x0, r3, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r9, 0x0, r11, 0x0, 0x4ffe2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@remote, @private, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x8780, 0x40, 0x4, 0x9, {{0x17, 0x4, 0x2, 0x3, 0x5c, 0x64, 0x0, 0xf8, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0x2, [{@multicast2, 0x5}, {@rand_addr=0x64010101, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x7, [{@multicast1, 0x1f26}, {@loopback, 0x7f}, {@empty, 0xe88a}, {@rand_addr=0x64010100, 0x1000}, {@multicast1, 0x3caf}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="e8000000b1285e6d6421bfaa8e1e1c20c149bd0dfae413ec4009f483776f1f0ea59a15ac34baee7fc9bc33fcd5ad895151cdf9a6d9c96bf9f02596b44fae28e5ba7edde8c5c3aac8ea3c054d1cc1b0c7d977f389ca99ffbc56e0d07572af215b011601fbf0d549c0438ad4ad269f583973930500000000000000909e697bd3d4b7574f9f3284aca6b95fc101b7280b34fb62538fd104da078b621ea6cbf4f88dce0979ecda97ad1965a6701de10a5e3d1405a1b98692a17ff638dc0ba8ddb75bfbf600"/206, @ANYRES16=r8, @ANYRES32, @ANYBLOB="d4619600e828f3e39aeb4e33d7474c2fd36c5bfbbb8ce4cedc214b5b0a2157f7f7775df9a70fdab0c4b3bb1c899300bb222db6d9bd3a0ec1adca70c3692cf02c6e8e5a954903d725bb28dfe9768f0432d06f2cbedf9275e27c7579e5957672de30e43a0884f9293ba13977128e86074de5e5a1545ca7a6529e7279bebae32fb4e38c", @ANYBLOB="290f5ca6757b0853077a0e3c44bc4d8c960b79725c22e3fd56ea7d0046ca6c0720af2ae24e87f3e1ad30849fbd018e7cc3d2ec72b0cde4c0700ba76b307768515f468d6d041a802bed086debb03e5a78f5b31d6b0bc1070211af97d1e3432a9d4391543d162a9197d2d02e41350286bad66daeb5398f54886f87ff6eaced", @ANYRES8=r0, @ANYRES32=r12, @ANYBLOB="14000200776c616e3100000000000000000000001800018014100200766c616e3000000000000000000000004c00018008000100", @ANYRES32=r13, @ANYBLOB="080003000300000008000300040000001400020073797a6b616c6c6572310000000000001400020076657468305f746f"], 0xe8}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback={0x0, 0xffff8881a56043d8}}}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7fffffff, 0x8, 0x8, 0xd01, 0xffffffffffffffff, 0xfffff803, '\x00', r13, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xd}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r16, &(0x7f0000000300), 0x20000000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, [@generic={0x4, 0x4, 0x0, 0x0, 0x10001}, @alu={0x4, 0x1, 0x4, 0x5, 0x7, 0xffffffffffffffc0, 0xfffffffffffffff0}]}, &(0x7f0000000880)='GPL\x00', 0x0, 0x73, &(0x7f00000008c0)=""/115, 0x41000, 0x8, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x8, 0x8, 0xc5d}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r16]}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x9, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}], &(0x7f0000000000)='GPL\x00', 0x3, 0x9, &(0x7f0000000140)=""/9, 0x41100, 0x31, '\x00', r2, 0x16, r4, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x5, 0x2}, 0x10, 0x291bb, r5, 0x5, &(0x7f0000000540)=[r6, 0x1, r7, r16, r17, r18], &(0x7f0000000580)=[{0x0, 0x5, 0x10, 0x1}, {0x2, 0x3, 0xc, 0x9}, {0x4, 0x5, 0xe, 0x6}, {0x4, 0x5, 0xa, 0xa}, {0x5, 0x3, 0x9}], 0x10, 0xffffffe0}, 0x90) 12.2946241s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11.051226002s ago: executing program 4: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) dup(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) rt_sigreturn() read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 10.660083993s ago: executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x4, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3a, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000003556806a00000007020000f8ffffdfb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000580000007b8af8ff00000000bfa200000000000007020000f8f7ffffb703000008000000b70400000000000085000000820000001801000020756c2500000000fa1f20207b1af8ff00000000bfa100000000000007010000f8ffffff0102000008000000b70300000000000085000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000000000000000000000000000180000000000000000000000000000001850000000000000000000000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) gettid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 9.156712425s ago: executing program 3: syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000940)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000001280)='./bus\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) socketpair(0x25, 0x5, 0x80000001, &(0x7f0000000100)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @random="8d027b4617e4"}, 0xe) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000000)=[{r3, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r3) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) 0s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xd, 0x80, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x2, 0x4) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000002700)=""/94, 0x5e, 0x0, 0x2, 0x2}}, 0x48) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, @in6={0xa, 0x4e20, 0x6, @mcast1}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7c, &(0x7f0000000500)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000040)={[{}, {@noacl}, {@nouser_xattr}, {@noacl}]}, 0x3, 0x1b1, &(0x7f0000000380)="$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") symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): 22] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 663.369375][T11422] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 663.387832][T11422] BTRFS info (device loop1): using free-space-tree [ 663.605858][ T29] audit: type=1804 audit(1717646592.116:169): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1281181789/syzkaller.dNgu0G/136/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 663.849133][ T8980] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 664.430202][T11349] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.437407][T11349] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.456896][T11349] bridge_slave_1: entered allmulticast mode [ 664.478606][T11349] bridge_slave_1: entered promiscuous mode [ 664.619425][T11446] block nbd1: shutting down sockets [ 664.643527][T11409] syz_tun: entered promiscuous mode [ 664.656515][T11409] macvlan2: entered promiscuous mode [ 664.678832][T11409] syz_tun: left promiscuous mode [ 664.855421][T11349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.877183][T11349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.124072][T11349] team0: Port device team_slave_0 added [ 665.204316][T11349] team0: Port device team_slave_1 added [ 665.417011][T11349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.436275][T11349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.496800][T11349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.533959][T11349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.571167][T11349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.597946][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.657504][T11349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.840618][ T2918] IPVS: stop unused estimator thread 0... [ 665.934833][T11349] hsr_slave_0: entered promiscuous mode [ 665.980140][T11349] hsr_slave_1: entered promiscuous mode [ 666.021905][T11349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.065969][T11349] Cannot create hsr debugfs directory [ 666.622818][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 666.627294][ T2918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.643003][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 666.656260][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 666.664617][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 666.673383][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 666.682449][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 666.760785][T11460] block nbd2: shutting down sockets [ 667.075258][ T2918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.343782][ T2918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.628343][ T2918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.423640][T11468] loop1: detected capacity change from 0 to 32768 [ 668.442087][T11468] btrfs: Deprecated parameter 'usebackuproot' [ 668.452301][T11468] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 668.485692][T11468] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11468) [ 668.537520][ T2918] bridge_slave_1: left allmulticast mode [ 668.545002][T11468] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 668.557757][ T2918] bridge_slave_1: left promiscuous mode [ 668.565116][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.566231][T11468] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 668.602006][ T2918] O3ãc¤±: left allmulticast mode [ 668.609646][T11468] BTRFS info (device loop1): using free-space-tree [ 668.614515][ T2918] O3ãc¤±: left promiscuous mode [ 668.643474][ T2918] bridge0: port 1(O3ãc¤±) entered disabled state [ 668.797626][T11468] BTRFS info (device loop1): rebuilding free space tree [ 668.806355][ T53] Bluetooth: hci3: command tx timeout [ 668.984268][ T8980] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 669.633350][T11489] loop2: detected capacity change from 0 to 2048 [ 670.724317][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.764297][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.792357][ T2918] bond0 (unregistering): Released all slaves [ 670.884798][T11499] loop1: detected capacity change from 0 to 4096 [ 670.890323][ T53] Bluetooth: hci3: command tx timeout [ 670.990301][T11499] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 671.016035][T11465] chnl_net:caif_netlink_parms(): no params data found [ 671.113379][T11499] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 671.379757][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 671.415657][T11349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 671.480283][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 671.635562][ T29] audit: type=1800 audit(1717646600.136:170): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 671.685952][T11349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 671.693612][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 671.720762][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 671.729155][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 671.760182][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 671.770702][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 671.790082][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.806981][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 671.826734][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.854689][T11349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 671.866656][T11465] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.902800][T11465] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.930625][T11465] bridge_slave_0: entered allmulticast mode [ 671.938738][T11465] bridge_slave_0: entered promiscuous mode [ 671.965733][T11465] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.980253][T11465] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.987646][T11465] bridge_slave_1: entered allmulticast mode [ 672.010318][T11465] bridge_slave_1: entered promiscuous mode [ 672.022101][ T2918] hsr_slave_0: left promiscuous mode [ 672.029034][ T2918] hsr_slave_1: left promiscuous mode [ 672.058606][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.067481][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.082935][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.095505][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 672.102325][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.116453][ T25] usbtmc 2-1:16.0: can't read capabilities [ 672.159707][ T2918] veth1_vlan: left promiscuous mode [ 672.169611][ T2918] veth0_vlan: left promiscuous mode [ 672.361266][ T1152] usb 2-1: USB disconnect, device number 12 [ 672.565728][T11513] loop2: detected capacity change from 0 to 32768 [ 672.713385][ T29] audit: type=1800 audit(1717646601.236:171): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=8 res=0 errno=0 [ 673.041348][ T53] Bluetooth: hci3: command tx timeout [ 673.949659][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 674.087035][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 674.508029][T11525] loop2: detected capacity change from 0 to 32768 [ 674.526588][T11525] btrfs: Deprecated parameter 'usebackuproot' [ 674.532807][T11525] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 674.553557][T11525] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11525) [ 674.589441][T11525] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 674.602045][T11525] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 674.619106][T11525] BTRFS info (device loop2): using free-space-tree [ 674.857712][T11525] BTRFS info (device loop2): rebuilding free space tree [ 675.017294][ T9262] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 675.121445][ T53] Bluetooth: hci3: command tx timeout [ 675.683885][T11349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 675.791728][T11544] block nbd2: shutting down sockets [ 675.887997][T11465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.089321][T11465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.164474][ T29] audit: type=1800 audit(1717646604.676:172): pid=11546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 676.495018][T11465] team0: Port device team_slave_0 added [ 676.552943][T11465] team0: Port device team_slave_1 added [ 676.809600][T11465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.873576][T11465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.061999][T11465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.393512][T11465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.394807][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 677.424206][T11465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.499826][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 677.516446][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 677.532542][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 677.536086][T11465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.561156][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 677.568685][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 677.887044][T11465] hsr_slave_0: entered promiscuous mode [ 677.908084][T11465] hsr_slave_1: entered promiscuous mode [ 678.034113][T11349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.243382][ T2918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.382707][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 678.610101][ T2918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.639090][ T29] audit: type=1800 audit(1717646607.136:173): pid=11565 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 678.831627][T11349] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.049499][ T2918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.751750][ T5109] Bluetooth: hci4: command tx timeout [ 679.802579][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.809823][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.844373][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.851637][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.242587][ T2918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.258841][T11578] loop2: detected capacity change from 0 to 512 [ 680.378810][T11578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.431743][T11578] ext4 filesystem being mounted at /root/syzkaller-testdir3360241284/syzkaller.DkkJ0u/129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.472468][T11556] chnl_net:caif_netlink_parms(): no params data found [ 680.827443][ T9262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.948382][T11349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.024108][T11556] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.034076][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.056541][T11556] bridge_slave_0: entered allmulticast mode [ 681.090060][T11556] bridge_slave_0: entered promiscuous mode [ 681.134980][T11556] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.170192][T11556] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.195530][T11556] bridge_slave_1: entered allmulticast mode [ 681.209411][T11556] bridge_slave_1: entered promiscuous mode [ 681.441950][T11556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.452120][T11597] block nbd2: shutting down sockets [ 681.479466][T11556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.605164][ T2918] bridge_slave_1: left allmulticast mode [ 681.615541][ T2918] bridge_slave_1: left promiscuous mode [ 681.634196][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.735805][ T2918] O3ãc¤±: left allmulticast mode [ 681.756761][ T2918] O3ãc¤±: left promiscuous mode [ 681.796350][ T2918] bridge0: port 1(O3ãc¤±) entered disabled state [ 681.841503][ T5109] Bluetooth: hci4: command tx timeout [ 683.465057][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.505860][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.557240][ T2918] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 683.579946][ T2918] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 683.603573][ T2918] bond0 (unregistering): (slave bond1): Releasing backup interface [ 683.613718][ T2918] bond0 (unregistering): (slave bond2): Releasing backup interface [ 683.635722][ T2918] bond0 (unregistering): Released all slaves [ 683.921476][ T5109] Bluetooth: hci4: command tx timeout [ 683.938501][ T2918] bond1 (unregistering): Released all slaves [ 684.318142][ T2918] bond2 (unregistering): Released all slaves [ 684.353274][T11556] team0: Port device team_slave_0 added [ 684.488357][T11615] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 684.601462][T11556] team0: Port device team_slave_1 added [ 684.778021][ T29] audit: type=1800 audit(1717646613.285:174): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 684.798297][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.013504][T11556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.037100][T11556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.063658][T11556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.111015][T11621] block nbd2: shutting down sockets [ 685.196193][T11465] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 685.221401][T11556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.228588][T11556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.254909][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.267747][T11556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.302589][T11465] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 685.409120][ T2918] hsr_slave_0: left promiscuous mode [ 685.418927][ T2918] hsr_slave_1: left promiscuous mode [ 685.429677][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.446403][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.466421][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.483673][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.585084][ T2918] veth1_vlan: left promiscuous mode [ 685.598178][ T2918] veth0_vlan: left promiscuous mode [ 686.008150][ T5109] Bluetooth: hci4: command tx timeout [ 686.421736][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.907916][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 687.044057][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 687.375376][T11630] fuse: Bad value for 'group_id' [ 687.635819][T11630] could not allocate digest TFM handle sha1-ce [ 688.252583][T11640] loop2: detected capacity change from 0 to 65 [ 688.301018][T11640] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 688.324157][T11640] BFS-fs: bfs_fill_super(): Last block not available on loop2: 262208 [ 688.715676][T11640] loop2: detected capacity change from 0 to 1024 [ 688.798202][T11640] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 688.810495][T11640] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 688.821574][T11640] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 688.835576][T11640] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 688.866288][T11640] journal_load_superblock: Cannot read journal superblock [ 688.874326][T11640] EXT4-fs (loop2): Could not load journal inode [ 690.001474][T11465] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 690.044532][T11349] veth0_vlan: entered promiscuous mode [ 690.130905][T11465] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 690.247137][T11556] hsr_slave_0: entered promiscuous mode [ 690.301445][T11556] hsr_slave_1: entered promiscuous mode [ 690.318208][T11556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.327823][T11556] Cannot create hsr debugfs directory [ 690.358745][T11349] veth1_vlan: entered promiscuous mode [ 690.714588][T11349] veth0_macvtap: entered promiscuous mode [ 690.767154][T11349] veth1_macvtap: entered promiscuous mode [ 690.889925][T11647] loop2: detected capacity change from 0 to 32768 [ 690.936294][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.956973][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.996447][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.038890][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.055780][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.068657][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.081480][T11349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.131239][T11647] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 691.170692][T11647] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 691.221232][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.257553][T11647] bcachefs (loop2): alloc_read... done [ 691.264446][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.280726][T11647] bcachefs (loop2): stripes_read... done [ 691.290635][T11647] bcachefs (loop2): snapshots_read... done [ 691.299501][T11647] bcachefs (loop2): journal_replay... done [ 691.310684][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.323563][T11647] bcachefs (loop2): resume_logged_ops... done [ 691.324042][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.336327][T11647] bcachefs (loop2): going read-write [ 691.358519][T11647] bcachefs (loop2): done starting filesystem [ 691.361761][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.387881][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.433053][T11349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.487614][ T9262] bcachefs (loop2): shutting down [ 691.495075][ T9262] bcachefs (loop2): going read-only [ 691.501466][ T9262] bcachefs (loop2): finished waiting for writes to stop [ 691.509599][ T9262] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 691.556861][ T9262] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 9 [ 691.586207][ T9262] bcachefs (loop2): shutdown complete, journal seq 10 [ 691.595688][T11349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.599543][ T9262] bcachefs (loop2): marking filesystem clean [ 691.613150][T11349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.645825][T11349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.656950][T11349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.678239][ T9262] bcachefs (loop2): shutdown complete [ 691.688228][T11465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.731391][ T5157] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 691.858468][T11465] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.937173][ T5157] usb 1-1: Using ep0 maxpacket: 16 [ 691.952061][ T5157] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.983407][ T5157] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.002065][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.009259][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.030703][ T5157] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.046459][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.053739][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.061559][ T5157] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 692.074180][ T5157] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 692.085770][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 692.094075][ T5157] usb 1-1: SerialNumber: syz [ 692.124174][ T5157] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 692.138603][ T5157] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 692.191406][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.229858][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.330139][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.350637][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.368529][T11465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.614385][T11556] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 692.653790][T11556] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 692.747401][T11556] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 692.808649][T11556] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 692.837887][ T25] usb 1-1: USB disconnect, device number 12 [ 692.900448][T11667] loop4: detected capacity change from 0 to 1024 [ 693.057212][T11465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.177601][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 693.325524][T11465] veth0_vlan: entered promiscuous mode [ 693.344824][ T29] audit: type=1800 audit(1717646621.855:175): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1945 res=0 errno=0 [ 693.417098][T11465] veth1_vlan: entered promiscuous mode [ 693.419655][T11677] loop4: detected capacity change from 0 to 16 [ 693.444588][T11556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.452354][T11677] erofs: (device loop4): mounted with root inode @ nid 36. [ 693.473285][T11677] syz-executor.4: attempt to access beyond end of device [ 693.473285][T11677] loop4: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 693.507916][T11677] syz-executor.4: attempt to access beyond end of device [ 693.507916][T11677] loop4: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 693.545395][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.750314][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.759105][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.778626][T11682] block nbd2: shutting down sockets [ 694.824114][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.831450][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.045026][T11465] veth0_macvtap: entered promiscuous mode [ 695.094363][T11465] veth1_macvtap: entered promiscuous mode [ 695.471823][T11465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.492757][T11465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.567298][T11695] loop4: detected capacity change from 0 to 65 [ 696.478810][T11695] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 696.501592][T11465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.519820][T11695] BFS-fs: bfs_fill_super(): Last block not available on loop4: 262208 [ 696.540629][T11465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.572614][T11465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.583248][T11465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.593316][T11465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.607661][T11465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.619754][T11465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.630555][T11465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.670719][T11465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.695442][T11465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.720756][T11465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.739793][T11465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.760766][T11465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.780760][T11465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.803123][T11465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.836508][T11465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.896406][T11694] loop4: detected capacity change from 0 to 1024 [ 696.905959][T11694] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 696.917410][T11694] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 696.928560][T11694] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 696.938438][T11694] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 696.952904][T11694] journal_load_superblock: Cannot read journal superblock [ 696.960761][T11694] EXT4-fs (loop4): Could not load journal inode [ 697.763310][T11465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.783557][T11465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.832394][T11465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.886985][T11465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.210211][T11707] loop2: detected capacity change from 0 to 256 [ 698.268669][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.298362][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.512576][ T5156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.566276][ T5156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.639806][T11556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.761539][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 698.891764][T11556] veth0_vlan: entered promiscuous mode [ 699.811071][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 699.895135][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.932633][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.945585][T11556] veth1_vlan: entered promiscuous mode [ 699.965032][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 700.015265][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 700.063770][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.091379][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 700.099528][ T25] usb 1-1: SerialNumber: syz [ 700.109093][T11556] veth0_macvtap: entered promiscuous mode [ 700.168260][T11556] veth1_macvtap: entered promiscuous mode [ 700.192272][ T25] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 700.200521][ T25] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 700.217560][T11723] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 700.318261][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.341904][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.382300][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.426508][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.455387][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.483414][T11702] loop4: detected capacity change from 0 to 32768 [ 700.512709][T11702] btrfs: Deprecated parameter 'usebackuproot' [ 700.546977][T11702] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 700.566996][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.592417][T11702] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11702) [ 700.615601][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.650805][ T29] audit: type=1800 audit(1717646629.125:176): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 700.711611][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.750261][T11702] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 700.763298][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.794990][T11702] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 701.407640][T11729] loop3: detected capacity change from 0 to 16 [ 701.446165][T11702] BTRFS info (device loop4): using free-space-tree [ 701.458139][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.483420][ T25] usb 1-1: USB disconnect, device number 13 [ 701.489749][T11729] erofs: (device loop3): mounted with root inode @ nid 36. [ 701.507328][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 701.530118][T11556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.533672][T11726] syz-executor.3: attempt to access beyond end of device [ 701.533672][T11726] loop3: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 701.573765][T11726] syz-executor.3: attempt to access beyond end of device [ 701.573765][T11726] loop3: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 701.602826][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.618064][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 701.619096][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 701.620253][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.655109][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.666694][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.678268][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.682810][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 701.690301][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.709152][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.731767][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 701.732446][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 701.741997][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.777759][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 701.779520][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 701.780868][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.812694][T11702] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 701.827852][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.862113][T11702] BTRFS error (device loop4): open_ctree failed [ 701.922364][T11556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.016477][T11556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.051680][T11556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.060623][T11556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.071041][T11556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.105427][T11741] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 702.370625][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.431139][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.588101][ T2886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.612807][ T2886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.674376][T11755] block nbd3: shutting down sockets [ 702.778036][T11758] loop1: detected capacity change from 0 to 1024 [ 703.223111][ T2918] hfsplus: b-tree write err: -5, ino 4 [ 704.601245][ T5162] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 704.792941][ T5162] usb 5-1: Using ep0 maxpacket: 16 [ 705.342327][ T5162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 705.417789][ T5162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 705.453818][ T5162] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 705.482493][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.518642][ T5162] usb 5-1: config 0 descriptor?? [ 705.573481][T11786] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 705.849208][ T29] audit: type=1800 audit(1717646634.365:177): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1961 res=0 errno=0 [ 705.869476][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.951990][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.979026][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.988350][T11794] loop1: detected capacity change from 0 to 16 [ 706.027788][ T5162] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 706.042921][T11794] erofs: (device loop1): mounted with root inode @ nid 36. [ 706.052381][ T5162] hid-generic 0003:0158:0100.000B: unexpected long global item [ 706.070675][ T5162] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 706.087857][T11793] syz-executor.1: attempt to access beyond end of device [ 706.087857][T11793] loop1: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 706.121960][T11793] syz-executor.1: attempt to access beyond end of device [ 706.121960][T11793] loop1: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 706.228166][ T5162] usb 5-1: USB disconnect, device number 13 [ 706.446006][T11796] loop1: detected capacity change from 0 to 512 [ 706.496280][T11796] EXT4-fs (loop1): failed to initialize system zone (-117) [ 706.527585][T11796] EXT4-fs (loop1): mount failed [ 706.700580][T11796] loop1: detected capacity change from 0 to 64 [ 706.960166][T11784] loop3: detected capacity change from 0 to 40427 [ 706.998988][T11784] F2FS-fs (loop3): invalid crc value [ 707.012039][T11792] loop2: detected capacity change from 0 to 32768 [ 707.020167][T11792] btrfs: Deprecated parameter 'usebackuproot' [ 707.064213][T11792] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 707.075210][T11784] F2FS-fs (loop3): Found nat_bits in checkpoint [ 707.103797][T11792] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11792) [ 707.146404][T11808] loop1: detected capacity change from 0 to 764 [ 707.160451][T11808] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 707.184092][T11792] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 707.220982][T11792] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 707.229697][T11792] BTRFS info (device loop2): using free-space-tree [ 707.235740][T11808] loop1: detected capacity change from 0 to 512 [ 707.254483][T11808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 707.289868][T11808] EXT4-fs (loop1): 1 orphan inode deleted [ 707.294267][T11784] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 707.296182][T11808] EXT4-fs (loop1): 1 truncate cleaned up [ 707.315301][T11808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.989607][T11792] BTRFS info (device loop2): rebuilding free space tree [ 708.346882][T11784] syz-executor.3: attempt to access beyond end of device [ 708.346882][T11784] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 708.393705][ T9262] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 708.395739][T11784] syz-executor.3: attempt to access beyond end of device [ 708.395739][T11784] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 708.576361][T11465] syz-executor.3: attempt to access beyond end of device [ 708.576361][T11465] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 708.626151][ T5156] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 708.646588][T11465] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 708.689466][T11465] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 708.851014][ T5156] usb 5-1: Using ep0 maxpacket: 16 [ 708.886251][ T5156] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 708.910349][T11837] block nbd0: shutting down sockets [ 708.981726][ T5156] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 709.021726][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.048468][ T5156] usb 5-1: Product: syz [ 709.083247][ T5156] usb 5-1: Manufacturer: syz [ 709.097291][ T5156] usb 5-1: SerialNumber: syz [ 709.144544][ T5156] usb 5-1: config 0 descriptor?? [ 709.375417][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.521632][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.722772][ T5156] usb 5-1: USB disconnect, device number 14 [ 709.781981][ T29] audit: type=1800 audit(1717646638.295:178): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 709.802302][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.883367][T11847] loop2: detected capacity change from 0 to 16 [ 709.922010][T11847] erofs: (device loop2): mounted with root inode @ nid 36. [ 709.955648][T11846] syz-executor.2: attempt to access beyond end of device [ 709.955648][T11846] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 709.987579][T11846] syz-executor.2: attempt to access beyond end of device [ 709.987579][T11846] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 710.057876][T11556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.358518][T11854] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 710.397640][T11855] loop2: detected capacity change from 0 to 512 [ 710.480059][T11855] EXT4-fs (loop2): failed to initialize system zone (-117) [ 710.537989][T11855] EXT4-fs (loop2): mount failed [ 710.652525][T11855] loop2: detected capacity change from 0 to 64 [ 711.762678][T11849] loop1: detected capacity change from 0 to 32768 [ 711.803311][T11849] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11849) [ 711.895338][T11849] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 711.937112][T11883] loop4: detected capacity change from 0 to 1024 [ 711.949708][T11849] BTRFS error (device loop1): unsupported checksum algorithm: 8 [ 711.983696][T11849] BTRFS error (device loop1): open_ctree failed [ 712.062808][T11883] hfsplus: invalid extended attribute record [ 712.138408][T11886] loop3: detected capacity change from 0 to 764 [ 712.170274][T11886] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 712.256766][T11886] loop3: detected capacity change from 0 to 512 [ 712.291759][ T2443] hfsplus: b-tree write err: -5, ino 4 [ 712.303269][T11886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 712.361810][T11886] EXT4-fs (loop3): 1 orphan inode deleted [ 712.385949][T11886] EXT4-fs (loop3): 1 truncate cleaned up [ 712.419739][T11886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.509457][T11872] loop2: detected capacity change from 0 to 32768 [ 712.532924][T11872] btrfs: Deprecated parameter 'usebackuproot' [ 712.543871][T11872] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 712.575812][T11872] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11872) [ 712.610360][T11897] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 712.646814][T11872] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 712.688465][T11872] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 712.741940][T11872] BTRFS info (device loop2): using free-space-tree [ 712.841512][T11904] loop1: detected capacity change from 0 to 512 [ 712.856958][T11904] EXT4-fs (loop1): failed to initialize system zone (-117) [ 712.865448][T11904] EXT4-fs (loop1): mount failed [ 712.972200][T11904] loop1: detected capacity change from 0 to 64 [ 713.004443][T11872] BTRFS info (device loop2): rebuilding free space tree [ 713.224140][ T9262] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 714.785098][T11936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 714.990253][T11891] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 715.285420][T11465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.632844][T11958] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 715.692043][T11960] block nbd2: shutting down sockets [ 715.732749][T11958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.740256][T11958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.146937][T11952] block nbd0: shutting down sockets [ 716.147577][T11964] loop1: detected capacity change from 0 to 512 [ 716.185598][T11964] EXT4-fs (loop1): failed to initialize system zone (-117) [ 716.246068][T11964] EXT4-fs (loop1): mount failed [ 716.527605][T11964] loop1: detected capacity change from 0 to 64 [ 717.207128][T11980] serio: Serial port pts0 [ 717.349223][T11983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.625207][T11990] loop3: detected capacity change from 0 to 764 [ 717.647923][T11990] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 717.768215][T11990] loop3: detected capacity change from 0 to 512 [ 717.786707][T11990] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 717.832094][T11990] EXT4-fs (loop3): 1 orphan inode deleted [ 717.842032][T11990] EXT4-fs (loop3): 1 truncate cleaned up [ 717.849754][T11990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.870115][T11989] loop1: detected capacity change from 0 to 4096 [ 717.921652][T11989] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 718.405587][T11996] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 718.422315][T11992] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 721.544365][T11994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.664244][T11994] bond0: (slave bond1): Enslaving as an active interface with an up link [ 721.766240][T11465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.865414][T12004] loop1: detected capacity change from 0 to 2048 [ 721.921081][T12004] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.062764][T12004] nÅñcÜ;pîÂ=¸: tun_chr_ioctl cmd 1074025681 [ 722.536548][T12014] loop4: detected capacity change from 0 to 512 [ 722.570363][T12014] EXT4-fs (loop4): failed to initialize system zone (-117) [ 722.642790][T12014] EXT4-fs (loop4): mount failed [ 723.033548][T12014] loop4: detected capacity change from 0 to 64 [ 723.253851][T12020] loop1: detected capacity change from 0 to 1024 [ 724.636360][ T5199] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 724.841298][ T5199] usb 2-1: Using ep0 maxpacket: 8 [ 724.852684][ T5199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.882723][ T5199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.904883][ T5199] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 724.930349][ T5199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.954739][ T5199] usb 2-1: config 0 descriptor?? [ 727.732020][T12040] block nbd2: shutting down sockets [ 727.781858][T12045] loop3: detected capacity change from 0 to 764 [ 727.794561][T12038] loop4: detected capacity change from 0 to 4096 [ 727.830095][T12045] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 727.858843][T12038] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 727.979445][T12045] loop3: detected capacity change from 0 to 512 [ 728.015359][T12045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 728.294466][T12045] EXT4-fs (loop3): 1 orphan inode deleted [ 729.613982][T12045] EXT4-fs (loop3): 1 truncate cleaned up [ 729.689036][T12045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.900839][ T5199] usbhid 2-1:0.0: can't add hid device: -71 [ 729.917814][ T5199] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 729.972438][ T5199] usb 2-1: USB disconnect, device number 13 [ 730.015026][T12054] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 730.243954][T12056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 730.274462][T12056] bond0: (slave bond1): Enslaving as an active interface with an up link [ 730.324681][ T2443] hfsplus: b-tree write err: -5, ino 4 [ 730.793953][ T5161] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 731.039609][ T5161] usb 2-1: Using ep0 maxpacket: 16 [ 731.096779][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.113027][T11465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.118773][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.141499][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 731.156051][ T5161] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 731.190800][ T5161] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.200060][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 731.212832][ T5161] usb 2-1: SerialNumber: syz [ 731.249543][ T5161] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 731.270440][ T5161] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 732.606389][T12058] loop1: detected capacity change from 0 to 1024 [ 732.709458][T12058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.744431][T12075] loop3: detected capacity change from 0 to 16 [ 733.050083][ T5159] usb 2-1: USB disconnect, device number 14 [ 733.348631][T12086] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 733.551009][T11556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.274158][T12108] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 736.258347][T12114] loop1: detected capacity change from 0 to 764 [ 736.272407][T12111] block nbd4: shutting down sockets [ 736.297954][T12114] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 736.459385][T12114] loop1: detected capacity change from 0 to 512 [ 736.516852][T12114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 736.591872][T12114] EXT4-fs (loop1): 1 orphan inode deleted [ 736.633000][T12114] EXT4-fs (loop1): 1 truncate cleaned up [ 736.669446][T12114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.731876][T12122] block nbd3: shutting down sockets [ 739.255692][T12121] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 742.592289][T12160] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 743.638559][T11556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.975896][T12181] block nbd4: shutting down sockets [ 745.616327][T12196] block nbd1: shutting down sockets [ 746.575069][T12190] loop3: detected capacity change from 0 to 32768 [ 746.698237][T12190] diRead: diIAGRead returned -5 [ 747.334077][T12204] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 747.544314][T12206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 747.559157][T12206] bond0: (slave bond2): Enslaving as an active interface with an up link [ 747.748975][T12218] loop4: detected capacity change from 0 to 764 [ 747.797457][T12218] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 747.902724][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.922379][T12218] loop4: detected capacity change from 0 to 512 [ 747.961353][T12218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 748.031073][T12218] EXT4-fs (loop4): 1 orphan inode deleted [ 748.088040][T12218] EXT4-fs (loop4): 1 truncate cleaned up [ 748.102401][T12218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.203866][T12228] loop3: detected capacity change from 0 to 65 [ 749.130034][T12228] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 749.160866][T12228] BFS-fs: bfs_fill_super(): Last block not available on loop3: 262208 [ 749.490342][T12225] loop3: detected capacity change from 0 to 1024 [ 749.505367][T12225] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 749.525266][T12225] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 749.536466][T12225] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 749.546168][T12225] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 749.558706][T12225] journal_load_superblock: Cannot read journal superblock [ 749.566017][T12225] EXT4-fs (loop3): Could not load journal inode [ 750.579095][T12224] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 751.186900][T12242] loop3: detected capacity change from 0 to 65 [ 751.203855][T12242] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 751.222455][T12242] BFS-fs: bfs_fill_super(): Last block not available on loop3: 262208 [ 751.589957][T12242] loop3: detected capacity change from 0 to 1024 [ 751.623420][T12242] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 751.632718][T12242] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 751.644802][T12242] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 751.657825][T12242] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 751.676299][T12242] journal_load_superblock: Cannot read journal superblock [ 751.685198][T12242] EXT4-fs (loop3): Could not load journal inode [ 752.582544][T12246] block nbd2: shutting down sockets [ 754.023094][T12258] block nbd3: shutting down sockets [ 754.070282][T12264] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 754.400462][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.413442][T12266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 754.421627][T12266] bond0: (slave bond1): Enslaving as an active interface with an up link [ 754.701203][ T29] audit: type=1800 audit(1717646683.214:179): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 754.816104][T12272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.896736][T12275] loop4: detected capacity change from 0 to 16 [ 754.968469][T12275] erofs: (device loop4): mounted with root inode @ nid 36. [ 755.002416][T12275] syz-executor.4: attempt to access beyond end of device [ 755.002416][T12275] loop4: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 755.222364][T12270] syz-executor.4: attempt to access beyond end of device [ 755.222364][T12270] loop4: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 756.110868][ T29] audit: type=1326 audit(1717646684.624:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 756.249369][ T29] audit: type=1326 audit(1717646684.624:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 756.308692][ T29] audit: type=1326 audit(1717646684.624:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 756.389499][ T29] audit: type=1326 audit(1717646684.884:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 756.515396][ T29] audit: type=1326 audit(1717646684.884:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 756.607460][ T29] audit: type=1326 audit(1717646684.884:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 756.667871][T12286] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 757.892245][ T29] audit: type=1326 audit(1717646684.884:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 758.128119][ T29] audit: type=1326 audit(1717646684.884:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3c17a7ba67 code=0x7ffc0000 [ 758.222272][ T29] audit: type=1326 audit(1717646684.884:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3c17a7e66a code=0x7ffc0000 [ 758.435702][T12305] loop4: detected capacity change from 0 to 764 [ 758.480181][T12305] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 758.645626][T12305] loop4: detected capacity change from 0 to 512 [ 758.733855][T12305] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 758.851432][T12305] EXT4-fs (loop4): 1 orphan inode deleted [ 758.859465][T12305] EXT4-fs (loop4): 1 truncate cleaned up [ 758.887665][T12305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.992871][T12322] block nbd1: shutting down sockets [ 760.112220][T12327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.459307][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.862434][T12350] block nbd3: shutting down sockets [ 763.907995][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 763.908017][ T29] audit: type=1800 audit(1717646692.424:240): pid=12352 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 764.025116][T12356] loop4: detected capacity change from 0 to 16 [ 764.060047][T12356] erofs: (device loop4): mounted with root inode @ nid 36. [ 764.089722][T12352] syz-executor.4: attempt to access beyond end of device [ 764.089722][T12352] loop4: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 764.111752][T12352] syz-executor.4: attempt to access beyond end of device [ 764.111752][T12352] loop4: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 764.160459][T12363] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 766.567900][T12394] loop3: detected capacity change from 0 to 764 [ 766.583843][T12394] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 767.351715][T12394] loop3: detected capacity change from 0 to 512 [ 769.163801][T12396] loop2: detected capacity change from 0 to 4096 [ 769.230229][T12394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 769.255274][T12396] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 769.289048][T12394] EXT4-fs (loop3): 1 orphan inode deleted [ 769.365159][T12394] EXT4-fs (loop3): 1 truncate cleaned up [ 769.428899][T12414] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 769.477297][T12394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.520483][T12396] ntfs3: loop2: Failed to read $UpCase (-4). [ 769.535853][T12416] block nbd1: shutting down sockets [ 769.592351][T11465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.050605][T12425] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 770.418830][T12423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 770.466957][T12423] bond0: (slave bond3): Enslaving as an active interface with an up link [ 771.045260][T12434] loop2: detected capacity change from 0 to 65 [ 771.964310][T12434] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 771.985204][T12434] BFS-fs: bfs_fill_super(): Last block not available on loop2: 262208 [ 772.190395][T12433] loop2: detected capacity change from 0 to 1024 [ 772.198086][T12433] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 772.206619][T12433] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 772.217586][T12433] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 772.229425][T12433] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 772.273382][T12433] journal_load_superblock: Cannot read journal superblock [ 772.280575][T12433] EXT4-fs (loop2): Could not load journal inode [ 772.784319][T12437] block nbd3: shutting down sockets [ 774.067757][T12454] loop1: detected capacity change from 0 to 764 [ 774.107408][T12454] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 774.613761][T12454] loop1: detected capacity change from 0 to 512 [ 774.628813][T12454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 774.850779][T12465] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 775.326094][T12454] EXT4-fs (loop1): 1 orphan inode deleted [ 775.331970][T12454] EXT4-fs (loop1): 1 truncate cleaned up [ 775.396271][T12454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.665405][T12473] loop4: detected capacity change from 0 to 128 [ 775.691513][ T5109] Bluetooth: hci0: command 0x0406 tx timeout [ 775.713535][T12479] loop3: detected capacity change from 0 to 128 [ 775.755161][T12479] FAT-fs (loop3): Directory bread(block 160) failed [ 775.780209][T12479] FAT-fs (loop3): Directory bread(block 161) failed [ 775.787178][T12479] FAT-fs (loop3): Directory bread(block 162) failed [ 775.791225][T12473] overlayfs: failed to resolve 'dont_hash': -2 [ 775.804370][T12479] FAT-fs (loop3): Directory bread(block 163) failed [ 775.827662][T12479] FAT-fs (loop3): Directory bread(block 164) failed [ 775.838112][T12479] FAT-fs (loop3): Directory bread(block 165) failed [ 775.855761][T12483] block nbd2: shutting down sockets [ 775.872174][T12479] FAT-fs (loop3): Directory bread(block 166) failed [ 775.893783][T12479] FAT-fs (loop3): Directory bread(block 167) failed [ 775.934901][T12479] FAT-fs (loop3): Directory bread(block 160) failed [ 775.979818][T12479] FAT-fs (loop3): Directory bread(block 161) failed [ 776.292210][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 776.778405][T12469] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 780.770624][T12510] block nbd0: shutting down sockets [ 780.789189][T12522] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 781.201179][T12520] loop4: detected capacity change from 0 to 4096 [ 781.238844][T12520] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 781.373268][T11556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.723958][ T29] audit: type=1326 audit(1717646712.223:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 783.799671][T12541] loop2: detected capacity change from 0 to 65 [ 784.738021][T12541] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 784.752215][T12541] BFS-fs: bfs_fill_super(): Last block not available on loop2: 262208 [ 784.817420][ T29] audit: type=1326 audit(1717646712.223:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 784.905327][ T29] audit: type=1326 audit(1717646712.633:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 784.992750][ T29] audit: type=1326 audit(1717646712.643:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 785.071485][ T29] audit: type=1326 audit(1717646712.643:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 785.145021][ T29] audit: type=1326 audit(1717646712.663:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 785.222672][ T29] audit: type=1326 audit(1717646713.323:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c17a7cf69 code=0x7ffc0000 [ 785.255248][T12539] loop1: detected capacity change from 0 to 4096 [ 785.327383][ T29] audit: type=1326 audit(1717646713.333:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c17a7a6e7 code=0x7ffc0000 [ 785.369267][ T29] audit: type=1326 audit(1717646713.333:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c17a403b9 code=0x7ffc0000 [ 785.391714][ T29] audit: type=1326 audit(1717646713.333:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c17a7a6e7 code=0x7ffc0000 [ 787.500972][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 787.598053][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 787.850066][T12566] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 788.921301][T12555] block nbd0: shutting down sockets [ 789.095635][T12574] loop1: detected capacity change from 0 to 764 [ 789.103502][T12574] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 789.173893][T12576] loop4: detected capacity change from 0 to 256 [ 789.184178][T12574] loop1: detected capacity change from 0 to 512 [ 789.199744][T12574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 789.240571][T12574] EXT4-fs (loop1): 1 orphan inode deleted [ 789.263778][T12574] EXT4-fs (loop1): 1 truncate cleaned up [ 789.284731][T12574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.317219][T12576] FAT-fs (loop4): Directory bread(block 64) failed [ 789.496252][T12582] loop2: detected capacity change from 0 to 256 [ 789.508463][T12576] FAT-fs (loop4): Directory bread(block 65) failed [ 789.521333][T12576] FAT-fs (loop4): Directory bread(block 66) failed [ 789.559498][T12576] FAT-fs (loop4): Directory bread(block 67) failed [ 789.566627][T12576] FAT-fs (loop4): Directory bread(block 68) failed [ 789.582979][T12576] FAT-fs (loop4): Directory bread(block 69) failed [ 789.620504][T12576] FAT-fs (loop4): Directory bread(block 70) failed [ 789.665029][T12576] FAT-fs (loop4): Directory bread(block 71) failed [ 789.716391][T12576] FAT-fs (loop4): Directory bread(block 72) failed [ 789.757007][T12576] FAT-fs (loop4): Directory bread(block 73) failed [ 790.373116][T12576] Bluetooth: MGMT ver 1.22 [ 790.394031][T12576] Bluetooth: hci3: invalid length 0, exp 2 for type 18 [ 790.733858][T12597] loop2: detected capacity change from 0 to 65 [ 790.810765][T12597] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 790.833637][T12597] BFS-fs: bfs_fill_super(): Last block not available on loop2: 262208 [ 790.962945][T12572] Bluetooth: hci3: command 0x0406 tx timeout [ 791.194065][T12597] loop2: detected capacity change from 0 to 1024 [ 791.246173][T12597] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 791.255681][T12597] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 791.266756][T12597] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 791.280585][T12597] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 791.308811][T12581] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 791.328351][T12597] journal_load_superblock: Cannot read journal superblock [ 791.335915][T12597] EXT4-fs (loop2): Could not load journal inode [ 792.353671][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 792.353693][ T29] audit: type=1326 audit(1717646720.873:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1287cf69 code=0x7ffc0000 [ 792.365009][T12607] block nbd4: shutting down sockets [ 792.433181][ T29] audit: type=1326 audit(1717646720.933:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1287cf69 code=0x7ffc0000 [ 792.455433][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.462262][ T29] audit: type=1326 audit(1717646720.933:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1287cf69 code=0x7ffc0000 [ 792.484506][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.491037][ T29] audit: type=1326 audit(1717646720.933:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1287cf69 code=0x7ffc0000 [ 792.520021][ T29] audit: type=1326 audit(1717646720.953:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b1287cf69 code=0x7ffc0000 [ 792.573284][ T29] audit: type=1326 audit(1717646721.073:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1287cf69 code=0x7ffc0000 [ 792.638573][ T29] audit: type=1326 audit(1717646721.093:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1287a6e7 code=0x7ffc0000 [ 792.748678][ T29] audit: type=1326 audit(1717646721.093:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b128403b9 code=0x7ffc0000 [ 792.770851][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.868699][ T29] audit: type=1326 audit(1717646721.093:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b1287a6e7 code=0x7ffc0000 [ 792.922184][ T29] audit: type=1326 audit(1717646721.093:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12605 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b128403b9 code=0x7ffc0000 [ 793.266678][T11556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.303736][T12606] loop2: detected capacity change from 0 to 4096 [ 793.370551][T12606] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 795.734073][T12606] ntfs3: loop2: Failed to read $UpCase (-4). [ 798.120345][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 798.718426][T12631] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 798.758758][T12627] block nbd1: shutting down sockets [ 799.037049][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 799.130568][T12639] loop2: detected capacity change from 0 to 256 [ 799.352140][T12639] FAT-fs (loop2): Directory bread(block 64) failed [ 799.427791][T12644] loop4: detected capacity change from 0 to 65 [ 799.467621][T12639] FAT-fs (loop2): Directory bread(block 65) failed [ 799.479540][T12639] FAT-fs (loop2): Directory bread(block 66) failed [ 799.487234][T12639] FAT-fs (loop2): Directory bread(block 67) failed [ 799.496620][T12639] FAT-fs (loop2): Directory bread(block 68) failed [ 799.504197][T12639] FAT-fs (loop2): Directory bread(block 69) failed [ 799.512618][T12639] FAT-fs (loop2): Directory bread(block 70) failed [ 799.522792][T12644] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 799.552348][T12644] BFS-fs: bfs_fill_super(): Last block not available on loop4: 262208 [ 799.595322][T12639] FAT-fs (loop2): Directory bread(block 71) failed [ 799.630907][T12639] FAT-fs (loop2): Directory bread(block 72) failed [ 799.638385][T12639] FAT-fs (loop2): Directory bread(block 73) failed [ 799.739668][T12644] loop4: detected capacity change from 0 to 1024 [ 800.309597][T12644] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 800.334531][T12644] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 800.334580][T12644] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 800.334810][T12644] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 800.385631][T12644] journal_load_superblock: Cannot read journal superblock [ 800.385669][T12644] EXT4-fs (loop4): Could not load journal inode [ 800.982621][T12651] loop4: detected capacity change from 0 to 2048 [ 801.047281][T12651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.069017][T12637] Bluetooth: hci3: invalid length 0, exp 2 for type 18 [ 801.123290][T12572] Bluetooth: hci4: command 0x0406 tx timeout [ 801.806903][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.430728][T12669] block nbd4: shutting down sockets [ 804.101389][T12677] loop2: detected capacity change from 0 to 32768 [ 804.388187][T12677] loop2: detected capacity change from 0 to 4096 [ 804.454173][T12679] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 804.735357][T12683] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 805.231625][T12692] loop4: detected capacity change from 0 to 16 [ 805.323947][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 805.874104][T12703] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 806.436161][T12707] loop1: detected capacity change from 0 to 65 [ 806.464521][T12707] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 806.480338][T12707] BFS-fs: bfs_fill_super(): Last block not available on loop1: 262208 [ 806.908507][T12707] loop1: detected capacity change from 0 to 1024 [ 806.936642][T12707] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 806.947728][T12707] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 806.958812][T12707] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 806.968975][T12707] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 806.992489][T12707] journal_load_superblock: Cannot read journal superblock [ 807.000239][T12707] EXT4-fs (loop1): Could not load journal inode [ 807.616963][T12709] loop3: detected capacity change from 0 to 2048 [ 807.660476][T12713] loop1: detected capacity change from 0 to 256 [ 807.681025][T12709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.736480][T12713] FAT-fs (loop1): bogus number of directory entries (4) [ 807.772373][T12713] FAT-fs (loop1): Can't find a valid FAT filesystem [ 809.097482][T12718] block nbd2: shutting down sockets [ 809.288231][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.498612][T12743] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 811.324595][T12752] block nbd2: shutting down sockets [ 811.627141][T12754] loop1: detected capacity change from 0 to 4096 [ 811.727839][T12754] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 813.969691][T11465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.460619][T12766] loop3: detected capacity change from 0 to 65 [ 814.801299][T12766] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 814.827866][T12766] BFS-fs: bfs_fill_super(): Last block not available on loop3: 262208 [ 815.035288][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 815.467194][T12764] loop3: detected capacity change from 0 to 1024 [ 815.523914][ T5161] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 815.534342][T12764] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 815.547074][T12764] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 815.558217][T12764] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 815.568042][T12764] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 815.584494][T12764] journal_load_superblock: Cannot read journal superblock [ 815.591767][T12764] EXT4-fs (loop3): Could not load journal inode [ 815.934453][ T5161] usb 3-1: Using ep0 maxpacket: 16 [ 815.948361][ T5161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.967040][ T5161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.977528][ T5161] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 815.988987][ T5161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.250620][ T5161] usb 3-1: config 0 descriptor?? [ 817.039537][ T5161] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 817.046931][T12779] loop4: detected capacity change from 0 to 764 [ 817.056701][ T5161] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 817.084525][ T5161] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 817.092386][ T5161] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 817.120561][T12779] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 817.178134][ T5161] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 817.209189][T12779] loop4: detected capacity change from 0 to 512 [ 817.236414][ T5161] savu 0003:1E7D:2D5A.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 817.262105][T12779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 817.286784][ T5161] usb 3-1: USB disconnect, device number 11 [ 817.346557][T12779] EXT4-fs (loop4): 1 orphan inode deleted [ 817.404977][T12779] EXT4-fs (loop4): 1 truncate cleaned up [ 817.426903][T12779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.014431][T12789] block nbd0: shutting down sockets [ 818.164001][T12796] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 818.979326][T12804] loop2: detected capacity change from 0 to 4096 [ 819.031850][T12806] loop1: detected capacity change from 0 to 2048 [ 819.063418][T12804] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 819.232417][T12806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.328543][T12783] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 821.538648][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.708879][T12819] block nbd3: shutting down sockets [ 823.744859][T12829] loop2: detected capacity change from 0 to 1024 [ 824.928368][T12829] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 825.929070][T12829] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 825.940212][T12829] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 825.949983][T12829] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 825.974233][T12829] journal_load_superblock: Cannot read journal superblock [ 825.981459][T12829] EXT4-fs (loop2): Could not load journal inode [ 826.604668][T12842] loop3: detected capacity change from 0 to 16 [ 826.661607][T12842] erofs: (device loop3): mounted with root inode @ nid 36. [ 826.679196][T12833] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 827.414898][T12842] syz-executor.3: attempt to access beyond end of device [ 827.414898][T12842] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 827.466021][T12842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 827.860509][T12849] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 828.217532][T12854] loop3: detected capacity change from 0 to 764 [ 828.244047][T12854] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 828.316376][T12854] loop3: detected capacity change from 0 to 512 [ 828.346720][T12854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 828.529183][T12854] EXT4-fs (loop3): 1 orphan inode deleted [ 828.572239][T12864] block nbd4: shutting down sockets [ 828.577876][T12854] EXT4-fs (loop3): 1 truncate cleaned up [ 828.615402][T12854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.624199][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 828.705304][T11556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.853709][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 828.938968][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 828.992438][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 829.044211][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 829.069996][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.106127][ T25] usb 3-1: config 0 descriptor?? [ 829.142596][T12857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.159797][ T25] hub 3-1:0.0: USB hub found [ 829.394145][T12857] Bluetooth: MGMT ver 1.22 [ 829.402658][ T25] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 829.486403][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 829.502050][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 829.560786][ T25] usb 3-1: USB disconnect, device number 12 [ 830.564844][T12874] loop2: detected capacity change from 0 to 256 [ 830.795438][T12874] FAT-fs (loop2): Directory bread(block 64) failed [ 830.812931][T12874] FAT-fs (loop2): Directory bread(block 65) failed [ 830.819939][T12874] FAT-fs (loop2): Directory bread(block 66) failed [ 830.847511][T12874] FAT-fs (loop2): Directory bread(block 67) failed [ 830.861618][T12874] FAT-fs (loop2): Directory bread(block 68) failed [ 830.868484][T12874] FAT-fs (loop2): Directory bread(block 69) failed [ 830.875695][T12874] FAT-fs (loop2): Directory bread(block 70) failed [ 830.882320][T12874] FAT-fs (loop2): Directory bread(block 71) failed [ 830.889253][T12874] FAT-fs (loop2): Directory bread(block 72) failed [ 830.901776][T12874] FAT-fs (loop2): Directory bread(block 73) failed [ 831.774495][T12863] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 831.960740][T12879] loop4: detected capacity change from 0 to 1024 [ 832.789092][T12879] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 832.863082][T12879] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 832.874942][T12879] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 832.884790][T12879] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 832.895619][T11465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.909701][T12879] journal_load_superblock: Cannot read journal superblock [ 832.917031][T12879] EXT4-fs (loop4): Could not load journal inode [ 833.631457][T12895] block nbd3: shutting down sockets [ 833.676531][T12906] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 834.614129][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 834.973830][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 835.000717][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 835.065030][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 835.271567][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 835.304908][T12920] block nbd4: shutting down sockets [ 835.338701][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.444640][ T25] usb 2-1: config 0 descriptor?? [ 835.496962][T12912] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 835.578165][ T25] hub 2-1:0.0: USB hub found [ 835.869860][ T25] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 835.902710][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 835.956337][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 836.076402][ T25] usb 2-1: USB disconnect, device number 15 [ 836.481272][T12922] loop3: detected capacity change from 0 to 764 [ 836.554843][T12922] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000ÿ' [ 836.700604][T12922] loop3: detected capacity change from 0 to 512 [ 836.780863][T12922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 836.869050][T12922] EXT4-fs (loop3): 1 orphan inode deleted [ 836.896087][T12922] EXT4-fs (loop3): 1 truncate cleaned up [ 836.924682][T12922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.548227][T12930] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 837.736030][T12936] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 837.879314][T12938] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 837.995941][T12938] loop4: detected capacity change from 0 to 512 [ 838.046824][T12938] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 838.151215][T12938] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 838.162488][T12938] EXT4-fs (loop4): 1 truncate cleaned up [ 838.180574][T12938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.267228][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.367934][T12949] loop2: detected capacity change from 0 to 1024 [ 838.520228][T12954] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 839.423075][T11465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.814661][T12970] loop3: detected capacity change from 0 to 512 [ 841.740783][T12972] block nbd2: shutting down sockets [ 841.746776][T12970] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 843.636576][T12990] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 843.851695][T12995] loop1: detected capacity change from 0 to 256 [ 844.792877][T13013] block nbd4: shutting down sockets [ 844.952831][T12981] loop2: detected capacity change from 0 to 40427 [ 845.047338][T12981] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 845.074114][T12981] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 845.141332][T12981] F2FS-fs (loop2): Found nat_bits in checkpoint [ 845.351600][T12981] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 845.380443][T12981] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 845.592197][T13023] loop3: detected capacity change from 0 to 256 [ 845.639289][T13023] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 845.814452][ T2462] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 846.062064][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 846.443313][T13033] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 848.438128][T13049] loop4: detected capacity change from 0 to 256 [ 849.526483][T13073] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 849.738692][T13042] loop2: detected capacity change from 0 to 40427 [ 849.750842][T13078] block nbd3: shutting down sockets [ 849.805549][T13042] F2FS-fs (loop2): invalid crc value [ 849.844313][T13042] F2FS-fs (loop2): Found nat_bits in checkpoint [ 850.046223][T13042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 850.436660][T13084] syz-executor.2: attempt to access beyond end of device [ 850.436660][T13084] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 850.453936][T13084] syz-executor.2: attempt to access beyond end of device [ 850.453936][T13084] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 854.472210][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 854.472227][ T29] audit: type=1800 audit(1717646778.932:434): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 854.625233][ T29] audit: type=1804 audit(1717646779.002:435): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3360241284/syzkaller.DkkJ0u/212/file0/file2" dev="loop2" ino=10 res=1 errno=0 [ 854.650218][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.765990][ T29] audit: type=1800 audit(1717646782.902:436): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 854.837916][T13089] loop3: detected capacity change from 0 to 1764 [ 854.914724][ T9262] syz-executor.2: attempt to access beyond end of device [ 854.914724][ T9262] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 854.958793][ T9262] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 855.141187][T13095] loop1: detected capacity change from 0 to 128 [ 855.183891][T13095] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 855.268376][T13095] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 855.928854][ T2462] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 856.304095][T13112] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 856.935423][T13128] block nbd4: shutting down sockets [ 859.405470][T13140] loop2: detected capacity change from 0 to 128 [ 859.441317][T13140] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 859.505820][T13140] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 859.925335][ T35] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 860.048680][T13148] loop1: detected capacity change from 0 to 1764 [ 860.079474][ T5113] Bluetooth: hci1: unexpected subevent 0x04 length: 10 < 11 [ 860.284873][T13154] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 862.643775][T13177] loop4: detected capacity change from 0 to 512 [ 862.721322][T13177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 862.810159][T13177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 862.872282][T13177] ext4 filesystem being mounted at /root/syzkaller-testdir992246061/syzkaller.NcIfWd/86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.949477][T13183] block nbd3: shutting down sockets [ 863.187552][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 863.489242][T13187] loop4: detected capacity change from 0 to 128 [ 863.536221][T13187] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 863.602271][T13187] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 863.912816][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 864.213192][T13193] loop4: detected capacity change from 0 to 2048 [ 864.261753][T13193] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 864.323246][T13193] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 864.458569][ T29] audit: type=1804 audit(1717646792.971:437): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir992246061/syzkaller.NcIfWd/88/file0/bus" dev="loop4" ino=1367 res=1 errno=0 [ 864.483733][ C1] vkms_vblank_simulate: vblank timer overrun [ 865.047677][T13190] loop2: detected capacity change from 0 to 40427 [ 865.076231][T13190] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 865.096631][T13190] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 865.169707][T13190] F2FS-fs (loop2): Found nat_bits in checkpoint [ 865.321686][T13201] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 865.368290][T13190] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 865.383022][T13190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 865.599079][T13206] loop4: detected capacity change from 0 to 512 [ 865.725475][T13206] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 865.753346][T13206] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 865.807449][T13206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.023945][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.060753][T13214] loop1: detected capacity change from 0 to 256 [ 866.111908][T13214] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 866.441413][ T5113] Bluetooth: hci0: unexpected subevent 0x04 length: 10 < 11 [ 866.848588][T13230] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 867.256962][T13239] loop2: detected capacity change from 0 to 1024 [ 867.283134][T13212] loop3: detected capacity change from 0 to 32768 [ 867.294623][T13240] block nbd0: shutting down sockets [ 867.380700][T13212] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 867.522873][ T35] hfsplus: b-tree write err: -5, ino 4 [ 867.640319][T13212] XFS (loop3): Ending clean mount [ 867.740050][T13212] XFS (loop3): Quotacheck needed: Please wait. [ 867.896999][T13222] loop4: detected capacity change from 0 to 32768 [ 867.942755][T13222] XFS: noikeep mount option is deprecated. [ 867.987379][T13212] XFS (loop3): Quotacheck: Done. [ 868.000213][ T5159] XFS (loop4): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 868.042894][T13222] XFS (loop4): SB validate failed with error -22. [ 868.667049][T11465] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 868.839348][T13268] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 869.219441][T13222] loop4: detected capacity change from 0 to 4096 [ 869.307188][T13222] NILFS (loop4): invalid segment: Checksum error in segment payload [ 869.332385][T13222] NILFS (loop4): trying rollback from an earlier position [ 869.373288][T13222] NILFS (loop4): recovery complete [ 869.394061][T13273] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 869.495340][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 869.524147][T13276] netlink: 'syz-executor.3': attribute type 20 has an invalid length. [ 869.749406][T13281] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 869.843827][ T29] audit: type=1326 audit(1717646798.351:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 869.982610][ T29] audit: type=1326 audit(1717646798.351:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 870.046383][ T29] audit: type=1326 audit(1717646798.381:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 870.107072][ T29] audit: type=1326 audit(1717646798.381:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 870.195760][ T29] audit: type=1326 audit(1717646798.381:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 870.290331][ T29] audit: type=1326 audit(1717646798.391:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 870.361128][ T29] audit: type=1326 audit(1717646798.401:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 870.401113][T13296] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 870.459348][ T29] audit: type=1326 audit(1717646798.401:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 870.729318][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.770477][ T29] audit: type=1326 audit(1717646798.411:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2fb7c7ba67 code=0x7ffc0000 [ 870.792762][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.912295][T13301] veth0_vlan: entered allmulticast mode [ 871.104720][T13302] veth0_vlan: left promiscuous mode [ 871.112077][T13302] veth0_vlan: entered promiscuous mode [ 871.478963][ T29] audit: type=1326 audit(1717646798.411:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb7c7cf69 code=0x7ffc0000 [ 872.762149][ T5113] Bluetooth: hci4: unexpected subevent 0x04 length: 10 < 11 [ 872.946089][T13319] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 873.515524][T13332] block nbd0: shutting down sockets [ 874.563346][T13355] loop3: detected capacity change from 0 to 512 [ 874.620176][T13318] loop1: detected capacity change from 0 to 32768 [ 874.694161][T13318] XFS: noikeep mount option is deprecated. [ 874.709747][T13318] XFS (loop1): Invalid device [./file0], error=-16 [ 874.737220][T13355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.751617][T13355] ext4 filesystem being mounted at /root/syzkaller-testdir2816352399/syzkaller.ygeJfv/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.981317][T13347] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 875.009977][T13347] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 875.031942][T13347] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 875.070443][T13347] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 875.547701][T13318] loop1: detected capacity change from 0 to 4096 [ 875.570842][T13364] loop4: detected capacity change from 0 to 16 [ 875.606010][T13364] erofs: (device loop4): mounted with root inode @ nid 36. [ 875.623152][T13318] NILFS (loop1): invalid segment: Checksum error in segment payload [ 875.632590][T11465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.675804][T13318] NILFS (loop1): trying rollback from an earlier position [ 875.738045][T13318] NILFS (loop1): recovery complete [ 875.752450][T13365] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 876.107572][T13371] loop4: detected capacity change from 0 to 512 [ 876.289822][T13371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.362657][T13371] ext4 filesystem being mounted at /root/syzkaller-testdir992246061/syzkaller.NcIfWd/98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.336298][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.763229][T13388] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 877.786745][T13339] syz-executor.2: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 877.824767][T13339] CPU: 1 PID: 13339 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 [ 877.835356][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 877.845472][T13339] Call Trace: [ 877.848791][T13339] [ 877.851761][T13339] dump_stack_lvl+0x241/0x360 [ 877.856683][T13339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.861946][T13339] ? __pfx__printk+0x10/0x10 [ 877.866593][T13339] ? __rcu_read_unlock+0xa1/0x110 [ 877.871675][T13339] warn_alloc+0x278/0x410 [ 877.876060][T13339] ? __pfx_warn_alloc+0x10/0x10 [ 877.880962][T13339] ? hash_netiface_create+0x356/0x1040 [ 877.886483][T13339] ? __get_vm_area_node+0x23d/0x270 [ 877.891746][T13339] __vmalloc_node_range_noprof+0x69f/0x1460 [ 877.897740][T13339] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 877.904132][T13339] ? hash_netiface_create+0x356/0x1040 [ 877.909654][T13339] ? __get_vm_area_node+0x23d/0x270 [ 877.914911][T13339] __vmalloc_node_range_noprof+0x5bf/0x1460 [ 877.920872][T13339] ? hash_netiface_create+0x356/0x1040 [ 877.926472][T13339] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 877.932862][T13339] ? rcu_is_watching+0x15/0xb0 [ 877.937684][T13339] ? trace_kmalloc+0x1f/0xd0 [ 877.942495][T13339] ? __kmalloc_node_noprof+0x247/0x440 [ 877.948005][T13339] ? kvmalloc_node_noprof+0x72/0x190 [ 877.953399][T13339] kvmalloc_node_noprof+0x142/0x190 [ 877.958662][T13339] ? hash_netiface_create+0x356/0x1040 [ 877.963250][T13393] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 877.964156][T13339] hash_netiface_create+0x356/0x1040 [ 877.977601][T13339] ? __pfx_hash_netiface_create+0x10/0x10 [ 877.983390][T13339] ip_set_create+0xa5c/0x17d0 [ 877.988140][T13339] ? ip_set_create+0x45e/0x17d0 [ 877.993055][T13339] ? __pfx_ip_set_create+0x10/0x10 [ 877.998223][T13339] ? trace_contention_end+0x3c/0x120 [ 878.003709][T13339] ? nfnetlink_rcv_msg+0x225/0x1180 [ 878.008959][T13339] nfnetlink_rcv_msg+0xbec/0x1180 [ 878.014031][T13339] ? 0xffffffffa00038c0 [ 878.018345][T13339] ? nfnetlink_rcv_msg+0x225/0x1180 [ 878.023705][T13339] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 878.029252][T13339] ? kasan_save_track+0x51/0x80 [ 878.034164][T13339] ? kasan_save_track+0x3f/0x80 [ 878.039084][T13339] ? kasan_save_free_info+0x40/0x50 [ 878.044463][T13339] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 878.049724][T13339] ? __netlink_deliver_tap+0x54d/0x7c0 [ 878.055427][T13339] ? netlink_deliver_tap+0x19d/0x1b0 [ 878.060770][T13339] ? netlink_unicast+0x7b8/0x980 [ 878.065759][T13339] ? netlink_sendmsg+0x8db/0xcb0 [ 878.070847][T13339] ? ____sys_sendmsg+0x525/0x7d0 [ 878.075846][T13339] netlink_rcv_skb+0x1e3/0x430 [ 878.080669][T13339] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 878.086284][T13339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 878.091645][T13339] ? safesetid_security_capable+0xb2/0x1d0 [ 878.097516][T13339] ? bpf_lsm_capable+0x9/0x10 [ 878.102240][T13339] ? security_capable+0x90/0xb0 [ 878.107218][T13339] nfnetlink_rcv+0x297/0x2a80 [ 878.111946][T13339] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 878.118330][T13339] ? __local_bh_enable_ip+0x168/0x200 [ 878.123754][T13339] ? lockdep_hardirqs_on+0x99/0x150 [ 878.129013][T13339] ? __local_bh_enable_ip+0x168/0x200 [ 878.134426][T13339] ? dev_hard_start_xmit+0x773/0x7e0 [ 878.139842][T13339] ? __dev_queue_xmit+0x2d2/0x3d30 [ 878.145015][T13339] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 878.150798][T13339] ? __dev_queue_xmit+0x2d2/0x3d30 [ 878.155976][T13339] ? __dev_queue_xmit+0x16c9/0x3d30 [ 878.161230][T13339] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 878.166422][T13339] ? __dev_queue_xmit+0x2d2/0x3d30 [ 878.171787][T13339] ? ref_tracker_free+0x643/0x7e0 [ 878.176875][T13339] ? __asan_memcpy+0x40/0x70 [ 878.181525][T13339] ? __pfx_ref_tracker_free+0x10/0x10 [ 878.186983][T13339] ? netlink_deliver_tap+0x2e/0x1b0 [ 878.192233][T13339] ? skb_clone+0x240/0x390 [ 878.196733][T13339] ? __pfx_lock_release+0x10/0x10 [ 878.201811][T13339] ? __netlink_deliver_tap+0x77e/0x7c0 [ 878.207333][T13339] ? netlink_deliver_tap+0x2e/0x1b0 [ 878.212585][T13339] netlink_unicast+0x7ea/0x980 [ 878.217409][T13339] ? __pfx_netlink_unicast+0x10/0x10 [ 878.222920][T13339] ? __virt_addr_valid+0x183/0x520 [ 878.228179][T13339] ? __check_object_size+0x49c/0x900 [ 878.233515][T13339] ? bpf_lsm_netlink_send+0x9/0x10 [ 878.238777][T13339] netlink_sendmsg+0x8db/0xcb0 [ 878.243612][T13339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.248954][T13339] ? __import_iovec+0x536/0x820 [ 878.253864][T13339] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 878.259191][T13339] ? security_socket_sendmsg+0x87/0xb0 [ 878.264792][T13339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.270134][T13339] __sock_sendmsg+0x221/0x270 [ 878.274893][T13339] ____sys_sendmsg+0x525/0x7d0 [ 878.279719][T13339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.285077][T13339] __sys_sendmsg+0x2b0/0x3a0 [ 878.286961][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 878.286979][ T29] audit: type=1326 audit(1717646806.801:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8687cf69 code=0x7ffc0000 [ 878.289712][T13339] ? __pfx___sys_sendmsg+0x10/0x10 [ 878.289794][T13339] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 878.311502][ T29] audit: type=1326 audit(1717646806.821:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8687cf69 code=0x7ffc0000 [ 878.317757][T13339] ? do_syscall_64+0x100/0x230 [ 878.317799][T13339] ? do_syscall_64+0xb6/0x230 [ 878.317831][T13339] do_syscall_64+0xf3/0x230 [ 878.317859][T13339] ? clear_bhb_loop+0x35/0x90 [ 878.317891][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.317929][T13339] RIP: 0033:0x7f3b1287cf69 [ 878.317952][T13339] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 878.317973][T13339] RSP: 002b:00007f3b136a30c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.318000][T13339] RAX: ffffffffffffffda RBX: 00007f3b129b3f80 RCX: 00007f3b1287cf69 [ 878.318019][T13339] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 878.318036][T13339] RBP: 00007f3b128da6fe R08: 0000000000000000 R09: 0000000000000000 [ 878.318052][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.318068][T13339] R13: 000000000000000b R14: 00007f3b129b3f80 R15: 00007fffc65cece8 [ 878.318103][T13339] [ 878.318152][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.346678][T13339] Mem-Info: [ 878.490850][T13339] active_anon:2728 inactive_anon:30869 isolated_anon:0 [ 878.490850][T13339] active_file:4357 inactive_file:103312 isolated_file:0 [ 878.490850][T13339] unevictable:61 dirty:20 writeback:0 [ 878.490850][T13339] slab_reclaimable:24540 slab_unreclaimable:101653 [ 878.490850][T13339] mapped:23955 shmem:12486 pagetables:731 [ 878.490850][T13339] sec_pagetables:0 bounce:0 [ 878.490850][T13339] kernel_misc_reclaimable:0 [ 878.490850][T13339] free:1245139 free_pcp:557 free_cma:0 [ 878.536507][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.544860][T13339] Node 0 active_anon:10912kB inactive_anon:122284kB active_file:17360kB inactive_file:413448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95820kB dirty:76kB writeback:0kB shmem:48508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11248kB pagetables:2924kB sec_pagetables:0kB all_unreclaimable? no [ 878.579676][T13339] Node 1 active_anon:0kB inactive_anon:1292kB active_file:68kB inactive_file:0kB unevictable:244kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 878.625262][T13339] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.652357][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.711392][T13339] lowmem_reserve[]: 0 2571 2571 0 0 [ 878.734241][T13339] Node 0 DMA32 free:1010448kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:10908kB inactive_anon:124752kB active_file:17096kB inactive_file:413528kB unevictable:0kB writepending:76kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:2804kB local_pcp:1308kB free_cma:0kB [ 878.765205][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.791661][T13400] loop4: detected capacity change from 0 to 8192 [ 878.817967][T13339] lowmem_reserve[]: 0 0 0 0 0 [ 878.829578][T13339] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:264kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 878.865594][T13400] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 878.885027][T13339] lowmem_reserve[]: 0 0 0 0 0 [ 878.889836][T13339] Node 1 Normal free:3952132kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:1292kB active_file:68kB inactive_file:0kB unevictable:244kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.918720][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.954171][T13406] loop1: detected capacity change from 0 to 16 [ 878.970898][T13339] lowmem_reserve[]: 0 0 0 0 0 [ 878.981260][T13339] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 879.003935][T13406] erofs: (device loop1): mounted with root inode @ nid 36. [ 879.009535][T13339] Node 0 DMA32: 22*4kB (UM) 952*8kB (UME) 654*16kB (UME) 693*32kB (UME) 316*64kB (UME) 135*128kB (UME) 112*256kB (UME) 59*512kB (UME) 18*1024kB (ME) 2*2048kB (UM) 208*4096kB (M) = 1011224kB [ 879.093166][T13339] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 879.129506][T13339] Node 1 Normal: 5*4kB (U) 6*8kB (U) 14*16kB (U) 9*32kB (U) 11*64kB (UM) 4*128kB (U) 5*256kB (UM) 5*512kB (UM) 4*1024kB (U) 3*2048kB (U) 961*4096kB (M) = 3952132kB [ 879.191643][T13339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.233424][T13339] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 879.274085][T13339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.286860][T13339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 879.302619][T13339] 121006 total pagecache pages [ 879.307870][T13339] 0 pages in swap cache [ 879.331675][T13339] Free swap = 124216kB [ 879.344827][T13339] Total swap = 124996kB [ 879.351398][T13339] 2097051 pages RAM [ 879.367124][T13339] 0 pages HighMem/MovableOnly [ 879.381413][T13339] 400874 pages reserved [ 879.395825][T13339] 0 pages cma reserved [ 879.771690][T13417] loop4: detected capacity change from 0 to 1024 [ 879.797082][T13417] EXT4-fs: Ignoring removed nobh option [ 879.820019][T13417] EXT4-fs: Ignoring removed orlov option [ 879.834128][T13417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 879.935307][T13417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.344236][T11349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.454105][ T29] audit: type=1326 audit(1717646808.961:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13422 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa8687cf69 code=0x0 [ 884.203561][ T29] audit: type=1326 audit(1717646812.711:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13440 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1287cf69 code=0x7fc00000 [ 885.234965][ T29] audit: type=1800 audit(1717646813.741:460): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="/" dev="fuse" ino=1 res=0 errno=0 [ 885.413684][T13448] syz-executor.2 (pid 13448) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 889.241691][T13466] loop2: detected capacity change from 0 to 2048 [ 889.355036][T13466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.468677][ T29] audit: type=1800 audit(1717646817.961:461): pid=13466 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 890.154414][ T9262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.300967][T13476] loop2: detected capacity change from 0 to 32768 [ 909.651324][T12572] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 909.667397][T12572] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 909.685620][T12572] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 909.694853][T12572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 909.737764][T12572] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 909.745567][T12572] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 910.969183][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 910.985563][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 911.005835][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 911.023762][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 911.037894][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 911.045651][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 911.539468][T12572] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 911.554215][T12572] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 911.563892][T12572] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 911.597610][T12572] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 911.610437][T12572] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 911.620111][T12572] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 911.846496][ T5113] Bluetooth: hci6: command tx timeout [ 912.858116][T12572] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 912.873262][T12572] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 912.883530][T12572] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 912.894597][T12572] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 912.902712][T12572] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 912.910484][T12572] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 913.125674][ T5113] Bluetooth: hci7: command tx timeout [ 913.766170][ T5113] Bluetooth: hci8: command tx timeout [ 913.926025][ T5113] Bluetooth: hci6: command tx timeout [ 914.966242][ T5113] Bluetooth: hci9: command tx timeout [ 915.208319][ T5113] Bluetooth: hci7: command tx timeout [ 915.855026][ T5113] Bluetooth: hci8: command tx timeout [ 916.006185][ T5113] Bluetooth: hci6: command tx timeout [ 917.046267][ T5113] Bluetooth: hci9: command tx timeout [ 917.285670][ T5113] Bluetooth: hci7: command tx timeout [ 917.926011][ T5113] Bluetooth: hci8: command tx timeout [ 918.086321][ T5113] Bluetooth: hci6: command tx timeout [ 919.126414][T12572] Bluetooth: hci9: command tx timeout [ 919.365756][T12572] Bluetooth: hci7: command tx timeout [ 920.006219][T12572] Bluetooth: hci8: command tx timeout [ 921.206409][T12572] Bluetooth: hci9: command tx timeout [ 922.019184][ T5113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 922.034021][ T5113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 922.057324][ T5113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 922.084602][ T5113] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 922.094736][ T5113] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 922.105253][ T5113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 924.168546][ T5113] Bluetooth: hci10: command tx timeout [ 926.246146][ T5113] Bluetooth: hci10: command tx timeout [ 928.326270][ T5113] Bluetooth: hci10: command tx timeout [ 930.414443][ T5113] Bluetooth: hci10: command tx timeout [ 932.174619][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.814271][T12572] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 974.830793][T12572] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 974.849196][T12572] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 974.877530][T12572] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 974.909299][T12572] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 974.920724][T12572] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 975.978471][T12572] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 975.991879][T12572] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 976.002974][T12572] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 976.019830][T12572] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 976.061938][T12572] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 976.069559][T12572] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 976.395353][T12572] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 976.419358][T12572] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 976.446851][T12572] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 976.455193][T12572] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 976.467464][T12572] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 976.476518][T12572] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 976.967152][ T5113] Bluetooth: hci11: command tx timeout [ 977.882922][T12572] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 977.895420][T12572] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 977.905523][T12572] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 977.937513][T12572] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 977.945532][T12572] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 977.965345][T12572] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 978.167309][ T5113] Bluetooth: hci12: command tx timeout [ 978.568106][ T5113] Bluetooth: hci13: command tx timeout [ 979.048182][ T5113] Bluetooth: hci11: command tx timeout [ 980.087609][ T5113] Bluetooth: hci14: command tx timeout [ 980.247232][ T5113] Bluetooth: hci12: command tx timeout [ 980.647128][ T5113] Bluetooth: hci13: command tx timeout [ 981.128109][ T5113] Bluetooth: hci11: command tx timeout [ 982.167264][ T5113] Bluetooth: hci14: command tx timeout [ 982.327286][ T5113] Bluetooth: hci12: command tx timeout [ 982.727229][ T5113] Bluetooth: hci13: command tx timeout [ 983.217270][ T5113] Bluetooth: hci11: command tx timeout [ 984.247547][ T5113] Bluetooth: hci14: command tx timeout [ 984.408544][ T5113] Bluetooth: hci12: command tx timeout [ 984.807191][ T5113] Bluetooth: hci13: command tx timeout [ 986.327362][ T5113] Bluetooth: hci14: command tx timeout [ 987.103552][T12572] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 987.119792][T12572] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 987.157572][T12572] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 987.177829][T12572] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 987.187828][T12572] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 987.195633][T12572] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 989.287444][T12572] Bluetooth: hci15: command tx timeout [ 991.368562][T12572] Bluetooth: hci15: command tx timeout [ 993.447641][T12572] Bluetooth: hci15: command tx timeout [ 993.613518][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.527409][T12572] Bluetooth: hci15: command tx timeout [ 1036.648769][ T53] Bluetooth: hci8: command 0x0406 tx timeout [ 1036.728605][ T5123] Bluetooth: hci6: command 0x0406 tx timeout [ 1036.736504][ T5123] Bluetooth: hci7: command 0x0406 tx timeout [ 1036.744252][ T53] Bluetooth: hci9: command 0x0406 tx timeout [ 1039.048634][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 1039.056422][ T30] Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 [ 1039.078408][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/06 04:09:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1039.098423][ T30] task:kworker/u8:0 state:D stack:21424 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1039.131647][ T30] Workqueue: netns cleanup_net [ 1039.136509][ T30] Call Trace: [ 1039.148378][ T30] [ 1039.151385][ T30] __schedule+0x1796/0x49d0 [ 1039.155951][ T30] ? __pfx___schedule+0x10/0x10 [ 1039.178493][ T30] ? __pfx_lock_release+0x10/0x10 [ 1039.183610][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1039.218785][ T30] ? kthread_data+0x52/0xd0 [ 1039.223368][ T30] ? schedule+0x90/0x320 [ 1039.227653][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1039.268366][ T30] ? schedule+0x90/0x320 [ 1039.272689][ T30] schedule+0x14b/0x320 [ 1039.276882][ T30] schedule_preempt_disabled+0x13/0x30 [ 1039.308338][ T30] __mutex_lock+0x6a4/0xd70 [ 1039.312933][ T30] ? __mutex_lock+0x527/0xd70 [ 1039.317752][ T30] ? gate_exit_net+0x30/0x100 [ 1039.351518][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1039.356657][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1039.388417][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 1039.395251][ T30] gate_exit_net+0x30/0x100 [ 1039.418367][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 1039.423587][ T30] cleanup_net+0x89d/0xcc0 [ 1039.428059][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1039.461716][ T30] ? process_scheduled_works+0x945/0x1830 [ 1039.467526][ T30] process_scheduled_works+0xa2c/0x1830 [ 1039.498445][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1039.504522][ T30] ? assign_work+0x364/0x3d0 [ 1039.528631][ T30] worker_thread+0x86d/0xd70 [ 1039.533410][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1039.558438][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1039.563729][ T30] kthread+0x2f0/0x390 [ 1039.567925][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1039.618437][ T30] ? __pfx_kthread+0x10/0x10 [ 1039.623213][ T30] ret_from_fork+0x4b/0x80 [ 1039.627761][ T30] ? __pfx_kthread+0x10/0x10 [ 1039.638391][ T30] ret_from_fork_asm+0x1a/0x30 [ 1039.643255][ T30] [ 1039.666487][ T30] INFO: task syz-executor.4:13431 blocked for more than 143 seconds. [ 1039.697772][ T30] Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 [ 1039.728395][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1039.737128][ T30] task:syz-executor.4 state:D stack:26800 pid:13431 tgid:13428 ppid:11349 flags:0x00000006 [ 1039.768683][ T30] Call Trace: [ 1039.772027][ T30] [ 1039.774989][ T30] __schedule+0x1796/0x49d0 [ 1039.801797][ T30] ? __pfx___schedule+0x10/0x10 [ 1039.818504][ T30] ? __pfx_lock_release+0x10/0x10 [ 1039.823603][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1039.838450][ T30] ? schedule+0x90/0x320 [ 1039.842762][ T30] schedule+0x14b/0x320 [ 1039.846961][ T30] schedule_preempt_disabled+0x13/0x30 [ 1039.887311][ T30] __mutex_lock+0x6a4/0xd70 [ 1039.898644][ T30] ? __mutex_lock+0x527/0xd70 [ 1039.903401][ T30] ? rtnetlink_rcv_msg+0x842/0x10d0 [ 1039.928548][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1039.933681][ T30] rtnetlink_rcv_msg+0x842/0x10d0 [ 1039.948380][ T30] ? rtnetlink_rcv_msg+0x208/0x10d0 [ 1039.953652][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1039.968423][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1039.974469][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1040.007056][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 1040.021800][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1040.027097][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 1040.048369][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 1040.053725][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1040.068385][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1040.074178][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1040.088382][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 1040.093669][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1040.108514][ T30] ? ref_tracker_free+0x643/0x7e0 [ 1040.131622][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1040.136470][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1040.164229][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1040.178877][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1040.184156][ T30] netlink_unicast+0x7ea/0x980 [ 1040.198416][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1040.203859][ T30] ? __virt_addr_valid+0x183/0x520 [ 1040.228372][ T30] ? __check_object_size+0x49c/0x900 [ 1040.233732][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [