last executing test programs: 13.192858956s ago: executing program 1: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000240), 0x4) 12.724929179s ago: executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x42, 0x22) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x2000043}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffc, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f00000006c0)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) write$tun(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='cq_modify\x00', r2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 10.207860485s ago: executing program 5: mkdir(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000640)=0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/112, 0x70}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000b40), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/234, 0xea}, {0x0}, {&(0x7f0000000e40)=""/192, 0xc0}, {&(0x7f0000000f00)=""/209, 0xd1}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001100)=""/55, 0x37}, {&(0x7f0000001140)=""/95, 0x5f}], 0x8, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/120, 0x78}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/20, 0x14}, {&(0x7f0000001680)=""/126, 0x7e}, {&(0x7f0000001700)=""/11, 0xb}, {&(0x7f0000001740)=""/32, 0x20}], 0x7, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002880), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002900)=""/11, 0xb}], 0x1, &(0x7f0000002980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002ac0)=@abs, 0x6e, 0x0}}], 0x5, 0x142, &(0x7f0000002e40)) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r2, 0x0, 0x49) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {0x0, 0x81}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000200001000000000", @ANYRESDEC=r5, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063c7795a4177a419e3b78831824751be316e56da7de7fe943659137cbb19e06f0e1f3b9649d8dcba7c"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@polexpire={0xc0, 0x1b, 0x103, 0x0, 0x0, {{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0xc0}}, 0x0) 10.206989476s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='osx.&-]:'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000100)=0x57bb, 0x4) write$binfmt_elf64(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x44, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x3, 0xf4, 0x7fff, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa88, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.483509009s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x25, &(0x7f0000000140), 0x4) 9.377382414s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x0) epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x9725}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) dup(r6) listen(r5, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000240)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x74, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1d, 0xe2, 0xcf, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @timestamp={0x3, 0xa}, @exp_fastopen={0xfe, 0x9, 0xf989, "7511e90002"}, @sack={0x5, 0x6, [0xa1be]}, @eol, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0xb, 0xf989, "d463e2c4e2da7a"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x4}, @fastopen={0x22, 0x2}, @sack={0x5, 0x22, [0x4, 0x8, 0x3, 0xfc00, 0x28f, 0xa6e, 0x0, 0x2]}]}}}}}}}}, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a00ff0000000095dbcc427fb93c69291373c92f56e2d26a14be757e6d3bcec850f52f73"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x40640) readv(r8, &(0x7f0000001700)=[{&(0x7f0000000340)=""/223, 0xdf}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) 8.632978028s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a8c000000060a0904000000000000000002000000600004805c0001800b000100736f636b657400004c000280080003000000007c080002400000000f080003000000003008000140000000000800030000000064080003000000001b0800030000000032080001400000000308000240000000140900010073797a30000000000900020073797a320000000014000000110001"], 0xb4}}, 0x0) 7.946119413s ago: executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 7.657020486s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x10002, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x1, 0x5d77, &(0x7f0000006280)="$eJzs3X1wXeWZGPBz7r2yZMsfsuMEGRsjgpPUbEkMLjTObmo13aRJ6gTHxEDMem0DMvFibOMPDPa2fHWBEtrxDMxCoel4gaE7nZ2WjLel7LozDgGyk51hcGj+YOnXMiX9o1nq2dgstTNRR9I50r1H573n6p4rY8jvNyMdvUfPfd73Ofe950vSVQQAAMCvhFd+b8+7Xz//iz+6d+jUXV/+k1vviXqro+t70oC+ZHnH+zVCptPyH59peGa7a/2jy+y8OO9PF77bd9+arz206ks/3vxn8weXLhu68ntHrrr/vhc//4sXH3tiTVE/6Xy6ZKId/1UcRUvfPvLY/S//+Xkj6+KR/uO+u6P58+MF358fZ1KsOB1F0U3j42z85pFTK7eOLO/5TnfD+nmZJOb7r7aeZJ4d3HTDU8duGXz5yMCulT87ecXOuydC4p66+RRFczfXP74riqKZyceIdLb1pw9OlmujKJpV97jPFozr4hbHf2mgvSRZzkiWvQV50u9flGnXWhxHLbPsbvFx7apMc/6s7PbL7oymS1rn3GT5fLK8ZIp5qulHHFXiqDY+/O3xxByJ6p63OIpH53bPeLsy2o7G21G2HWfalUy72pWpa7TfZMNW47hxfRqXWZ/ujmvJ+ovq99U51gXWL0qWPckL9b20HWW/GNM76YuJOqK6cZ04WxMjoBJ47aXrx4eXPBm9ybreeMGkxwznSL934odbNrzzxoHn+wLjiJ+Lk/xxW/kHh5489ux1Rxf1h/JvriT5K23lf6X66ulnTvbPDuY/lOavtpV//S9/+uC9V+9fGNw+J9LtU2sr/7KHZx88tX9d90Ao/+E0f09b+a/cuHTVBSf33R4c/4p0+8xsK/9PHll+ZuOhF44G80dp/llt5X/zyaeXVBc9ejyY/1i6fXrbyn/NysdXf3XxfU8Et/9raf45beXfcPz+zbueeml5cH6uTbdPX1v5T69+/a0zfWueDu0748Nn+wgL8OHykeQc68Gk3e51Zll11wuPD9TGzvlmJx9zOtlRRlx37QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Xp09X+4rb79if9z+/rj/3HptlrS7q5FURxF0TvVsXa6fkYUxTOjKNqzd8vuvdt23DzwOzv37d6xZfvAlr0DQzv27r5z4O/87YHdQ7u2b7lz5LsrLl059rgFo9miaEF8waSxDA8PD0dRNFC/Lu3vD77y3P9b/8RffyuKVnz09aW1YD2f+a9vfXFhzueMeHB47b+64pEDM/7XvLEVfcm4+kLj6mtcl46gd/C1v/jC82+MjOtjzcb12KvX/t+GAY2umMiTqHRHleHuke0ez8odx/ioJ8Yzur1qW7dtH1pRvH3jwPb91Et/fPLf37H+n49t355gHS1u35GtWht+6Of3furuLwx97hx+3rujytgysL3rShgdX7r9epLtPTepa26grkqgrtsH3jzxL/7df37m7mhF7ecXTu67qK6uZAJ0xYta6jftYVY8vyG2J4lPn/H0cZ/Ze+uuz+y588Cl227dcvPQzUM7Vq68YtVlKy+7fNXKz4yWPva5Y/Wn/X+qxfpnJ5lmx4tzt1t2bdrvhaOfq1Ey7HRR90Wjrqh3bJnZzml4ture5Hu98YJJuYZzpN878cMtG95548DzoVde/NxYjzOjOWPLeEkgcnvmgdXxAef1f3Zelzt/v2d7+rm112XRuIrm1ci4iudV/Yia7MdevfjBnz/1wL+8voX9RV3o6PjScc4aeblcFtW9bidvq7y6Wnh+BvO2w42X7v7jO7dtOFS0P69/Zuo/Z8SDw/9zSfy1fXv+YvfYirNyvKwfUPh4OfpF6PkYH/XEeEa3V0/yfJyr27c7qiZ19eaOa1381Oc/devRXxsf34wZ0R1b9u7dfdnY5w9qXX85Y97CbfcsvmBSXZePfS7a71+YaRfu9yv59RXt97P9TMTn5xvItHujalvHifW//OmD9169f2HwOHGi1ePE7za0qiWPE5XA6/2hv/7uwLvXf/Pdovl01Z7Fdy3M+Zwtb3D4hT/69cs+d+3VXxpbcVb2Q/UDanM/ND7qZDzp9hrdD11+7tTx/j3PDS/EeHD4wu998pozp277xtiKou07Hp23fVcW7+ergbqu7/r4/Ed+tvjjnZu/ezb9zcWfnjX7HJu/Pcn27Qls3/FRJ+Op1m/fT9+4c/tNY+1z97xtTHfB9U963Nlz54FbtmzfPrR7T2t1tXo8TfvJbuV2j6fp0WNBQV3p8zVR1/R90cr2avX1lo7/pkyOdl9vAKmJ48KMhvXZ/Wd632/p3Gj9px/4wavxwNjxslP3W9N+zs8cmNu931p0nfTxTLvxOqkW1dU9ZvJ10uhDiq6Tsv0UXSddnGkXX8c8mFtJ6PnrSo68efdNM+OtjWQIzY/+JH9/0k7PN5d+Orqi+vwnvhIPtjY/Wj2fTvv5W5kN1O75dNH8WBblj6vT8+OTmQcVP9+HckfWE3g+ip7vZQ2JhofLXpf3BUadXpf3RnFb+QeHnjz27HVHFwXzb64k+Stt5X+l+urpZ072zw7mP5Tmr7WVf9nDsw+e2r+uO5j/cLp9etrKf+XGpasuOLnv9mD+Fen4Z7aV/yePLD+z8dALR4P5ozR/b1v5r1n5+OqvLr7viWD+1+Kkn5HXbhQdObVy61g7jrqS+Z+Oo6thXFG2HWfalUy7Wt+ujP2sd7yDahw3rk/jMuvTOmrJ+ovqxphnfWB9+qrtSV7Y76XtKPtF8/Xp7ikd14nA8edsqdSde+StL7o/2SnvvN3/B/Xt9Of/6Rzoro09d5dntlfR8SO7907zBe/DBm5hFJ0vTP7526y2Xn9vPvn0kuqiR48H76sea/W+6q6G1qyC+6plxxvcXxxL96fl9kf9ofyvpfnLHQ+C+ZPjQdE8+0SmXTjPuvL7K5pn2fOU3mhOW3VvOH7/5l1PvbQ8OM/Wjr3gi+fZow2tOYXzrNzPpYPz7Lm4I9sjmH9tZ85rgvMsOa8pmmeXZNrl51nj+ejXkuUdmfje5A7xVOs+vfr1t870rXk6OM8OtzrP/rCh1Vc4z8qd3wafp/Hz2+k+P/9gn3++b+eHyY9zp+v8cF1g/VTPD3snfTFRR/RBPD8M7GcAoJkfPXTn/65vp9f/6bE7vf7/QeZxZa8rs78PlerUdWUw/+HOXK8Ez1PHr1em+3prus+zp/d6y3l8IP/4feTpvi80vdeVrkOSdpT9YozrEAAA3g8X/Zvv/mZ9O73+H/+9t+Tv/19K25nHu84N5D9r17nTfZ/EdXRu/g79fkXxfbDpvk/lPoD7AMXcBwAA+HDYtHX30NCeXVtuHNq0bce2vePru0avnCb/nurfTZZrM3mKfn86L35Wk/hvBPM3juezgfiQ2ujvvEbRDTd++/JNNw3dPtX6Q/0V1Z8X36z+7PVFqP5VgfiQsvWH+iuqPy++Wf1XB/M3judzgfiQsvWH+iuqPy++Wf3fDOZvHM+vB+JDytYf6q+o/rz4ZvVn/x4sVP9vBOJDytYf6q+o/rz4ZvVfE8zfOJ7PB+JDytYf6q+o/rz4ZvVfG8zfOJ6/F4gPKVt/qL+i+vPim9V/XTB/43hWB+JDytYf6q+o/rz4ZvV/K5i/cTyDgfiQsvWH+iuqPy++Wf0bgvkbx/P3A/EhZesP9VdUf158s/qvD+ZvHM8XAvEhZesP9VdUf158s/p/K5i/cTz/IBAfUrb+UH9F9efFN6t/YzB/43h+MxAfUrb+UH9F9efFN6v/t4P5G8fzxUB8SNn6Q/0V1Z8X36z+TcH8jeP5UiA+pGz9of6K6s+Lb1b/5mD+xvH8w0B8SNn6Q/0V1Z8X36z+LcH8jeP5ciA+pGz9of6K6s+Lb1b/DcH8jeP5SiA+pGz9of6K6s+Lb1b/jcH8jeP5aiA+pGz9of6K6s+Lb1Z/9v0OQ/X/o0B8SNn6Q/0V1Z8X36z+oWD+xvGsCcSHlK0/1F9R/XnxzerfGsyf/74B2fiQsvWH+iuqPy++Wf03B/M3jufrgfiQsvWH+iuqPy++Wf3fDuZvHM9VgfiQsvWH+iuqPy++Wf3bgvkbx7M2EB9Stv5Qf0X158U3q/93gvnrxjM8b/znCtn4kLL1h/orqj8vvln9twTzN45nXSA+pGz9of6K6s+Lb1b/9mD+xvFcHYgPKVt/qL+i+vPim9V/azB/43i+GYgPKVt/qL+i+vPim9W/I5i/cTzrA/EhZesP9VdUf158s/p3BvM3jueaQHxI2fpD/RXVnxffrP5dwfyN47k2EB9Stv5Qf0X158U3q/+2YP7G8VwXiA8pW3+ov6L68+Kb1b87mL9xPN8KxIeUrT/UX1H9efHN6t8TzN84ng2B+JCy9Yf6K6o/L75Z/XuD+RvHc30gPqRs/aH+iurPi29W/75g/sbx/FYgPqRs/aH+iurPi29W/+3B/I3j2RiIDylbf6i/ovrz4pvVvz+Yv3E8vx2IDylbf6i/ovrz4pvVn30fyFD9mwLxIeP17909NLRp366btuwd2rRj501Dezbt371t796h5ESt7N+Vhf8u6H3+Qxaaanh9jE2SbTv2DO2evP+e2XT+1s+JaPTPnmaOLeOPtRSffdvr/G6SyXdXC/W8z/O9K6o13V7nR41/YDUveT/aeYH3oz0/20+yXDz6xeT3o812Wyt4H9ei/VO2/9D+KW4Sn7d/De3Pio5/U97/Fc7vnqb1Z1d3J3/Y1x1/tKX4qMn/d2ttvpb7u9PgfH2ttfmafd/1ovmajZ/qfO0tOV+z/YfmU6VJfLPzoVbn64ZAfKr1+RkH682bV1P9P4Np2in9n8HMp0na+F8Grb8eyv0defD1kAy66PWQ/TvuotdDNn6qr4eZJV8P2f6LXg958c2uj1t9PVwbiA9pfT6Ue9+C4HxY0dp8yP4fq6L5kI2f6nzoKTkfsv0XzYe8+Gb3C1udD98MxLeq9flR7n1FgvNjc2vzI/v/JIrmRzZ+qvMjLjk/sv0XzY+8+GY/T2l1fnwjP378rR0ajp9b94xe1G/bsn3bgcwvYPQlx8/3+3h4Vo7Lf/Mbf/ne2KdkHJVJ4yg6n4gz45ifjGR+6P8eBsZ943/5t+t/8IsHvhtFKz5aXRIe98SQJz5lxIPDC+5a9ux1Hzv+hZHxV5qOfzwy/b/FBf/vOBuf1lPbvnPP3l/bunPfjlZ/46q59P1QKuPtaXo/lGRltcX3Nwn9PcFU39+ka9IX56aW398E4ENi3uHn5tS30/f/S49H/cm+b2ayA0zXt36eXe799YLn2YdaO89enq234Dw7G5/W2+p5dqXkeXa2/6Lz7Lz4Zr+31+p59tcD8VPVOE9GJsjo/BjatH/n7vrfiZvu/1vb+fFO7//xLT++6X3fxna1Pv7pfV/I6R//9P4f4Okf//T+n+d2nbXrpeSOQtH7RxZdR4X+Ln2q11EzJn1xbnIdBQDnvn+2++1/Xd9Or/+Tq9jx6//vJO1qh/uf7uuo6b6unO7z5A/+++9P73WQ64EmnZ0DXA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5PvD//6fvl/f7q71jy5f+b097379/C/+6N6hU3d9+U9uvee8P134bt99a7720Kov/Xjzn80fXLps6MrvHbnq/vte/PwvXnzsiTWFHfWNLS5Jmj1RFP9VHEVL3z7y2P0v//l5I+vikf7jvruj+fPjBd+fH2cyrDgdRdFN4+Ns/OaRUyu3jizv+U53w/p5mSTZuqLeajqehnFGdxRWxAdQTzLPDm664aljtwy+fGRg18qfnbxi590TIXFP3XyKormb6x/fFUXRzORjRDrb+tMHJ8u1URTNqnvcZwvGdXGL47800F6SLGcky96CPOn3L8q0ay2Oo5ZZdrf4uHZVpjl/Vnb7ZXdG0yWtc26yfD5ZXjLFPNX0I44qcVQbH/72eGKORHXPWxzFo3O7Z7xdGW1H4+0o244z7UqmXe3K1DXab7Jhq3HcuD6Ny6xPd8e1ZP1F9fvqHOsC6xcly57khfpe2o6yX4zpnfTFRB1R3bhOnK2JEVAJvPbS9ePDS56M3mRdb7xg0mOGc6TfO/HDLRveeePA832BccTPxUn+uK38g0NPHnv2uqOL+kP5N1eS/JW28r9SffX0Myf7ZwfzH0rzV9vKv/6XP33w3qv3LwxunxPp9qm1lX/Zw7MPntq/rnsglP9wmr+nrfxXbly66oKT+24Pjn9Fun1mtpX/J48sP7Px0AtHg/mjNP+stvK/+eTTS6qLHj0ezH8s3T69beW/ZuXjq7+6+L4ngtv/tTT/nLbybzh+/+ZdT720PDg/16bbp6+t/KdXv/7Wmb41T4f2nfHhs32EBfhw+UhyjvVg0m73OrOsuuuFxwdqY+d8s5OPOZ3sKCOuu3YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICQncPVffXtt44+dNW3/8em/1aLoygOPGY4R/q96ozBwYE2xrHs4dkHT+1f1522R/rubyMPAAAAMNniNx+4rb6dXodXknYc9UT90f54ZrQ49/HpPYLFaStuXJ+9hzBzIrIjeSodylPtUJ5ah/J0dSjPjA7l6e5Qnp6CPD1Ra3lmNs1TaXk8szqUp7dDeWZ3KM+cDuWZ26E88zqUp69pntbn4fwO5VnQoTwf6VCehR3K89EO5flYh/Kc16E82XvKU52Hc5LI80N5Rr+oFuapxdXxb+TdT0/7uaBkP70t9pO9Zz/Vfma22M/FJfvpabGfT5bsJ26xn+WZx1Wm2E+loJ903t4RqidttTj/7+xQngMdynOwQ3l+t0N5/nGH8vyTDuW5q2QegJDff/GSP6pvp9f/6fVnHPVF3bXLo1nJHid7FyC93r1w9PPk411oh5TmW5JZ31WUL3uBncl34VTHl72BkMn38ab5apOuV3Py1erzLetQPgAAAJiKf3r6YMOP5iZf//dH3bWF49evn8g8vvB6PfuD7ESa75IO5QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/j+79hojV1k+APw9O7Mz818uXUhbpvS2afunEEIvNDWCCpMmkmCELWLLpSFrhYVtWFrotkCrpgjGNptg0OKF2wcLEkOIQELSoGuCASV+sLFBDBfXhZXAFyJIb0DRMbN7zu7Z2Rl2GaW1+vuFnDPPOc/zPu85JCTPWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/vP98ft/ezYdD/b1tncNdPSHKFT+qalcQ3IvkyuV2hrYxzvPrb3yry9t3Z3Eld75bAMLAQAAAOM8ft6M09NxMocno3cUCiGfXRryUW5MXTH+DlCM46bW4fOcRWF5Zvf/XxiVmobik6OTxtQV4rpCHGfiup4tW69f293dufET/FHpU/0c1fuJQhj6fDHnxLBq0fZn9kRtw8/RMsFzNMV1izfdcOPini1bz1p3w9rrOq/rXL9s2fJzli5bevY5yxZfu667c8nwMeQnWC+EUBr7Xib4FwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEfAtt/u/lY6Huzrbe8a6OhviUKI6tSUa0juZXKlUlsD+3jlvgdnZWbcvTeJK73z2QYWAgAAAMb51eMzzk/HyRyejN5RKIR8NhcyYcZQPG80NRtCuZxcX1B1/UjsHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLL2HWz/czoe7Ott7xro6D8uCiGqU1OuIbmXyZVKbQ3sY/WyH53/hZl33JvEld7FBtYBAAAAxnvh9OY70nEyhzfFcRQKoRjmh+Zoxpi65NvAqVXrVecl68yeZF71t4N6efMnmXfaJPPOmCDv4vh8awAAAIBjzxWtv1udjpP5vzmOo9Aa8tliyMTxRHN88l1gblVeUj/RfJ/Uz6tTP9Hcn9RXz/0AAADwv+ysN5/4MB2Pn/+LIZ8tjMzfE/09/aL47O/kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA9vz544S/S8WBfb3vXQEd/JgohqlNTriG5l8mVSm0N7GPVP97Ycfult0xN4krvfLaBhQAAAIBxHs19+pZ0nMzhyegdhULIZ1tCczhuaO5/LTdl6rpvzpwdQigNJeRy4da1mzZtPHv4mOR9Kdr1uYU39J05Lm/p8PHIPykAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCvWvbIzjXpeLCvt71roKP//6IQojo15RqSe5lcqdTWwD5e2HnG4avueqoviSu9iw2sAwAAAIw3q/vpv6TjZA5PZv8oFEIx5EIuTB+K07N+RVPVevW+GQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/PXq2bL1+bXd350Y//PDDj5EfR/u/TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNHy8/XfezsdD/b1tncNdPQXohCiOjXlGpJ7mVyp1NbAPj511ZxzZu/ffHMSV3oXG1gHAAAAGG/NW5v3p+NkDk9m/ygUQjE0h+YwLY7HG5r/W4/EbgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKNpbohC+WM6ZeXR3jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwSTjw4qr70vFgX29710BH/wlRCFGdmnINyb1MrlRqa2AfV+799ldu3PXsGUlc6Z3PNrAQAAAAME7zmy9+NR0nc3gyekehEPLZWSEfZsVXuscuEGWSxJrfBUbrvj6mLDPpuh1VOx7eWSH+DlEY2WcY+uwwWnfXR9YV46tNrZN7TwAAAHAsm7bj4m+k42T+b47jKLSGfHZaaq6+cUx9y6Tn+LvH1J0w6bqfjqlrnaDu3/BKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAG3bnyuVPS8WBfb3vXQEd/FIUQ1akp15Dcy+RKpbYG9lHqvO/phy/vm5HEld7FBtYBAAAAxrv0jcJ303EyhyezfxQKoRhmhxPD7KG5P7SOrU/yjiv9/uUVu1+6IoQl05+fk63b74d7Lns7HPrsa+8NH4bCEJrGJjWFMCXuF9Xpd/UfHln1zIfbHwhhybTMrPr9RluNHqpEpfLJ2xY8fPn0vSvqLgMAAADHtMKDB36SjpP5P5moo9Aa8tn1def/JO9jzf/tPTO3TY2P8ReAqoqm1rhfU51+ve8+0HZwzZcPVub/5+cURv5fgdPnj81Pt0ofq745RKXy3CdOW334wE2XDF9I+mfq9F/TPO+knW/NnJf0L8TXrwmT7R+q+vd0HJq/qOX4C8b2DyG01er/4wsff3/Vve9eMdy//vte/KfBz08NG35Q6E6Ow1fG9195//KdW3OvTxnbP6rTf+GzT+5/7NZVd1Y//6nZWv3HH6tUumbLvftuX3jbis5zU/2b6vS/ue2Vd77zs18+VOm/b27LSP+FH/H8E/bfM3/Hvl3b71kz9v2XavW/+qyNT25Zd+Vd1c/fUrVw+s2nj+Pf/6uzoos297y8sfoWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsa3jsQ8OpePBvt72roGO/qYohKhOTbmG5F4mVyq1NbCP32T2fPDQ/uLxSVzpXWxgHQAAAGC8S1a8el06TubwZPaPQiEUQy7kQsvQ3H/ytgUPXz5974rQGt+Pz9nuDT2bzrx2w+b11xzpRwAAAAAmsOu891ek42T+z8ZxFFpDPrsgNMfz/8r7l+/cmnt9SjL/hxCG/tyfvXZdd+eSMPKdoKfj0PxFLcdfkORl4nOhkrfo6g3d8WeCZN2nHv3M0nMvu3Qkvymdf/Zo3twnTlt9+MBNl9TMWzaa9+qs6KLNPS9vTO2zNJK3dDSvd9/tC29b0Xlu8hxRfC7Ez5Pk7Zm/Y9+u7fesSfKa4nNLvB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMJJ7/39a+l4sK+3vWugoz9kQojq1JRrSO5lcqVSWwP7+OD85wcPt37xwSSu9M5nG1gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYX9+gmNo4rjAP7e7tZsu2nd1EITrSHFXloQCsFiD9Jc/INELRVFC8UoxouKBdGKPdg2GIp6KCi0tJfSimclh6L2EIutoiBW8SCeFPSkkkNSJBWVJPM2m2mHxNGWUj4fGN7+3ux8583bt7M7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA17THf7y31l531Lpn23Ovv3jhwZvv/uLA8NRr9330/P61H6+50BwZfOCNrfd8M/R510DvhuEtH4w9NDpy5q4/zxw+OrjoiV6ZazZlZT2E+FsMoffnscOjZ79cO9MXZ84fm/tCV1dc/UlXzCVsng4hPN0a58KdY1P9z8y0+9/sWNB/Yy4kf12hUU3jmdNcOF6uL/Vsne194qkT488OnB3r293/6+QdL+ybf0ust62nEFYNtR+/LISwPNtmpNXWnQ7O2u0hhBVtx925yLhuW+L4by+o12XtDVnbWCQn7V+fq2tLHEct13Ys8biyKlc4Py8/f/mb0ZWSrnNV1p7K2k3/MqeathgqMdRaw38uzq+R0Pa5xRBn13a9VVdm69CqQ76OubqSq6vLctc1e95sYqsxLuxP78v1p9txLetf336vvowdBf09WVvPvqh/pDrkX8xpXPJi/jpC27gmrtbCKFAp+O6l/tbwsg+jkfU14upLjvn7MtK+ic+e3Pn796+eahaMI74fs/xYKn9g+Nj4e4+d7ukuyh+qZPmVUvnnql9NvzvZ3VmYfyjlV0vlP/LXLwcPPLxnTeH8TKT5qZXK3/BW596pPTs6+oryj6f8eqn8Lbt6t946+dLLhePfnOZnean8797eeHHXoQ9PF+aHlL+iVP4Px06uq/a8c74wfzzNT6NU/qP9R7bdf8vI0cL5/zrlryyVv/P86NDuE59uLFyf29P8NEvlT2/79qeLzcGTRffOePxq/8ICXF9uyv5jHczqss+Z/1Xb88KRvtrcf77ObFv5f54oJ7Y9uwDAP+zAsQAAAACAMH/rriw2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVAAD//6nlcEc=") syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xfa, 0x518, &(0x7f00000008c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 7.299656305s ago: executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000cc0)={0x3}) 7.290838755s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 7.27749586s ago: executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="9fa6cc9078a4d4a74e98d287c82caac53eda90e60c94d8da181892a7fa8fcbf0a1a98fb726569e8de0fce82b0f4a9b678c48928ed16d705fe347d32b7e8183555a571c77fb079c50623893fbba9aa35076774a21f40912a9036ad47ec13a4a4172bc9438e51f94cd8b75beaf584ce4a0ea9c3a330071483b828200980907e55efc3d526e041937e61b08f80fa719dc7f66871400a2491f35b47dbd3ed988", 0x9e}, {&(0x7f0000001580)="a94392d6d86d71c32ee3db308f08fab8b2b5bb6e44c2c7f2058d9b82bbe0b6ff12925020aec66f94f0c40d36e24c9a190eeeb0791dc591141200a457549d475f6fc2e257d8f8ef2432595ba14e712a19fb90b8969c7477336357790ae522bfa09918eca0bece80411a03750ec63f684dd2545eef4c6bb7b650d259b27724bb2d40ba28ca29af18b8124192506f", 0x8d}, {&(0x7f0000000180)="66b1cc2d9ebcf7e42d4ecbb2f1605698caeb4f2bad0678374f64923db176b5899a26ae2c0a5bcc7fe8066549f82d7c2b", 0x30}, {&(0x7f0000001640)="c47bffece7719a411b2828ca2c3491987974e325d38356b11f05ea9671deb6ad9f896e3027ba2d", 0x27}], 0x4}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000004b00)="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", 0x2bb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002c40)="cf", 0x1}], 0x1}}], 0x3, 0x44084) 7.249087737s ago: executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000fa"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) 7.110000688s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x90) write$binfmt_script(r1, &(0x7f0000000000), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "080180f10000000020d600000001000100"}) 6.806914301s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x1018000, &(0x7f00000001c0), 0xff, 0x5b7, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 6.609647944s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lseek(r1, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x100, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x72}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4, [], [], 'pim6reg0\x00', 'team0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "2e0422079ddd6625f322f2efcf6fb3f683d84a22bddb3582f45812ce0592"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x447) r4 = userfaultfd(0x80800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000400)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640), 0x4) syz_emit_ethernet(0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbb}]}) socket$unix(0x1, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000002200010600000000000000000000000001"], 0x1c}], 0x1}, 0x0) poll(&(0x7f0000000340)=[{r4}], 0x1, 0x0) semget(0x2, 0x3, 0x2) 6.426922511s ago: executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001240)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@abort}]}, 0x1, 0x60b, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 6.395514402s ago: executing program 5: syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knPypUiYpDBRuweF6oJndVB6fgFCEHDi6CQUMam2KippfBlha6SEGq/Rd0qqMKOokoOBcHwUHPpZs0Q3EQB4nk8kTwb/B5Dfe57wfunodvK+pGGeD3/mqDMgmHg3xE0MC0jDqlRvnazN9Nbo2CS2beNPnM5FS0vHK73m43l/IX8+T+KYAfSfe3il5wTNEXysjn/dVGXW6GDMp01HxIrkrhEU6NrveYKT3J0Rs4DNxNLiu64lbhULHXuVeMllfOLHbqC82F5p0gmLtQOlcqnQ+KtxbbzdIrxHsoiies4YVkQia8NVI1HuzoA8wK4rVU7EihT7rG1o5z+uRsH+XtMUB45/bJfNWtvLrKKbLXh5evcER4ihMyU2VCoUkOqiBX1Evx9Sf9M6XIrjvO2cbd9vzGNSW/0ttl2cuKv0vK9QkKPnPD1XCY92zEzMRUYrZjdr8xLW+Gp4z3qteHz+dmOs4JSHO/3ust+Wn4IDokcEOCHEwmv1PJvXLw1nxjgi/jF8uyLMuyLMuyLOs/8CcAAP//o/hj9Q==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00ea0095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b"], &(0x7f0000000080)='GPL\x00', 0x0, 0xd1, &(0x7f0000000300)=""/209, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x6}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 6.223520596s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) set_mempolicy(0x0, &(0x7f0000000000), 0x2) 3.726001533s ago: executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x0) epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x9725}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) dup(r6) listen(r5, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000240)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x74, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1d, 0xe2, 0xcf, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @timestamp={0x3, 0xa}, @exp_fastopen={0xfe, 0x9, 0xf989, "7511e90002"}, @sack={0x5, 0x6, [0xa1be]}, @eol, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0xb, 0xf989, "d463e2c4e2da7a"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x4}, @fastopen={0x22, 0x2}, @sack={0x5, 0x22, [0x4, 0x8, 0x3, 0xfc00, 0x28f, 0xa6e, 0x0, 0x2]}]}}}}}}}}, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a00ff0000000095dbcc427fb93c69291373c92f56e2d26a14be757e6d3bcec850f52f73"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x40640) readv(r8, &(0x7f0000001700)=[{&(0x7f0000000340)=""/223, 0xdf}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) 3.420056485s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018013307000000261608bd30", 0x10) 3.408259431s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc, &(0x7f00000003c0)=ANY=[], 0x1, 0x6e3, &(0x7f00000009c0)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 3.27861803s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'memory.events\x00'}, {0x20, '\x00'}, {0x20, 'memory.events\x00'}, {0x20, '^}\x00'}, {0x20, 'memory.events\x00'}, {0x20, '*:,*'}, {0x20, '-'}, {0x20, '\x00'}, {0x20, '-'}, {0x20, 'memory.events\x00'}], 0xa, "9b81ccfd6b672bfeab2ecd23b78cedc0f2212cf2686be716a87bb4dd56810a52e38c7fc28d494b3b3f212be2c72ab7c2e981562ed69220acb78e2c68fa8b1aab08ef39a10a6ad5f429bfe8b3bd2f3064bced81338d60216dc4699c1c9e116281d21f0f7391828e423b08a2e46075808835b3ab3aeba44fea3b41de4c2dd9bb7caf53e387f8dd7d8491b481c35a8751bc95ae4c51d67c2936fa8c99462cf62c4bb62f3682353be3f5a0f61cf27ba557754047412f646708989e3da33102b7a5c8d25ed72698e572cf19df3642273058eceb1600c4c6dc0642400906202fd0fb9410ffda869054e69c7b4595a38f876161d5"}, 0x149) write$binfmt_script(r0, &(0x7f00000002c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) 3.277966685s ago: executing program 0: syz_mount_image$fuse(0x0, 0x0, 0xb0048c, 0x0, 0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000780)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x886}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}], [{@uid_gt}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}]}, 0xd, 0x5df, &(0x7f0000001200)="$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") open(0x0, 0x14927e, 0x0) unlink(&(0x7f0000000480)='./file0/file0\x00') unshare(0x58020080) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x1001) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/rt_acct\x00') r3 = open(&(0x7f0000000540)='./file1\x00', 0x40800, 0x178) sendfile(r3, r2, 0x0, 0x80000000) 3.190500041s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a8c000000060a0904000000000000000002000000600004805c0001800b000100736f636b657400004c000280080003000000007c080002400000000f080003000000003008000140000000000800030000000064080003000000001b0800030000000032080001400000000308000240000000140900010073797a30000000000900020073797a320000000014000000110001"], 0xb4}}, 0x0) 1.936093424s ago: executing program 5: mkdir(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000640)=0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/112, 0x70}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000b40), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/234, 0xea}, {0x0}, {&(0x7f0000000e40)=""/192, 0xc0}, {&(0x7f0000000f00)=""/209, 0xd1}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001100)=""/55, 0x37}, {&(0x7f0000001140)=""/95, 0x5f}], 0x8, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/120, 0x78}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/20, 0x14}, {&(0x7f0000001680)=""/126, 0x7e}, {&(0x7f0000001700)=""/11, 0xb}, {&(0x7f0000001740)=""/32, 0x20}], 0x7, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002880), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002900)=""/11, 0xb}], 0x1, &(0x7f0000002980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002ac0)=@abs, 0x6e, 0x0}}], 0x5, 0x142, &(0x7f0000002e40)) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r2, 0x0, 0x49) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {0x0, 0x81}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000200001000000000", @ANYRESDEC=r5, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063c7795a4177a419e3b78831824751be316e56da7de7fe943659137cbb19e06f0e1f3b9649d8dcba7c"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@polexpire={0xc0, 0x1b, 0x103, 0x0, 0x0, {{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0xc0}}, 0x0) 1.814583818s ago: executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x81) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x10}}) 1.718874729s ago: executing program 4: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[], 0x53) 1.650326355s ago: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000a80)=[{0x48}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="bdfe", 0x2}], 0x1}, 0x0) 1.454939937s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x25, &(0x7f0000000140), 0x4) 1.403714689s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x72, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), 0x0}, 0x20) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r5 = inotify_init1(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, [{0x3, 0x0, 0x0, 0x0, 0x0, 0x800}]}, 0x78) close(r6) inotify_add_watch(r5, &(0x7f0000000000)='./file1\x00', 0x4000801) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.285502528s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 1.277144664s ago: executing program 2: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000002200)={[{@uid}, {}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@grpquota}, {@nointegrity}]}, 0x1, 0x5f37, &(0x7f000000bd40)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 102.269868ms ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lseek(r1, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x100, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x72}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4, [], [], 'pim6reg0\x00', 'team0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "2e0422079ddd6625f322f2efcf6fb3f683d84a22bddb3582f45812ce0592"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x447) r4 = userfaultfd(0x80800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000400)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640), 0x4) syz_emit_ethernet(0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbb}]}) socket$unix(0x1, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000002200010600000000000000000000000001"], 0x1c}], 0x1}, 0x0) poll(&(0x7f0000000340)=[{r4}], 0x1, 0x0) semget(0x2, 0x3, 0x2) 36.235762ms ago: executing program 3: mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) ftruncate(r0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x48}, {0x5}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffffa20}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000000001090c00000000000000000200000024f900801400018008000100e000000208000200000000000c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c000280050001000000000008000740000000000500164000000000"], 0x6c}}, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x0, &(0x7f00000001c0)}) creat(&(0x7f00000001c0)='./bus\x00', 0x105) r5 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x40) mlockall(0x2) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r7 = shmget(0x1, 0x3000, 0x4, &(0x7f00001c9000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmat(0x0, &(0x7f000025f000/0x1000)=nil, 0x4000) shmat(r6, &(0x7f000012a000/0x4000)=nil, 0x5000) fcntl$addseals(r4, 0x409, 0xa) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, &(0x7f00000001c0), 0x40f00, 0x2e, '\x00', 0x0, 0x9, r5, 0x8, &(0x7f0000000200)={0x800006, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8000c, 0x2f16, 0x3}, 0x10, 0xffffffffffffffff}, 0x90) 0s ago: executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.306861][ T1108] bond0 (unregistering): Released all slaves [ 201.413268][ T5140] Bluetooth: hci1: command tx timeout [ 201.591305][ T5315] chnl_net:caif_netlink_parms(): no params data found [ 202.761402][ T5417] binder: 5416:5417 ioctl c0306201 20000080 returned -14 [ 202.780833][ T5419] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 202.807392][ T5419] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.822464][ T5417] binder: 5416:5417 ioctl 8933 20000340 returned -22 [ 202.854499][ T5417] binder: 5416:5417 ioctl 4008f50a 20000140 returned -22 [ 203.361063][ T5432] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.491026][ T5140] Bluetooth: hci1: command tx timeout [ 203.526670][ T1108] hsr_slave_0: left promiscuous mode [ 203.572306][ T5445] loop2: detected capacity change from 0 to 2048 [ 203.578845][ T1108] hsr_slave_1: left promiscuous mode [ 203.614648][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.630538][ T5447] loop1: detected capacity change from 0 to 512 [ 203.637617][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.686391][ T5447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 203.724032][ T5447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.742513][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.755689][ T5452] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.793395][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.854451][ T5447] EXT4-fs (loop1): 1 truncate cleaned up [ 203.910907][ T5452] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 203.932189][ T5447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.989553][ T1108] veth1_macvtap: left promiscuous mode [ 203.996946][ T5452] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 204.048848][ T1108] veth0_macvtap: left promiscuous mode [ 204.099634][ T1108] veth1_vlan: left promiscuous mode [ 204.107394][ T5452] Remounting filesystem read-only [ 204.109830][ T5447] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: overlapping e_value [ 204.151385][ T1108] veth0_vlan: left promiscuous mode [ 204.201384][ T5447] EXT4-fs (loop1): Remounting filesystem read-only [ 204.250051][ T5447] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.1: unable to update i_inline_off [ 204.301948][ T5447] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.311310][ T5141] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 204.361937][ T5141] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 204.368643][ T5141] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 204.403314][ T5465] loop5: detected capacity change from 0 to 256 [ 204.440956][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.449837][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.492847][ T5131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.509361][ T5465] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 204.543497][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.592114][ T5465] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.592537][ T5141] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 204.644572][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.690166][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.757558][ T5141] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 204.813261][ T5141] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 204.855413][ T5141] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 204.897505][ T5141] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 204.921984][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.969367][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.022490][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.071976][ T5141] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 205.078685][ T5141] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 205.137619][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.150112][ T5471] loop1: detected capacity change from 0 to 4096 [ 205.170919][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.199520][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.240111][ T5141] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 205.247743][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.260243][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.269810][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.279563][ T5141] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 205.291047][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.300182][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.304352][ T5141] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 205.315697][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.334388][ T5141] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 205.348585][ T5141] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.412833][ T5471] ntfs3: loop1: Failed to load $Extend (-22). [ 205.438368][ T5471] ntfs3: loop1: Failed to initialize $Extend. [ 205.472439][ T5458] loop3: detected capacity change from 0 to 32768 [ 205.583199][ T53] Bluetooth: hci1: command tx timeout [ 206.139691][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 206.252640][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 207.208660][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.230324][ T5315] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.249635][ T5315] bridge_slave_0: entered allmulticast mode [ 207.288461][ T5315] bridge_slave_0: entered promiscuous mode [ 207.346280][ T5502] loop5: detected capacity change from 0 to 64 [ 207.363438][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.377837][ T5315] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.404814][ T5315] bridge_slave_1: entered allmulticast mode [ 207.412196][ T53] Bluetooth: hci3: command tx timeout [ 207.437895][ T5315] bridge_slave_1: entered promiscuous mode [ 207.558897][ T5502] UBIFS error (pid: 5502): cannot open "./file0", error -22 [ 207.767656][ T5510] loop2: detected capacity change from 0 to 4096 [ 207.803992][ T5315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.814981][ T5510] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 207.933435][ T5315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.996467][ T5518] Bluetooth: MGMT ver 1.22 [ 208.028387][ T5514] loop3: detected capacity change from 0 to 1764 [ 208.060144][ T29] audit: type=1800 audit(1719112163.045:2): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 208.166297][ T29] audit: type=1800 audit(1719112163.135:3): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 208.229789][ T5315] team0: Port device team_slave_0 added [ 208.243066][ T29] audit: type=1804 audit(1719112163.235:4): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir901799883/syzkaller.4qyJ9K/8/file0/file1" dev="loop2" ino=30 res=1 errno=0 [ 208.345663][ T5315] team0: Port device team_slave_1 added [ 208.695209][ T5315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.740841][ T5315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.842670][ T5315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.918454][ T5315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.970867][ T5315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.985525][ T5545] loop5: detected capacity change from 0 to 1764 [ 209.076436][ T5315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.432319][ T5565] loop3: detected capacity change from 0 to 16 [ 209.447379][ T5565] erofs: (device loop3): mounted with root inode @ nid 36. [ 209.498156][ T53] Bluetooth: hci3: command tx timeout [ 209.586003][ T5567] loop5: detected capacity change from 0 to 1024 [ 209.725766][ T5567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.816596][ T5315] hsr_slave_0: entered promiscuous mode [ 209.859033][ T5315] hsr_slave_1: entered promiscuous mode [ 209.902079][ T5315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.954364][ T5315] Cannot create hsr debugfs directory [ 210.116187][ T5142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.279613][ T5583] loop2: detected capacity change from 0 to 2048 [ 210.395787][ T5590] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.418323][ T5553] loop1: detected capacity change from 0 to 32768 [ 211.570844][ T53] Bluetooth: hci3: command tx timeout [ 211.694756][ T5474] chnl_net:caif_netlink_parms(): no params data found [ 211.805153][ T1097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.092768][ T1097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.240248][ T5618] binder: 5617:5618 ioctl c0306201 20000080 returned -14 [ 212.292504][ T5618] binder: 5617:5618 ioctl 8933 20000340 returned -22 [ 212.323283][ T5618] binder: 5617:5618 ioctl 4008f50a 20000140 returned -22 [ 212.406194][ T1097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.686714][ T1097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.121739][ T5610] loop1: detected capacity change from 0 to 32768 [ 213.271042][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.288633][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.316003][ T5474] bridge_slave_0: entered allmulticast mode [ 213.322705][ T5195] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 213.350425][ T5474] bridge_slave_0: entered promiscuous mode [ 213.374489][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.391015][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.408900][ T5474] bridge_slave_1: entered allmulticast mode [ 213.424445][ T5474] bridge_slave_1: entered promiscuous mode [ 213.532378][ T5195] usb 3-1: Using ep0 maxpacket: 8 [ 213.549335][ T5195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.570382][ T5195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.583884][ T5195] usb 3-1: New USB device found, idVendor=0003, idProduct=0000, bcdDevice= 0.00 [ 213.599189][ T5195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.623883][ T5195] usb 3-1: config 0 descriptor?? [ 213.651411][ T53] Bluetooth: hci3: command tx timeout [ 213.832212][ T5646] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 214.368922][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.449086][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.629268][ T5640] loop5: detected capacity change from 0 to 32768 [ 214.746056][ T1097] bridge_slave_1: left allmulticast mode [ 214.792337][ T1097] bridge_slave_1: left promiscuous mode [ 214.837659][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.916896][ T1097] bridge_slave_0: left allmulticast mode [ 214.949197][ T1097] bridge_slave_0: left promiscuous mode [ 214.976241][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.478189][ T5638] loop2: detected capacity change from 0 to 131072 [ 215.556928][ T5638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 215.643005][ T5638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.944935][ T5195] usbhid 3-1:0.0: can't add hid device: -71 [ 215.962595][ T5195] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 216.002680][ T5195] usb 3-1: USB disconnect, device number 2 [ 216.037818][ T5668] loop5: detected capacity change from 0 to 512 [ 216.044904][ T5665] loop1: detected capacity change from 0 to 4096 [ 216.070043][ T5665] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 216.084933][ T5668] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.125630][ T5665] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 216.141328][ T5668] EXT4-fs (loop5): 1 truncate cleaned up [ 216.157452][ T5668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.237436][ T5142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.325175][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.371509][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.400332][ T1097] bond0 (unregistering): Released all slaves [ 216.449987][ T5474] team0: Port device team_slave_0 added [ 216.486641][ T5474] team0: Port device team_slave_1 added [ 216.650529][ T5666] loop3: detected capacity change from 0 to 32768 [ 216.688400][ T5666] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.787379][ T5666] XFS (loop3): Ending clean mount [ 216.863292][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.880609][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.888534][ T5689] loop5: detected capacity change from 0 to 512 [ 216.915038][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.935651][ T5689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.945322][ T5689] EXT4-fs (loop5): blocks per group (255) and clusters per group (8192) inconsistent [ 216.978362][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.996452][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.033482][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.082980][ T5132] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.517379][ T1097] hsr_slave_0: left promiscuous mode [ 217.631073][ T1097] hsr_slave_1: left promiscuous mode [ 217.649870][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.680878][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.702943][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.721031][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.759858][ T1097] veth1_macvtap: left promiscuous mode [ 217.778008][ T1097] veth0_macvtap: left promiscuous mode [ 217.795112][ T1097] veth1_vlan: left promiscuous mode [ 217.811951][ T1097] veth0_vlan: left promiscuous mode [ 218.081434][ T5694] loop1: detected capacity change from 0 to 32768 [ 218.106150][ T5694] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5694) [ 218.184112][ T5694] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.216790][ T5694] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 218.245410][ T5694] BTRFS info (device loop1): using free-space-tree [ 218.585886][ T5131] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 219.023922][ T5731] loop1: detected capacity change from 0 to 8 [ 219.035243][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 219.078406][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 219.357451][ T5739] loop1: detected capacity change from 0 to 512 [ 219.386083][ T5739] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.1: invalid block [ 219.409191][ T5743] loop2: detected capacity change from 0 to 1024 [ 219.414689][ T5739] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 219.425360][ T5743] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.451443][ T5739] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 219.467909][ T5739] EXT4-fs (loop1): 2 truncates cleaned up [ 219.475187][ T5739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.477862][ T5743] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 219.516479][ T5743] EXT4-fs (loop2): orphan cleanup on readonly fs [ 219.733871][ T5743] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 219.752362][ T5743] EXT4-fs (loop2): 1 orphan inode deleted [ 219.764288][ T5743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.798018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 219.897895][ T5746] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 5: invalid block bitmap [ 220.119451][ T5747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.251970][ T5141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.503008][ T5210] IPVS: starting estimator thread 0... [ 220.612325][ T5748] IPVS: using max 15 ests per chain, 36000 per kthread [ 221.193943][ T5474] hsr_slave_0: entered promiscuous mode [ 221.216429][ T5474] hsr_slave_1: entered promiscuous mode [ 221.239592][ T5131] EXT4-fs error (device loop1): ext4_lookup:1854: inode #17: comm syz-executor.1: iget: bad extended attribute block 6904 [ 221.323117][ T5131] EXT4-fs error (device loop1): ext4_lookup:1854: inode #17: comm syz-executor.1: iget: bad extended attribute block 6904 [ 221.464642][ T5315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.485293][ T5315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.930285][ T5315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.938892][ T5648] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 222.242559][ T5648] usb 4-1: Using ep0 maxpacket: 8 [ 222.339523][ T5315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.441465][ T5648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.464036][ T5131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.718131][ T5648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.887132][ T5760] loop5: detected capacity change from 0 to 4096 [ 222.995403][ T5648] usb 4-1: New USB device found, idVendor=0003, idProduct=0000, bcdDevice= 0.00 [ 223.199780][ T5648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.480685][ C0] sched: RT throttling activated [ 223.502309][ T5648] usb 4-1: config 0 descriptor?? [ 224.182769][ T5760] ntfs3: loop5: Failed to load $Extend (-22). [ 224.486279][ T5760] ntfs3: loop5: Failed to initialize $Extend. [ 225.732891][ T5758] loop3: detected capacity change from 0 to 131072 [ 225.889304][ T5758] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 226.010994][ T5648] usbhid 4-1:0.0: can't add hid device: -71 [ 226.070782][ T5648] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 226.240574][ T5648] usb 4-1: USB disconnect, device number 2 [ 226.823566][ T5774] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.292437][ T5786] loop5: detected capacity change from 0 to 2048 [ 227.436571][ T1097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.495998][ T5786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.603042][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.614913][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.623017][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.634091][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.645421][ T5140] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.660042][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.692203][ T5786] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor.5: bg 0: block 234: padding at end of block bitmap is not set [ 227.841877][ T5786] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 227.912090][ T5786] EXT4-fs (loop5): This should not happen!! Data will be lost [ 227.912090][ T5786] [ 228.160087][ T5142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.164427][ T1097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.240626][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.250012][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.260834][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.284951][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.306246][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 228.314448][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.535492][ T1097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.657907][ T5315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.774164][ T1097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.919802][ T5315] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.103366][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.110586][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.420610][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.427871][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.487277][ T5474] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.607332][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 229.653112][ T5474] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.687666][ T5474] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.738115][ T5140] Bluetooth: hci0: command tx timeout [ 229.749103][ T1097] bridge_slave_1: left allmulticast mode [ 229.759786][ T1097] bridge_slave_1: left promiscuous mode [ 229.766729][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.777734][ T1097] bridge_slave_0: left allmulticast mode [ 229.786836][ T1097] bridge_slave_0: left promiscuous mode [ 229.792749][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.981049][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 230.187703][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 230.209065][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.240598][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.268540][ T8] usb 4-1: New USB device found, idVendor=0003, idProduct=0000, bcdDevice= 0.00 [ 230.282573][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.308423][ T8] usb 4-1: config 0 descriptor?? [ 230.341645][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.355907][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.371151][ T5140] Bluetooth: hci6: command tx timeout [ 230.383261][ T1097] bond0 (unregistering): Released all slaves [ 230.425717][ T5474] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.479899][ T5315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.505546][ T5845] loop5: detected capacity change from 0 to 32768 [ 230.521061][ T5845] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (5845) [ 231.814361][ T5140] Bluetooth: hci0: command tx timeout [ 231.820399][ T5840] loop3: detected capacity change from 0 to 131072 [ 231.864940][ T5840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.933959][ T5845] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.963166][ T5840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 232.011564][ T5845] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 232.049206][ T5845] BTRFS info (device loop5): using free-space-tree [ 232.276739][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 232.282977][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 232.303179][ T8] usb 4-1: USB disconnect, device number 3 [ 232.451918][ T5140] Bluetooth: hci6: command tx timeout [ 232.533427][ T5142] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.652089][ T1097] hsr_slave_0: left promiscuous mode [ 232.706245][ T1097] hsr_slave_1: left promiscuous mode [ 232.745693][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.772865][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.792080][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.799515][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.917830][ T1097] veth1_macvtap: left promiscuous mode [ 232.923678][ T1097] veth0_macvtap: left promiscuous mode [ 232.929410][ T1097] veth1_vlan: left promiscuous mode [ 232.941060][ T1097] veth0_vlan: left promiscuous mode [ 233.891034][ T5140] Bluetooth: hci0: command tx timeout [ 234.156430][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 234.289443][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 234.534726][ T5140] Bluetooth: hci6: command tx timeout [ 234.775911][ T5911] loop3: detected capacity change from 0 to 64 [ 235.246648][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 235.279963][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.312025][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.331919][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.345885][ T5791] bridge_slave_0: entered allmulticast mode [ 235.385589][ T5791] bridge_slave_0: entered promiscuous mode [ 235.405741][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.428090][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.443087][ T5791] bridge_slave_1: entered allmulticast mode [ 235.640444][ T5791] bridge_slave_1: entered promiscuous mode [ 236.046282][ T5140] Bluetooth: hci0: command tx timeout [ 236.620802][ T5140] Bluetooth: hci6: command tx timeout [ 236.723562][ T5315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.785467][ T5936] loop5: detected capacity change from 0 to 2048 [ 236.971946][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.051109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 237.072394][ T5942] xt_ipcomp: unknown flags 12 [ 237.102044][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.318413][ T5950] loop5: detected capacity change from 0 to 1764 [ 237.373302][ T5950] iso9660: Unknown parameter 'ov' [ 237.515577][ T5791] team0: Port device team_slave_0 added [ 237.546600][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.574956][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.621017][ T5796] bridge_slave_0: entered allmulticast mode [ 237.651829][ T53] Bluetooth: hci4: sending frame failed (-49) [ 237.658795][ T5140] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 237.671064][ T5796] bridge_slave_0: entered promiscuous mode [ 237.727754][ T5791] team0: Port device team_slave_1 added [ 237.751157][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.762654][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.771793][ T5796] bridge_slave_1: entered allmulticast mode [ 237.789461][ T5796] bridge_slave_1: entered promiscuous mode [ 238.027617][ T1097] IPVS: stop unused estimator thread 0... [ 238.149644][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.219753][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.237137][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.278315][ T5967] process 'syz-executor.5' launched './file1' with NULL argv: empty string added [ 238.288066][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.319998][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.384203][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.399572][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.445462][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.740241][ T5315] veth0_vlan: entered promiscuous mode [ 238.843577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 239.185391][ T5978] loop5: detected capacity change from 0 to 256 [ 239.284983][ T1097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.341055][ T5978] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 239.428403][ T5978] exFAT-fs (loop5): error, in sector 160, dentry 5 should be unused, but 0xc1 [ 239.778380][ T5796] team0: Port device team_slave_0 added [ 239.844457][ T5474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.910184][ T5315] veth1_vlan: entered promiscuous mode [ 240.007554][ T5315] veth0_macvtap: entered promiscuous mode [ 240.172340][ T1097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.208342][ T5796] team0: Port device team_slave_1 added [ 240.236376][ T5791] hsr_slave_0: entered promiscuous mode [ 240.267491][ T5791] hsr_slave_1: entered promiscuous mode [ 240.306434][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.314435][ T5791] Cannot create hsr debugfs directory [ 240.444554][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.452970][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.483848][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.554354][ T1097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.599318][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.624722][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.651762][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.665640][ T5315] veth1_macvtap: entered promiscuous mode [ 240.726134][ T6000] loop5: detected capacity change from 0 to 64 [ 240.786560][ T1097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.818262][ T5474] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.940371][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.959504][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.969508][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.980418][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.000027][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.010581][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.032119][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.308278][ T5796] hsr_slave_0: entered promiscuous mode [ 241.351827][ T5796] hsr_slave_1: entered promiscuous mode [ 241.373100][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.405265][ T5796] Cannot create hsr debugfs directory [ 241.413204][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.420386][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.563877][ T6018] loop5: detected capacity change from 0 to 256 [ 241.592847][ T29] audit: type=1800 audit(1719112196.505:5): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 241.664671][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.798297][ T6018] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 241.830578][ T6018] exFAT-fs (loop5): error, invalid access to FAT bad cluster (entry 0x00000005) [ 241.840039][ T6018] exFAT-fs (loop5): Filesystem has been set read-only [ 241.846959][ T6018] exFAT-fs (loop5): failed to initialize root inode [ 241.875541][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.011404][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.235690][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.262226][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.273326][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.295297][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.318628][ T5193] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 242.333381][ T5315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.357472][ T5315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.370189][ T5315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.408049][ T5315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.694592][ T6026] loop5: detected capacity change from 0 to 1024 [ 242.714208][ T6026] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.737163][ T1769] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.744371][ T1769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.776671][ T6026] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 242.785329][ T6026] EXT4-fs (loop5): orphan cleanup on readonly fs [ 242.792196][ T6026] EXT4-fs error (device loop5): ext4_free_blocks:6590: comm syz-executor.5: Freeing blocks not in datazone - block = 0, count = 4096 [ 242.809893][ T6026] EXT4-fs (loop5): 1 orphan inode deleted [ 242.817184][ T6026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.955312][ T5142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.095425][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.122790][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.857418][ T6033] loop5: detected capacity change from 0 to 2048 [ 243.898183][ T6033] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.999677][ T6033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.126919][ T1097] bridge_slave_1: left allmulticast mode [ 244.143487][ T1097] bridge_slave_1: left promiscuous mode [ 244.150331][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.212690][ T1097] bridge_slave_0: left allmulticast mode [ 244.218359][ T1097] bridge_slave_0: left promiscuous mode [ 244.237258][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.365099][ T29] audit: type=1800 audit(1719112199.345:6): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 244.707985][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.727831][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.740036][ T1097] bond0 (unregistering): Released all slaves [ 244.837996][ T5142] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 16: comm syz-executor.5: path /root/syzkaller-testdir2406745786/syzkaller.2FnZpF/66/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0 [ 244.897178][ T5142] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 244.944492][ T5142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.065225][ T2837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.128221][ T2837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.648417][ T1769] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.797727][ T6069] loop0: detected capacity change from 0 to 256 [ 245.835996][ T6069] exfat: Deprecated parameter 'utf8' [ 245.887467][ T1769] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 245.900398][ T1769] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 245.915500][ T1097] hsr_slave_0: left promiscuous mode [ 245.916836][ T6069] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 245.934958][ T1097] hsr_slave_1: left promiscuous mode [ 245.936116][ T1769] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.950340][ T1769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.993357][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.011236][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.036221][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.051269][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.135903][ T1097] veth1_macvtap: left promiscuous mode [ 246.150894][ T1097] veth0_macvtap: left promiscuous mode [ 246.161442][ T1097] veth1_vlan: left promiscuous mode [ 246.172121][ T1097] veth0_vlan: left promiscuous mode [ 246.393355][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 246.412807][ T1769] usb 4-1: string descriptor 0 read error: -71 [ 246.452856][ T1769] usb 4-1: USB disconnect, device number 4 [ 246.586709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 246.595478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 246.607025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 246.631257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 246.681625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 246.943318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 247.864794][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 248.008021][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 248.394098][ T6092] loop5: detected capacity change from 0 to 32768 [ 248.401115][ T6109] loop3: detected capacity change from 0 to 4096 [ 248.423775][ T6109] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 248.533684][ T6092] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 248.575531][ T6109] ntfs3: loop3: failed to convert "c46c" to iso8859-7 [ 248.739287][ T6092] XFS (loop5): Starting recovery (logdev: internal) [ 248.777501][ T6092] XFS (loop5): Ending recovery (logdev: internal) [ 248.875321][ T6128] loop3: detected capacity change from 0 to 512 [ 248.935964][ T6128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.955516][ T6128] ext4 filesystem being mounted at /root/syzkaller-testdir3689671989/syzkaller.qAvaOx/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.072609][ T5142] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 249.305485][ T6132] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4117: comm syz-executor.3: Allocating blocks 18-19 which overlap fs metadata [ 249.776093][ T6145] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 249.859474][ T6145] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 249.881766][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.919591][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.986515][ T6145] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4117: comm syz-executor.3: Allocating blocks 18-19 which overlap fs metadata [ 250.000490][ T5474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.185700][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.217458][ T29] audit: type=1804 audit(1719112205.185:7): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2406745786/syzkaller.2FnZpF/71/file0" dev="sda1" ino=1958 res=1 errno=0 [ 250.260478][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.466822][ T5132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.134775][ T6178] syz-executor.3 (pid 6178) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 251.193142][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.262016][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.328155][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.365234][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.467058][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.605448][ T5474] veth0_vlan: entered promiscuous mode [ 251.634632][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.699908][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.707139][ T5648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.792440][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.799598][ T5648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.825791][ T5474] veth1_vlan: entered promiscuous mode [ 251.963327][ T6191] xt_ipcomp: unknown flags 12 [ 251.985954][ T6193] loop5: detected capacity change from 0 to 1024 [ 252.143429][ T5474] veth0_macvtap: entered promiscuous mode [ 252.205959][ T5474] veth1_macvtap: entered promiscuous mode [ 252.445348][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.488258][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.512552][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.550958][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.580028][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.638966][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.658801][ T5766] hfsplus: b-tree write err: -5, ino 4 [ 252.674854][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.747980][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.800849][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.843441][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.874469][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.914845][ T5474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.955374][ T5474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.000273][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.053527][ T6206] loop3: detected capacity change from 0 to 2048 [ 253.058981][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.136868][ T5474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.141247][ T6212] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.190868][ T5474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.209498][ T5474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.219573][ T5474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.359403][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.407409][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.513567][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.520818][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.618686][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.625893][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.754141][ T6224] loop0: detected capacity change from 0 to 64 [ 253.792395][ T6224] minix: Unknown parameter '0xrB;OGZk農iKQ\(aB V#pៅpri)ڲ017777777777777777777770xffffffffffffffff' [ 253.897603][ T5766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.926652][ T5766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.935457][ T5193] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 254.007185][ T5791] veth0_vlan: entered promiscuous mode [ 254.143281][ T5791] veth1_vlan: entered promiscuous mode [ 254.213397][ T5766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.269118][ T5766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.283422][ T6224] loop0: detected capacity change from 0 to 4096 [ 254.407437][ T5791] veth0_macvtap: entered promiscuous mode [ 254.489695][ T5791] veth1_macvtap: entered promiscuous mode [ 254.646325][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.702041][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.727495][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.756761][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.776698][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.797503][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.813514][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.826923][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.850137][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.934693][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.964898][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.982827][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.013635][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.027272][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.038644][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.049303][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.060615][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.075893][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.113066][ T6252] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 255.147939][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.190311][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.219634][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.239539][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.255725][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.262745][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.291176][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.625339][ T6277] loop5: detected capacity change from 0 to 256 [ 256.684300][ T5796] veth0_vlan: entered promiscuous mode [ 256.767635][ T5766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.804849][ T5796] veth1_vlan: entered promiscuous mode [ 256.823735][ T5766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.853105][ T29] audit: type=1804 audit(1719112211.835:8): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2406745786/syzkaller.2FnZpF/83/file0/bus" dev="loop5" ino=1048606 res=1 errno=0 [ 256.994456][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.033645][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.141895][ T5796] veth0_macvtap: entered promiscuous mode [ 257.199762][ T5796] veth1_macvtap: entered promiscuous mode [ 257.292561][ T6284] loop1: detected capacity change from 0 to 8 [ 257.314415][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.343725][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.381191][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.427640][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.464355][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.495516][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.516549][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.540790][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.572828][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.588637][ T6292] loop3: detected capacity change from 0 to 1024 [ 257.596320][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.614599][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.688219][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.772490][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.804638][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.867022][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.907581][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.992095][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.017406][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.030632][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.076647][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.125781][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.204882][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.215087][ T2456] hfsplus: b-tree write err: -5, ino 4 [ 258.523343][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.640318][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.649893][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.668649][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.855055][ T6313] loop1: detected capacity change from 0 to 256 [ 259.080299][ T29] audit: type=1804 audit(1719112214.055:9): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir24540308/syzkaller.dtXGp9/3/file0/bus" dev="loop1" ino=1048611 res=1 errno=0 [ 259.378603][ T5766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.434887][ T5766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.660305][ T2456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.699375][ T2456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.047338][ T6336] loop4: detected capacity change from 0 to 1024 [ 260.127975][ T6341] loop0: detected capacity change from 0 to 1024 [ 260.184931][ T6341] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 260.260794][ T6341] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 260.273270][ T6341] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 260.285232][ T6341] EXT4-fs error (device loop0): ext4_get_journal_inode:5752: inode #5: comm syz-executor.0: unexpected bad inode w/o EXT4_IGET_BAD [ 260.310424][ T6341] EXT4-fs (loop0): no journal found [ 260.320606][ T6341] EXT4-fs (loop0): can't get journal size [ 260.338707][ T2837] hfsplus: b-tree write err: -5, ino 4 [ 260.394080][ T6341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.556806][ T5315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.659324][ T6352] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 260.946853][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.640490][ T6362] loop4: detected capacity change from 0 to 256 [ 262.026330][ T6363] loop0: detected capacity change from 0 to 256 [ 262.201089][ T29] audit: type=1804 audit(1719112217.045:10): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2458593245/syzkaller.i60zNF/16/file0/bus" dev="loop0" ino=1048616 res=1 errno=0 [ 262.384085][ T6362] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 262.626840][ T6361] exFAT-fs (loop4): error, in sector 160, dentry 5 should be unused, but 0xc1 [ 263.429473][ T6369] loop4: detected capacity change from 0 to 1024 [ 263.691062][ T51] hfsplus: b-tree write err: -5, ino 4 [ 263.803103][ T6375] loop0: detected capacity change from 0 to 16 [ 263.877051][ T6378] loop1: detected capacity change from 0 to 2048 [ 264.086300][ T6378] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 265.352715][ T6398] loop4: detected capacity change from 0 to 256 [ 265.384503][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.439554][ T6403] loop0: detected capacity change from 0 to 512 [ 265.447304][ T6402] loop2: detected capacity change from 0 to 256 [ 265.470604][ T29] audit: type=1804 audit(1719112220.455:11): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir827633712/syzkaller.yD2ubR/11/file0/bus" dev="loop4" ino=1048618 res=1 errno=0 [ 265.557471][ T6402] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 265.602809][ T6403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.607204][ T6402] FAT-fs (loop2): Filesystem has been set read-only [ 265.615432][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 265.636618][ T6403] ext4 filesystem being mounted at /root/syzkaller-testdir2458593245/syzkaller.i60zNF/19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.651903][ T57] usb 6-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 265.675375][ T57] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.693147][ T6402] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 265.724581][ T6402] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 265.737563][ T57] usb 6-1: New USB device found, idVendor=1199, idProduct=9008, bcdDevice=21.26 [ 265.767507][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.790434][ T29] audit: type=1800 audit(1719112220.775:12): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 265.838656][ T57] usb 6-1: Product: syz [ 265.859746][ T57] usb 6-1: Manufacturer: syz [ 265.889702][ T57] usb 6-1: SerialNumber: syz [ 266.155183][ T57] usb 6-1: config 0 descriptor?? [ 267.195169][ T57] usb 6-1: USB disconnect, device number 2 [ 267.467329][ T6412] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4117: comm syz-executor.0: Allocating blocks 18-19 which overlap fs metadata [ 267.601410][ T6427] loop1: detected capacity change from 0 to 256 [ 267.639990][ T6427] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.711041][ T6427] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 267.753310][ T6412] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 267.829212][ T6412] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 267.848787][ T6431] loop4: detected capacity change from 0 to 256 [ 268.125470][ T6412] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4117: comm syz-executor.0: Allocating blocks 18-19 which overlap fs metadata [ 270.909666][ T6402] syz-executor.2 (6402) used greatest stack depth: 18288 bytes left [ 271.339022][ T5315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.685343][ T6447] loop2: detected capacity change from 0 to 2048 [ 271.944044][ T6456] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.433705][ T6471] loop5: detected capacity change from 0 to 256 [ 273.442107][ T29] audit: type=1800 audit(1719112228.415:13): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1969 res=0 errno=0 [ 273.539740][ T6471] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 273.585921][ T6471] exFAT-fs (loop5): error, invalid access to FAT bad cluster (entry 0x00000005) [ 273.595117][ T6471] exFAT-fs (loop5): Filesystem has been set read-only [ 273.602123][ T6471] exFAT-fs (loop5): failed to initialize root inode [ 274.078087][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.224829][ T6474] loop0: detected capacity change from 0 to 256 [ 274.333806][ T6480] loop4: detected capacity change from 0 to 64 [ 275.513658][ T29] audit: type=1326 audit(1719112230.505:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 275.525761][ T6495] mkiss: ax0: crc mode is auto. [ 275.543959][ T29] audit: type=1326 audit(1719112230.535:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 275.694691][ T29] audit: type=1326 audit(1719112230.535:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 275.916687][ T29] audit: type=1326 audit(1719112230.535:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 276.048927][ T29] audit: type=1326 audit(1719112230.535:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 276.171714][ T29] audit: type=1326 audit(1719112230.535:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 276.270988][ T29] audit: type=1326 audit(1719112230.535:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 276.278038][ T6514] libceph: resolve '0..' (ret=-3): failed [ 276.382528][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.390790][ T29] audit: type=1326 audit(1719112230.535:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 276.502012][ T29] audit: type=1326 audit(1719112230.545:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c1c7d0a9 code=0x7ffc0000 [ 276.708316][ T6526] loop0: detected capacity change from 0 to 256 [ 276.764987][ T6526] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 276.998712][ T6535] loop2: detected capacity change from 0 to 2048 [ 277.118520][ T6535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.218569][ T6535] ext4 filesystem being mounted at /root/syzkaller-testdir1550393673/syzkaller.Bjcc1N/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.369486][ T6552] loop4: detected capacity change from 0 to 1024 [ 277.374430][ T6547] loop5: detected capacity change from 0 to 1024 [ 277.403629][ T6544] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 277.540592][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.868651][ T6561] loop3: detected capacity change from 0 to 4096 [ 281.819536][ T6547] fscrypt: Error allocating hmac(sha512): -2 [ 281.903566][ T12] hfsplus: b-tree write err: -5, ino 3 [ 281.920893][ T6561] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 282.031325][ T5474] hfsplus: node 4:3 still has 1 user(s)! [ 282.392235][ T6561] ntfs3: loop3: Failed to read $UpCase (-4). [ 283.420402][ T6573] loop0: detected capacity change from 0 to 32768 [ 283.689494][ T6573] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 283.706731][ T6573] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 283.855838][ T6573] bcachefs (loop0): alloc_read... done [ 283.862275][ T6573] bcachefs (loop0): stripes_read... done [ 283.868057][ T6573] bcachefs (loop0): snapshots_read... done [ 283.879725][ T6573] bcachefs (loop0): journal_replay... done [ 283.885660][ T6573] bcachefs (loop0): resume_logged_ops... done [ 283.892379][ T6573] bcachefs (loop0): going read-write [ 283.915526][ T6573] bcachefs (loop0): done starting filesystem [ 284.891305][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 284.891326][ T29] audit: type=1804 audit(1719112239.855:43): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2458593245/syzkaller.i60zNF/29/file0/bus" dev="loop0" ino=4098 res=1 errno=0 [ 284.993447][ T29] audit: type=1804 audit(1719112239.985:44): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2458593245/syzkaller.i60zNF/29/file0/bus" dev="loop0" ino=4098 res=1 errno=0 [ 285.068179][ T29] audit: type=1804 audit(1719112240.055:45): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2458593245/syzkaller.i60zNF/29/file0/bus" dev="loop0" ino=4098 res=1 errno=0 [ 285.218185][ T29] audit: type=1804 audit(1719112240.185:46): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2458593245/syzkaller.i60zNF/29/file0/bus" dev="loop0" ino=4098 res=1 errno=0 [ 285.288210][ T6573] syz-executor.0 (6573) used greatest stack depth: 12432 bytes left [ 285.426917][ T5315] bcachefs (loop0): shutting down [ 285.465104][ T5315] bcachefs (loop0): going read-only [ 285.489612][ T5315] bcachefs (loop0): finished waiting for writes to stop [ 285.592876][ T5315] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14 [ 285.699430][ T5315] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 285.748064][ T6633] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 285.792578][ T5315] bcachefs (loop0): shutdown complete, journal seq 18 [ 285.807423][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.827818][ T5315] bcachefs (loop0): marking filesystem clean [ 286.013821][ T5315] bcachefs (loop0): shutdown complete [ 286.176242][ T6644] loop5: detected capacity change from 0 to 4096 [ 286.218122][ T6644] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 286.315002][ T6644] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 286.490602][ T6660] usb usb8: usbfs: process 6660 (syz-executor.3) did not claim interface 0 before use [ 286.655609][ T6656] loop2: detected capacity change from 0 to 32768 [ 286.734871][ T6662] loop4: detected capacity change from 0 to 512 [ 286.839717][ T6662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.931562][ T6656] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 286.934792][ T6662] ext4 filesystem being mounted at /root/syzkaller-testdir827633712/syzkaller.yD2ubR/34/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.945420][ T6656] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 287.008761][ T51] ntfs3: loop5: ino=5, ntfs3_write_inode failed, -22. [ 287.063259][ T6682] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 287.105458][ T6656] bcachefs (loop2): alloc_read... done [ 287.110229][ T6662] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 287.111844][ T6656] bcachefs (loop2): stripes_read... done [ 287.129061][ T6656] bcachefs (loop2): snapshots_read... done [ 287.138131][ T6656] bcachefs (loop2): journal_replay... done [ 287.144077][ T6656] bcachefs (loop2): resume_logged_ops... done [ 287.150252][ T6656] bcachefs (loop2): going read-write [ 287.153323][ T6662] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 287.207554][ T6656] bcachefs (loop2): done starting filesystem [ 287.258704][ T6662] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 287.296643][ T29] audit: type=1326 audit(1719112242.285:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7d07d0a9 code=0x7ffc0000 [ 287.359702][ T6662] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 287.428794][ T29] audit: type=1326 audit(1719112242.305:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7d07d0a9 code=0x7ffc0000 [ 287.544912][ T6694] loop1: detected capacity change from 0 to 64 [ 287.582741][ T29] audit: type=1326 audit(1719112242.315:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a7d07d0a9 code=0x7ffc0000 [ 287.675358][ T29] audit: type=1326 audit(1719112242.315:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7d07d0a9 code=0x7ffc0000 [ 287.704453][ T29] audit: type=1326 audit(1719112242.315:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a7d07d0a9 code=0x7ffc0000 [ 287.717484][ T6694] hfs: unable to parse mount options [ 287.737744][ T29] audit: type=1326 audit(1719112242.315:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7d07d0a9 code=0x7ffc0000 [ 287.825293][ T5474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.857090][ T5771] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 288.084213][ T5796] bcachefs (loop2): shutting down [ 288.121146][ T5796] bcachefs (loop2): going read-only [ 288.148139][ T5796] bcachefs (loop2): finished waiting for writes to stop [ 288.208202][ T5796] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 288.300580][ T5796] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 288.424626][ T5796] bcachefs (loop2): shutdown complete, journal seq 16 [ 288.482676][ T5796] bcachefs (loop2): marking filesystem clean [ 288.700640][ T5796] bcachefs (loop2): shutdown complete [ 289.161681][ T6720] loop5: detected capacity change from 0 to 4096 [ 289.272956][ T6725] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 289.440853][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 289.631201][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 289.650936][ T6720] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 289.700601][ T25] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 289.792025][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.963259][ T25] usb 2-1: New USB device found, idVendor=1199, idProduct=9008, bcdDevice=21.26 [ 290.082753][ T6720] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 290.347900][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.357392][ T25] usb 2-1: Product: syz [ 290.361668][ T25] usb 2-1: Manufacturer: syz [ 290.366277][ T25] usb 2-1: SerialNumber: syz [ 290.379552][ T25] usb 2-1: config 0 descriptor?? [ 290.466272][ T1097] ntfs3: loop5: ino=5, ntfs3_write_inode failed, -22. [ 290.654265][ T5648] usb 2-1: USB disconnect, device number 2 [ 290.935340][ T6740] loop0: detected capacity change from 0 to 256 [ 290.994768][ T6740] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.079584][ T6740] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 293.029899][ T6747] loop1: detected capacity change from 0 to 32768 [ 293.044476][ T6764] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 293.056492][ T6764] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 293.083756][ T6747] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 293.092811][ T6764] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 293.147195][ T6764] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 293.159144][ T6764] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 293.205784][ T6764] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.206804][ T6770] loop2: detected capacity change from 0 to 8 [ 293.224970][ T6766] loop4: detected capacity change from 0 to 512 [ 293.242418][ T6770] SQUASHFS error: lzo decompression failed, data probably corrupt [ 293.260144][ T6770] SQUASHFS error: Failed to read block 0x91: -5 [ 293.303310][ T6770] SQUASHFS error: Unable to read metadata cache entry [8f] [ 293.310620][ T6770] SQUASHFS error: Unable to read inode 0x11f [ 293.355194][ T6766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.400970][ T6766] ext4 filesystem being mounted at /root/syzkaller-testdir827633712/syzkaller.yD2ubR/37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.583872][ T6747] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 293.633625][ T6766] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 18: invalid block bitmap [ 293.653539][ T6747] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 293.694255][ T6756] loop0: detected capacity change from 0 to 32768 [ 293.723505][ T6756] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6756) [ 293.753201][ T5197] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 293.775282][ T5474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.807030][ T6747] bcachefs (loop1): alloc_read... done [ 293.814746][ T6784] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 293.827716][ T6747] bcachefs (loop1): stripes_read... done [ 293.834541][ T6756] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 293.834661][ T6756] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 293.834694][ T6756] BTRFS info (device loop0): using free-space-tree [ 293.861834][ T6747] bcachefs (loop1): snapshots_read... done [ 293.872262][ T6747] bcachefs (loop1): journal_replay... done [ 293.878153][ T6747] bcachefs (loop1): resume_logged_ops... done [ 293.885088][ T6747] bcachefs (loop1): going read-write [ 293.948972][ T6747] bcachefs (loop1): done starting filesystem [ 294.020419][ T5197] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 294.075908][ T5197] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 294.097760][ T5197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.138563][ T6747] bcachefs (loop1): inode 1073741824 i_blocks underflow: 0 + -8 < 0 (ondisk 0) [ 294.164217][ T5140] bcachefs (loop1): unable to write journal to sufficient devices [ 294.164590][ T6747] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 8 [ 294.182452][ T5195] bcachefs (loop1): going read-only [ 294.201877][ T5197] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 294.208973][ T5195] bcachefs (loop1): finished waiting for writes to stop [ 294.216391][ T5197] usb 3-1: No valid video chain found. [ 294.249513][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 294.249531][ T29] audit: type=1800 audit(1719112249.235:74): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=263 res=0 errno=0 [ 294.311910][ T5195] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 294.329791][ T5195] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 294.373412][ T5195] bcachefs (loop1): unshutdown complete, journal seq 8 [ 294.393718][ T5195] bcachefs (loop1): done going read-only, filesystem not clean [ 294.439089][ T5197] usb 3-1: USB disconnect, device number 3 [ 294.478057][ T5791] bcachefs (loop1): shutting down [ 294.569179][ T5791] bcachefs (loop1): shutdown complete [ 294.714932][ T5315] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 295.041017][ T57] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 295.262999][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 295.301821][ T57] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 295.326967][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 295.384916][ T57] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 295.405620][ T57] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 295.445361][ T57] usb 4-1: Product: syz [ 295.449550][ T57] usb 4-1: Manufacturer: syz [ 295.520176][ T57] usb 4-1: SerialNumber: syz [ 295.550137][ T57] usb 4-1: config 0 descriptor?? [ 295.598925][ T57] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 295.679039][ T57] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 295.871989][ T5648] usb 4-1: USB disconnect, device number 5 [ 295.948027][ T5648] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 296.194823][ T6833] loop5: detected capacity change from 0 to 1024 [ 296.304924][ T6835] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 296.444471][ T6833] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 296.485004][ T6833] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 296.551088][ T6845] loop0: detected capacity change from 0 to 512 [ 296.643567][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.691783][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 296.714954][ T6844] loop1: detected capacity change from 0 to 4096 [ 296.776017][ T6845] ext4 filesystem being mounted at /root/syzkaller-testdir2458593245/syzkaller.i60zNF/41/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.918732][ T6845] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 296.952382][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.974001][ T6845] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 297.017336][ T6845] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 297.038006][ T6845] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 297.063860][ T6855] block nbd2: shutting down sockets [ 297.132636][ T29] audit: type=1326 audit(1719112252.115:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204c7d0a9 code=0x7ffc0000 [ 297.218892][ T29] audit: type=1326 audit(1719112252.125:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3204c7d0a9 code=0x7ffc0000 [ 297.319746][ T29] audit: type=1326 audit(1719112252.125:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204c7d0a9 code=0x7ffc0000 [ 297.387936][ T5315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.418547][ T29] audit: type=1800 audit(1719112252.145:78): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 297.467066][ T29] audit: type=1326 audit(1719112252.155:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3204c7d0a9 code=0x7ffc0000 [ 297.560104][ T29] audit: type=1326 audit(1719112252.155:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204c7d0a9 code=0x7ffc0000 [ 297.652145][ T29] audit: type=1326 audit(1719112252.165:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3204c7a827 code=0x7ffc0000 [ 297.720750][ T29] audit: type=1326 audit(1719112252.165:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3204c404e9 code=0x7ffc0000 [ 297.751786][ T6868] loop0: detected capacity change from 0 to 512 [ 297.777417][ T29] audit: type=1326 audit(1719112252.165:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3204c7a827 code=0x7ffc0000 [ 297.885096][ T6868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.916440][ T6868] ext4 filesystem being mounted at /root/syzkaller-testdir2458593245/syzkaller.i60zNF/42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.190008][ T6861] loop5: detected capacity change from 0 to 32768 [ 298.224649][ T6861] bcachefs (/dev/loop5): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 298.357421][ T6885] input: syz1 as /devices/virtual/input/input7 [ 298.555226][ T6861] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 298.566999][ T6861] bcachefs (loop5): recovering from clean shutdown, journal seq 7 [ 298.736104][ T5315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.908767][ T6899] loop2: detected capacity change from 0 to 32768 [ 298.913186][ T6861] bcachefs (loop5): alloc_read... done [ 298.966870][ T6861] bcachefs (loop5): stripes_read... done [ 298.990749][ T6861] bcachefs (loop5): snapshots_read... done [ 299.017297][ T6861] bcachefs (loop5): journal_replay... done [ 299.033528][ T6861] bcachefs (loop5): resume_logged_ops... done [ 299.050327][ T6861] bcachefs (loop5): going read-write [ 299.109890][ T6899] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 299.123886][ T6899] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 299.144538][ T6861] bcachefs (loop5): done starting filesystem [ 299.195233][ T6899] bcachefs (loop2): alloc_read... done [ 299.200832][ T6899] bcachefs (loop2): stripes_read... done [ 299.206519][ T6899] bcachefs (loop2): snapshots_read... done [ 299.215844][ T6899] bcachefs (loop2): journal_replay... done [ 299.221774][ T6899] bcachefs (loop2): resume_logged_ops... done [ 299.227943][ T6899] bcachefs (loop2): going read-write [ 299.253767][ T6899] bcachefs (loop2): done starting filesystem [ 299.286960][ T6861] bcachefs (loop5): dirent to missing inode: [ 299.286960][ T6861] u64s 7 type dirent 4096:8276054212886994144:U32_MAX len 0 ver 0: file1 -> 1073741824 type reg [ 299.391407][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 299.391428][ T29] audit: type=1804 audit(1719112254.375:146): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1550393673/syzkaller.Bjcc1N/24/file0/bus" dev="loop2" ino=4098 res=1 errno=0 [ 299.432147][ T5648] bcachefs (loop5): going read-only [ 299.437376][ T5648] bcachefs (loop5): finished waiting for writes to stop [ 299.444624][ T6861] bcachefs (loop5): inconsistency detected - emergency read only at journal seq 7 [ 299.521091][ T5648] bcachefs (loop5): flushing journal and stopping allocators, journal seq 7 [ 299.549013][ T29] audit: type=1804 audit(1719112254.485:147): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1550393673/syzkaller.Bjcc1N/24/file0/bus" dev="loop2" ino=4098 res=1 errno=0 [ 299.578359][ T29] audit: type=1804 audit(1719112254.485:148): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1550393673/syzkaller.Bjcc1N/24/file0/bus" dev="loop2" ino=4098 res=1 errno=0 [ 299.610961][ T5648] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 7 [ 299.647283][ T29] audit: type=1804 audit(1719112254.535:149): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1550393673/syzkaller.Bjcc1N/24/file0/bus" dev="loop2" ino=4098 res=1 errno=0 [ 299.681226][ T5142] bcachefs (loop5): shutting down [ 299.687093][ T5648] bcachefs (loop5): unshutdown complete, journal seq 7 [ 299.737379][ T5796] bcachefs (loop2): shutting down [ 299.737405][ T5648] bcachefs (loop5): done going read-only, filesystem not clean [ 299.744163][ T5796] bcachefs (loop2): going read-only [ 299.758025][ T5796] bcachefs (loop2): finished waiting for writes to stop [ 299.785559][ T5796] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 299.900239][ T5796] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 299.913458][ T5142] bcachefs (loop5): shutdown complete [ 299.920195][ T5796] bcachefs (loop2): shutdown complete, journal seq 16 [ 299.941186][ T5796] bcachefs (loop2): marking filesystem clean [ 300.009405][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.056162][ T5796] bcachefs (loop2): shutdown complete [ 300.376901][ T6938] loop1: detected capacity change from 0 to 1024 [ 300.492298][ T6938] hfsplus: bad catalog entry type [ 300.548962][ T6942] loop3: detected capacity change from 0 to 128 [ 300.597692][ T5766] hfsplus: b-tree write err: -5, ino 4 [ 300.870944][ T5648] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 301.860599][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.910953][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 301.937757][ T5648] usb 5-1: Using ep0 maxpacket: 8 [ 301.964881][ T5648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 301.997879][ T5648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.017929][ T5648] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.043070][ T5648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1536, setting to 1024 [ 302.065293][ T5648] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 302.090267][ T5648] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 302.122215][ T5648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.161742][ T5648] usb 5-1: config 0 descriptor?? [ 302.180161][ T6944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.446800][ T5140] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 302.450565][ T5210] usb 5-1: USB disconnect, device number 2 [ 302.607507][ T29] audit: type=1800 audit(1719112257.595:150): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="overlay" ino=1971 res=0 errno=0 [ 302.629300][ T6976] evm: overlay not supported [ 302.729288][ T29] audit: type=1804 audit(1719112257.695:151): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3689671989/syzkaller.qAvaOx/126/bus/bus" dev="overlay" ino=1971 res=1 errno=0 [ 302.918001][ T6988] loop1: detected capacity change from 0 to 128 [ 305.219380][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.410091][ T7002] loop3: detected capacity change from 0 to 8 [ 305.520946][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.722689][ T7002] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 306.079982][ T29] audit: type=1326 audit(1719112261.055:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 306.180830][ T29] audit: type=1326 audit(1719112261.065:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 306.239413][ T29] audit: type=1326 audit(1719112261.095:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 306.290277][ T29] audit: type=1326 audit(1719112261.095:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 306.363036][ T29] audit: type=1326 audit(1719112261.095:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 306.438943][ T29] audit: type=1326 audit(1719112261.105:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 306.470821][ T1769] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 306.518264][ T29] audit: type=1326 audit(1719112261.105:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 306.600940][ T29] audit: type=1326 audit(1719112261.105:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2d7e7a827 code=0x7ffc0000 [ 306.636066][ T5195] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 306.664776][ T1769] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 306.671317][ T29] audit: type=1326 audit(1719112261.105:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2d7e404e9 code=0x7ffc0000 [ 306.682695][ T1769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.750997][ T1769] usb 5-1: config 0 descriptor?? [ 306.762333][ T29] audit: type=1326 audit(1719112261.105:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2d7e7a827 code=0x7ffc0000 [ 306.841123][ T5195] usb 2-1: Using ep0 maxpacket: 8 [ 306.868969][ T5195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 306.889299][ T5195] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 306.898565][ T5195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.918823][ T5195] usb 2-1: config 0 descriptor?? [ 306.936822][ T5195] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 306.962216][ T7040] block nbd3: shutting down sockets [ 307.197842][ T7029] loop1: detected capacity change from 0 to 164 [ 307.209772][ T1769] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 307.255166][ T7029] Unable to read rock-ridge attributes [ 307.305558][ T5648] usb 2-1: USB disconnect, device number 3 [ 307.402391][ T7052] loop5: detected capacity change from 0 to 8 [ 307.430292][ T7052] SQUASHFS error: lzo decompression failed, data probably corrupt [ 307.449617][ T7052] SQUASHFS error: Failed to read block 0x91: -5 [ 307.477130][ T7052] SQUASHFS error: Unable to read metadata cache entry [8f] [ 307.500871][ T7052] SQUASHFS error: Unable to read inode 0x11f [ 307.610039][ T7060] loop2: detected capacity change from 0 to 16 [ 307.617450][ T1769] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 307.628748][ T7060] erofs: (device loop2): mounted with root inode @ nid 36. [ 307.639209][ T1769] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 307.832661][ T57] usb 5-1: USB disconnect, device number 3 [ 307.869528][ T5195] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 308.062348][ T5195] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 308.120291][ T5195] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 308.140539][ T5195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.178398][ T5195] usb 6-1: Found UVC 0.00 device (046d:08c1) [ 308.193249][ T5195] usb 6-1: No valid video chain found. [ 308.200605][ T7075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.431066][ T5195] usb 6-1: USB disconnect, device number 3 [ 308.531056][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 308.531281][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 310.122887][ T7106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 310.575139][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 310.586066][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.404177][ T7118] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 311.470841][ T7118] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.568903][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 311.568922][ T29] audit: type=1326 audit(1719112266.555:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca72c7d0a9 code=0x0 [ 311.922099][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.972758][ T53] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 311.982279][ T53] Bluetooth: hci6: Injecting HCI hardware error event [ 311.991216][ T53] Bluetooth: hci6: hardware error 0x00 [ 312.025901][ T7137] input: syz1 as /devices/virtual/input/input8 [ 312.094794][ T7102] loop3: detected capacity change from 0 to 32768 [ 312.146579][ T7102] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 312.264111][ T7102] XFS (loop3): Ending clean mount [ 312.312248][ T7154] loop0: detected capacity change from 0 to 64 [ 312.358416][ T7154] MINIX-fs: bad superblock [ 312.519747][ T7166] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 312.603019][ T7166] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 312.630234][ T7170] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 314.068404][ T5140] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 314.078475][ T5140] Bluetooth: hci0: Injecting HCI hardware error event [ 314.095395][ T5140] Bluetooth: hci0: hardware error 0x00 [ 314.132751][ T53] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 315.013200][ T7178] binder: 7175:7178 ioctl 4018620d 0 returned -22 [ 315.246131][ T7184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.263745][ T5132] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 315.279281][ T7166] loop2: detected capacity change from 0 to 2048 [ 315.410240][ T7166] loop2: p2 < > [ 315.532508][ T29] audit: type=1326 audit(1719112270.525:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 315.650127][ T29] audit: type=1326 audit(1719112270.525:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 315.757576][ T29] audit: type=1326 audit(1719112270.545:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 315.841224][ T29] audit: type=1326 audit(1719112270.545:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 315.865854][ T7195] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 315.933312][ T29] audit: type=1326 audit(1719112270.565:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 316.040449][ T29] audit: type=1326 audit(1719112270.575:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 316.060515][ T7201] fscrypt (sda1, inode 1967): Unsupported log2_data_unit_size in encryption policy: 133 [ 316.194722][ T29] audit: type=1326 audit(1719112270.585:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 316.286647][ T29] audit: type=1326 audit(1719112270.585:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 316.342161][ T7207] loop3: detected capacity change from 0 to 256 [ 316.630994][ T29] audit: type=1326 audit(1719112270.585:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 316.907296][ T5140] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 316.917009][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.923499][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.367318][ T29] audit: type=1326 audit(1719112270.595:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 317.440787][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.498949][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.533516][ T29] audit: type=1326 audit(1719112270.605:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 317.635905][ T29] audit: type=1326 audit(1719112270.635:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 317.706281][ T29] audit: type=1326 audit(1719112270.635:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 317.822411][ T29] audit: type=1326 audit(1719112270.635:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 317.857394][ T7228] tmpfs: Bad value for 'mpol' [ 318.054699][ T29] audit: type=1326 audit(1719112270.635:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 318.080231][ T29] audit: type=1326 audit(1719112270.635:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 318.128288][ T29] audit: type=1326 audit(1719112270.635:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 319.616718][ T29] audit: type=1326 audit(1719112270.635:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410887d0a9 code=0x7ffc0000 [ 320.091987][ T7237] loop4: detected capacity change from 0 to 4096 [ 320.130182][ T7237] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 320.188911][ T7237] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 320.440806][ T5197] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 320.600424][ T1097] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 320.674763][ T5197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.710764][ T5197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.745215][ T5197] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 320.796747][ T5197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.860006][ T5197] usb 6-1: config 0 descriptor?? [ 320.946729][ T7256] loop2: detected capacity change from 0 to 256 [ 321.405651][ T5197] corsair 0003:1B1C:1B3E.0001: failed to start in urb: -90 [ 321.428774][ T5197] corsair 0003:1B1C:1B3E.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 322.032587][ T5197] usb 6-1: USB disconnect, device number 4 [ 322.394513][ T7267] mmap: syz-executor.0 (7267) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 322.489607][ T7265] loop3: detected capacity change from 0 to 40427 [ 322.511395][ T7265] F2FS-fs (loop3): Unrecognized mount option "00000000000000000337" or missing value [ 322.630214][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.701058][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.996461][ T7274] loop4: detected capacity change from 0 to 2048 [ 323.041811][ T7274] loop4: p2 < > [ 323.081877][ T7282] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 324.043833][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 325.162597][ T7314] syz-executor.2[7314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.162733][ T7314] syz-executor.2[7314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.241381][ T7315] syz-executor.2[7315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.290971][ T7315] syz-executor.2[7315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.385161][ T7319] loop5: detected capacity change from 0 to 1024 [ 325.428627][ T7319] EXT4-fs: Ignoring removed orlov option [ 325.471746][ T7319] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 325.505690][ T7319] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 325.546339][ T7319] EXT4-fs (loop5): invalid journal inode [ 325.600084][ T7319] EXT4-fs (loop5): can't get journal size [ 325.647545][ T7328] loop2: detected capacity change from 0 to 64 [ 325.701159][ T7319] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz-executor.5: blocks 3-3 from inode overlap system zone [ 327.255427][ T7331] loop4: detected capacity change from 0 to 128 [ 327.268449][ T7319] EXT4-fs (loop5): failed to initialize system zone (-117) [ 327.278884][ T7328] MINIX-fs: bad superblock [ 327.292559][ T7319] EXT4-fs (loop5): mount failed [ 327.433618][ T7335] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 327.485494][ T7331] Process accounting resumed [ 327.526521][ T7331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 545) [ 327.557342][ T7338] loop0: detected capacity change from 0 to 256 [ 327.585616][ T7338] FAT-fs (loop0): Unrecognized mount option "iochar" or missing value [ 327.594019][ T7331] FAT-fs (loop4): Filesystem has been set read-only [ 327.643023][ T7331] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 327.672116][ T7340] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 327.708031][ T7340] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 327.721349][ T7340] debugfs: Directory 'netdev:' with parent 'phy13' already present! [ 328.014691][ T7353] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.469099][ T7371] loop5: detected capacity change from 0 to 128 [ 328.570577][ T7373] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 328.989301][ T7368] loop2: detected capacity change from 0 to 65536 [ 329.251388][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 329.290467][ T7381] loop0: detected capacity change from 0 to 1024 [ 329.298403][ T7381] EXT4-fs: Ignoring removed orlov option [ 329.315997][ T7368] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 329.340348][ T7381] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 329.370467][ T7381] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 329.783265][ T7381] EXT4-fs (loop0): invalid journal inode [ 329.788994][ T7381] EXT4-fs (loop0): can't get journal size [ 329.835792][ T7368] XFS (loop2): Ending clean mount [ 329.907952][ T7368] XFS (loop2): Quotacheck needed: Please wait. [ 329.932510][ T7381] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz-executor.0: blocks 3-3 from inode overlap system zone [ 329.948386][ T7390] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.5'. [ 329.958451][ T7390] netlink: 51700 bytes leftover after parsing attributes in process `syz-executor.5'. [ 329.978974][ T7381] EXT4-fs (loop0): failed to initialize system zone (-117) [ 330.007512][ T7381] EXT4-fs (loop0): mount failed [ 330.020254][ T7392] loop3: detected capacity change from 0 to 256 [ 330.072455][ T7392] FAT-fs (loop3): Unrecognized mount option "iochar" or missing value [ 330.102942][ T7368] XFS (loop2): Quotacheck: Done. [ 330.307954][ T5796] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 330.413751][ T7395] loop5: detected capacity change from 0 to 1024 [ 330.446144][ T7395] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 330.459563][ T7397] loop0: detected capacity change from 0 to 128 [ 330.500795][ T7395] EXT4-fs (loop5): group descriptors corrupted! [ 330.547059][ T7397] Process accounting resumed [ 330.563098][ T7397] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 545) [ 330.620005][ T7397] FAT-fs (loop0): Filesystem has been set read-only [ 330.651127][ T7397] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 331.034882][ T7404] loop3: detected capacity change from 0 to 4096 [ 331.063024][ T7404] ntfs3: Unknown parameter 'sys_imset' [ 331.298752][ T7404] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 331.310145][ T7412] loop5: detected capacity change from 0 to 128 [ 331.355345][ T7414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.652802][ T7421] input: syz1 as /devices/virtual/input/input9 [ 331.750659][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 331.781388][ T29] audit: type=1326 audit(1719112286.735:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 331.797455][ T7430] loop4: detected capacity change from 0 to 8 [ 331.856939][ T29] audit: type=1326 audit(1719112286.745:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 331.993982][ T29] audit: type=1326 audit(1719112286.745:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 332.135098][ T29] audit: type=1326 audit(1719112286.755:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 332.267700][ T29] audit: type=1326 audit(1719112286.755:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 332.319559][ T7439] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 332.350572][ T7430] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 332.405229][ T29] audit: type=1326 audit(1719112286.765:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 332.415712][ T7441] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 332.551600][ T29] audit: type=1326 audit(1719112286.795:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 332.598553][ T7441] debugfs: Directory 'netdev:' with parent 'phy15' already present! [ 332.726349][ T29] audit: type=1326 audit(1719112286.795:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 332.836007][ T29] audit: type=1326 audit(1719112286.795:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 332.868398][ T29] audit: type=1326 audit(1719112286.795:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe2d7e7d0a9 code=0x7ffc0000 [ 333.121468][ T7445] loop4: detected capacity change from 0 to 512 [ 333.166551][ T7445] EXT4-fs: Ignoring removed i_version option [ 333.194954][ T7445] EXT4-fs error (device loop4): __ext4_iget:4906: inode #11: block 1: comm syz-executor.4: invalid block [ 333.222988][ T7450] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 333.236013][ T7445] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 333.294506][ T7445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.313808][ T7456] loop5: detected capacity change from 0 to 2048 [ 334.456330][ T7456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 334.552723][ T5474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.022955][ T7456] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 335.179409][ T7456] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 335.236611][ T7471] loop4: detected capacity change from 0 to 128 [ 335.425638][ T7456] System zones: 0-19 [ 335.518354][ T7456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.666620][ T7468] loop3: detected capacity change from 0 to 4096 [ 335.930808][ T7468] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 336.343931][ T7473] loop0: detected capacity change from 0 to 1024 [ 336.538788][ T7468] ntfs3: loop3: failed to convert "c46c" to iso8859-14 [ 336.582704][ T5142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.813987][ T7473] EXT4-fs: Ignoring removed orlov option [ 336.831904][ T7473] ext4: Unknown parameter 'uid>00000000000000000000' [ 336.985795][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 336.985816][ T29] audit: type=1800 audit(1719112291.975:347): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="overlay" ino=1967 res=0 errno=0 [ 337.038186][ T29] audit: type=1804 audit(1719112292.025:348): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir827633712/syzkaller.yD2ubR/79/bus/bus" dev="overlay" ino=1967 res=1 errno=0 [ 337.195680][ T7491] loop5: detected capacity change from 0 to 512 [ 337.297673][ T7491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.355643][ T7491] ext4 filesystem being mounted at /root/syzkaller-testdir2406745786/syzkaller.2FnZpF/144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.400761][ T7502] loop4: detected capacity change from 0 to 2048 [ 337.482915][ T7502] loop4: p1 < > p3 [ 337.522995][ T7502] loop4: p3 size 134217728 extends beyond EOD, truncated [ 337.536961][ T29] audit: type=1800 audit(1719112292.525:349): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 337.695786][ T5142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.085156][ T7509] loop5: detected capacity change from 0 to 1024 [ 338.193130][ T7509] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 338.242124][ T7509] EXT4-fs (loop5): group descriptors corrupted! [ 338.247796][ T7515] ptrace attach of "/root/syz-executor.3 exec"[5132] was attempted by " [ 338.494015][ T7527] syz-executor.3[7527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.636139][ T7527] syz-executor.3[7527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.662962][ T7525] loop4: detected capacity change from 0 to 512 [ 338.774664][ T7531] sp0: Synchronizing with TNC [ 338.843208][ T7527] syz-executor.3[7527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.843345][ T7527] syz-executor.3[7527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.962327][ T7536] loop2: detected capacity change from 0 to 512 [ 342.493981][ T7525] EXT4-fs: error -4 creating inode table initialization thread [ 342.531359][ T7525] EXT4-fs (loop4): mount failed [ 342.770879][ T7549] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.780839][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 344.181334][ T7574] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.617191][ T7585] syz-executor.3[7585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.617376][ T7585] syz-executor.3[7585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.702304][ T7585] syz-executor.3[7585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.748379][ T7585] syz-executor.3[7585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.920458][ T7596] loop1: detected capacity change from 0 to 1024 [ 346.007281][ T7601] loop5: detected capacity change from 0 to 512 [ 346.034501][ T7602] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 346.322376][ T7601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.352377][ T7601] ext4 filesystem being mounted at /root/syzkaller-testdir2406745786/syzkaller.2FnZpF/148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.786053][ T7625] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 347.932308][ T7617] EXT4-fs error (device loop5): ext4_search_dir:1548: inode #2: block 3: comm syz-executor.5: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 348.101691][ T7623] loop0: detected capacity change from 0 to 1024 [ 348.139683][ T7623] EXT4-fs: Ignoring removed orlov option [ 348.158252][ T7623] ext4: Unknown parameter 'uid>00000000000000000000' [ 348.348401][ T7631] loop4: detected capacity change from 0 to 1024 [ 348.581145][ T1108] hfsplus: b-tree write err: -5, ino 4 [ 348.672866][ T5142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.238368][ T7648] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 349.281929][ T7649] loop4: detected capacity change from 0 to 512 [ 349.297544][ T7648] netlink: 'syz-executor.5': attribute type 20 has an invalid length. [ 349.346274][ T7648] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.438391][ T7649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.519099][ T7649] ext4 filesystem being mounted at /root/syzkaller-testdir827633712/syzkaller.yD2ubR/90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.692715][ T7659] loop5: detected capacity change from 0 to 8 [ 349.711561][ T7658] loop1: detected capacity change from 0 to 1024 [ 349.801608][ T7658] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 352.204633][ T7658] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 352.295647][ T7658] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 352.527655][ T5474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.542840][ T7658] EXT4-fs error (device loop1): ext4_get_journal_inode:5752: inode #5: comm syz-executor.1: unexpected bad inode w/o EXT4_IGET_BAD [ 352.624838][ T7658] EXT4-fs (loop1): no journal found [ 352.631563][ T7658] EXT4-fs (loop1): can't get journal size [ 352.646357][ T7658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.729708][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.780653][ T7678] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 353.997284][ T7677] loop4: detected capacity change from 0 to 1024 [ 354.185151][ T35] hfsplus: b-tree write err: -5, ino 4 [ 354.208796][ T7685] loop0: detected capacity change from 0 to 1024 [ 354.224914][ T7682] loop5: detected capacity change from 0 to 512 [ 354.295256][ T7685] EXT4-fs: Ignoring removed orlov option [ 354.304541][ T7685] ext4: Unknown parameter 'uid>00000000000000000000' [ 354.368465][ T7682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.383075][ T7682] ext4 filesystem being mounted at /root/syzkaller-testdir2406745786/syzkaller.2FnZpF/152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.661430][ T7704] EXT4-fs error (device loop5): ext4_search_dir:1548: inode #2: block 3: comm syz-executor.5: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 355.950472][ T7717] loop3: detected capacity change from 0 to 764 [ 356.024551][ T7717] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 462.680675][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 462.687641][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7700/1:b..l [ 462.696130][ C1] rcu: (detected by 1, t=10502 jiffies, g=26033, q=286 ncpus=2) [ 462.703836][ C1] task:syz-executor.1 state:R running task stack:24112 pid:7700 tgid:7699 ppid:5791 flags:0x00004002 [ 462.716352][ C1] Call Trace: [ 462.720234][ C1] [ 462.723174][ C1] __schedule+0x17e8/0x4a20 [ 462.727724][ C1] ? __pfx___schedule+0x10/0x10 [ 462.732577][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.738201][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 462.744189][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 462.749224][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 462.754506][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 462.759607][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 462.765336][ C1] irqentry_exit+0x5e/0x90 [ 462.769750][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.775747][ C1] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 462.781473][ C1] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 462.801072][ C1] RSP: 0018:ffffc9000cddf0a0 EFLAGS: 00000206 [ 462.807132][ C1] RAX: 14d293e96e6d0000 RBX: 0000000000000000 RCX: 0000000080000000 [ 462.815112][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1feb80 [ 462.823076][ C1] RBP: 0000000000000002 R08: ffffffff92fa7587 R09: 1ffffffff25f4eb0 [ 462.831038][ C1] R10: dffffc0000000000 R11: fffffbfff25f4eb1 R12: 0000000000000246 [ 462.838998][ C1] R13: ffff888065dabc00 R14: 00000000ffffffff R15: ffffffff8e362018 [ 462.846980][ C1] mem_cgroup_from_task+0x77/0x120 [ 462.852085][ C1] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 462.857534][ C1] get_mem_cgroup_from_mm+0xd7/0x2a0 [ 462.862815][ C1] __mem_cgroup_charge+0x16/0x80 [ 462.867752][ C1] shmem_alloc_and_add_folio+0x394/0xdb0 [ 462.873391][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 462.879629][ C1] ? filemap_map_pages+0x24f/0x1e70 [ 462.884834][ C1] ? __pfx_lock_release+0x10/0x10 [ 462.889857][ C1] shmem_get_folio_gfp+0x82d/0x1f50 [ 462.895058][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.900705][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 462.905918][ C1] ? filemap_map_pages+0x18e0/0x1e70 [ 462.911227][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 462.916862][ C1] shmem_fault+0x252/0x6f0 [ 462.921282][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 462.926225][ C1] ? __pfx_lock_release+0x10/0x10 [ 462.931245][ C1] ? pte_offset_map_nolock+0x137/0x1f0 [ 462.936700][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 462.941720][ C1] __do_fault+0x137/0x460 [ 462.946040][ C1] ? handle_pte_fault+0x222c/0x7090 [ 462.951239][ C1] handle_pte_fault+0x3d15/0x7090 [ 462.956266][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.961893][ C1] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 462.967614][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 462.972631][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 462.977995][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.983617][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 462.988642][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.994275][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.999909][ C1] ? follow_page_pte+0x292/0x1d90 [ 463.004929][ C1] ? follow_page_pte+0x859/0x1d90 [ 463.009945][ C1] ? __pfx_lock_release+0x10/0x10 [ 463.014984][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.020622][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 463.025839][ C1] handle_mm_fault+0x10df/0x1ba0 [ 463.030806][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 463.036094][ C1] ? irqentry_exit+0x63/0x90 [ 463.040702][ C1] ? __get_user_pages+0x792/0x1590 [ 463.045823][ C1] ? __sanitizer_cov_trace_switch+0x10a/0x120 [ 463.051886][ C1] __get_user_pages+0x6ef/0x1590 [ 463.056862][ C1] ? mt_find+0x62d/0x850 [ 463.061212][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 463.066602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.072237][ C1] populate_vma_page_range+0x264/0x330 [ 463.077787][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 463.083769][ C1] ? userfaultfd_unmap_complete+0x30c/0x360 [ 463.089661][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.095283][ C1] ? do_mmap+0x915/0xfa0 [ 463.099550][ C1] __mm_populate+0x27a/0x460 [ 463.104168][ C1] ? __pfx___mm_populate+0x10/0x10 [ 463.109289][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.114921][ C1] vm_mmap_pgoff+0x2c3/0x3d0 [ 463.119525][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 463.124630][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.130954][ C1] ? do_syscall_64+0x100/0x230 [ 463.135716][ C1] ? ksys_mmap_pgoff+0xdf/0x720 [ 463.140566][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.146186][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 463.150961][ C1] do_syscall_64+0xf3/0x230 [ 463.155463][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.161091][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.166997][ C1] RIP: 0033:0x7fe2d7e7d0a9 [ 463.171403][ C1] RSP: 002b:00007fe2d8c270c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 463.179806][ C1] RAX: ffffffffffffffda RBX: 00007fe2d7fb3f80 RCX: 00007fe2d7e7d0a9 [ 463.187769][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 463.195730][ C1] RBP: 00007fe2d7eec074 R08: ffffffffffffffff R09: 0000000000000000 [ 463.203700][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 463.211675][ C1] R13: 000000000000000b R14: 00007fe2d7fb3f80 R15: 00007ffff997ec38 [ 463.219663][ C1] [ 463.222671][ C1] rcu: rcu_preempt kthread starved for 10360 jiffies! g26033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 463.233852][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 463.243804][ C1] rcu: RCU grace-period kthread stack dump: [ 463.249673][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 463.261404][ C1] Call Trace: [ 463.264667][ C1] [ 463.267588][ C1] __schedule+0x17e8/0x4a20 [ 463.272105][ C1] ? __pfx___schedule+0x10/0x10 [ 463.276970][ C1] ? __pfx_lock_release+0x10/0x10 [ 463.282004][ C1] ? __asan_memset+0x23/0x50 [ 463.286591][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 463.292396][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.298715][ C1] ? schedule+0x90/0x320 [ 463.302949][ C1] schedule+0x14b/0x320 [ 463.307103][ C1] schedule_timeout+0x1be/0x310 [ 463.311974][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 463.317366][ C1] ? __pfx_process_timeout+0x10/0x10 [ 463.322667][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.328288][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 463.333835][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 463.338687][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 463.343634][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 463.348826][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 463.354886][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 463.360162][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 463.366061][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.371686][ C1] ? finish_swait+0xd4/0x1e0 [ 463.376270][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 463.380857][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 463.386043][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 463.391941][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.397563][ C1] ? __kthread_parkme+0x169/0x1d0 [ 463.402585][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 463.407786][ C1] kthread+0x2f2/0x390 [ 463.411869][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 463.417059][ C1] ? __pfx_kthread+0x10/0x10 [ 463.421646][ C1] ret_from_fork+0x4d/0x80 [ 463.426057][ C1] ? __pfx_kthread+0x10/0x10 [ 463.430642][ C1] ret_from_fork_asm+0x1a/0x30 [ 463.435434][ C1] [ 463.438448][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 463.444761][ C1] Sending NMI from CPU 1 to CPUs 0: [ 463.449969][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30