last executing test programs: 13.02883548s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)) write$FUSE_ATTR(r1, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x8, 0x6000, 0x0, 0x0, 0x0, 0x1, 0x2}}}, 0x78) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_setup(0x222, 0x0) r2 = socket(0x11, 0x0, 0x0) socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000005c40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000005a40)={@flat, @fda={0x66646185, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11.975659669s ago: executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "28d7b07d54891881fe02c1203fe49607b9f26fdae8161583f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0", 0x3}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x3c, &(0x7f0000000140)={0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x2831cde6, 0x1, 0x4, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3}, 0x48) r3 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1={0xff, 0x0}}}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x34}}, 0x0) 11.28846448s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 10.900405573s ago: executing program 0: syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x18, &(0x7f0000006040)=ANY=[], 0x5, 0x5d7f, &(0x7f0000007300)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)) 10.761773525s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) symlinkat(&(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') lsetxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000e00)=ANY=[], 0x69, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x8) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000840)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000500), 0xfea7) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) 8.469949106s ago: executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1, 0x5b4d, &(0x7f000000b680)="$eJzs3Q2MHNV9APCZ3Tv7zmebMwngmA8fYFxDA5wxKWARcVAFSBMTAolJAsF28Nkc8Qf47BicEBukkIhQaqlVQiMFIZRIVAiRFjXNRyMTlRA1NIqllJq0TYkgUUMr4ohA4mIUV3c3c7c7N29nbnfPMfD7yb65mX37f+//5t3czNu53QgAAIA3hSc/M/zbKxa86wd3Dr6y8/Jvbbwj6qmObu9KC/Qmy1v/UC3kcJrZMX90mR0XuwdmPHnRPe995ssf/epzz89bsvQrN1168JbZK+6+e+DH5x384e9vL4qbjqfTJ9bjF+MoOvFHS75w1/eeOm5kWxxFUTXu3RVF8+LKd+fFmRD9r0ZRtHa8nfUPPvbKsnUjy12fn1m3/ahMEOP9za0rGWef/c7mE3551qXP7PnJJa/0d726ZddEkbirZjxF0dzVtc/vjKKoO/k/Ih1t89MnJ8sroyiaVfO88wvadUrJ9p8ZWF+QLGcky56COOnjJ2fWO0u2oyOz7Cr5vGZVpjl+Kt1/s6e5/uzBLVvPvGT59WR5+hTjV9P/cVSJo47x6jbEE2MkqtlvcRSP7vuJ9UrdWIgzYyOOojizXsmsVzszeY3Wmwy0ahzXb0/LZbb3Jds7ku0nF4y1qwPb35bmm/ygHsjknw3aM+mb8bxGpe36WYO2HA6VmmNQ3va0vV3JzuhJtvXER096zqEc6WMrn7/30ed23L+oN9CO+GtxEj9uKv7TGy/Yt3jHT/fPD8VfXUniV5qKP3zWS4+8cNX3jwvG353GrzYV/9lzF3/x2zu3Hwj2z6/T/uloKn51+RkHl97ZvzLY/gfS+F1NxX/wkoe/NPcdTzwSbH9/2j/dzfXP0LbXrn3omP3B+FEaf1ZT8S9++djTlm9+eH0w/uNp//Q0Ff+p4aEVd924cHtfKP7eNP6cpuKf8vPrrt2zb/DZYPsH0v7pbSr+OxddfOWK/ZvuCR07412H6zcswBvTW5JzrM8l681eZ7aq5nrhvt547JxvdvJ/TrWdNdUbqWfu9IUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E3qwd61g7//5kmvdSTrM5NvTqqOLdPtM6Io7o6iaHjrmi1bhzat77tp87Ytm9Zs6FuztW9w09Ytt/Wd+/a+LYM3b1hz28ij/WcuG3ve0VE8toxPnFT3oUOHDlV667el9X38vL98rO+kff8eRf3H/PikjmD733f7gj+dl/M1Ix44tOEvTrv+hdn/vG1sQ2/Srt5Au6JAuy586MXlv/xW959HUf+xjdr130su+15dg0Y3TMRJVGZGldFvZsazctsx3uqkPWl/dawb2jDYX9y/1UAevzjwdx/cPnzDrrH+7QrmUbJ/uwcO/W7TNx6/4cIdV45tOFL3e1F/p1mk7Uv7ryvp77lJXnMDeXUE8rrrtJP/69/+euOLu6L+jt8snFx3UV6dyQDojN9Wqt60hllxfZ90JeXTPZ4+7+ytG28+e/i2HWcObVyzfnD94KZly5adf+6yc84750/OHk197Gvb8k/r/6OS+R+e8bT5vIGh9GvOeOqYPJ6K2lXUHyPtKu6P2haFfv7e+oHL/uOOv9991diGonGelh4/niTLWSO7eWlUM94m91VeXkX90Bnoh/VX9/zNy32b/6/oOFS7Z2q/ZsQDh34z9C8Xzd5z6vVjGw7Lcb62QU0e58dbnbSns/a4s/TI7d+ZUTXJqye3Xafe+dKH/vWbcd94+2bMiG5ds3XrlqVjXw9TXm+9+lPtzev8xf97y47Vd8yblNc5Y19nJy2dHR+f267s1jSvhaNfq1HSLeki6qrk59cZjbWv9vfC8osmnpft1Z4kZk98dG5eWeljK5+/99Hndty/KNTT8dfGauyO5owt4xMCJTdknlgdTzSv/qLxEUXR6tptaT8+/o2/6tvzg3kbC8fH2MiY9DWb3sChT18w+xfD1+xdMbbh8BxXahrU5HFlvNUT7Rntr9HjyjlHTh5/uP1c94MVDxzac8Lb1y/7x63Jj31R/46XzuvfZVFUdBxYmFlv53Gg9nnZeibK58fry6z3RNWmjhvPnrv4i9/euf1A8Ljx67LHjU/VrVVbPG7EgfG079N/+7tP7nv63e07brx7cfUj/7lwWdKhR8rPW1cyrrsC43q81Ul74tpxfdYNmzesHdt+5J7/JsuC65/09/fwbTs+vmbDhsEtw+XyKntektaT7eVmz0vSn76jC/JK99dEXtP3TZn+KvvzlrZ/bba/mvx5gzw9UdzU77OnN16wb/GOn+7vDcSNV1eS+JWm4g+f9dIjL1z1/eOC8Xen8Tuail9dfsbBpXf2rwzGfyBO4nc1Ff/BSx7+0tx3PPFIMH5/2v7u5s4nhra9du1Dx4T7P0rj9zQV/6nhoRV33bhwezD+3jipZ+TcLooee2XZurH1OOpMjsNpOzrr2hVl1+PMeiWzXq1dr4zNwY9XUI3j+u1puWT7yTVtyXNNFEV7Z07enp49ds0fWx5I16PsN423H2kqNecEeduLzq8B4I0kff0/PddIX/9fmPxCrHn9f2wZz6h7/vzkfGr+xKbR67w7+sZ+kU51Xi9tR3ZeL42/5NT6GM3O6xXNy52SWU/btTDplbQ9Dc4bZkcl5uUm19N4Xi6TfvG8Wd/nMhs6Ruf2QvutM5mpyHmd+a6j6ts7eyRCq+fZ8/NbPX6eHRp32fmO9HX6uOS4y94Xke7f7H0RafwFmQm0Zu+LaHXcpdMaDcbdaGbF86mTx0XUoF8nxkV+tOy4aDCOsuV7x8bR9L4u9fq/3p/e+fc3zXxCtKu+f0rOJxzp1/vp9vT40FFyHmBlYHu75gHSw0Xarp81aMvhYB4AACau/9NzipHr/5Hf1X2Z8/yi65bsVUYaL3gfSzW/PUXXv5PvZ5vV1HnlxS8fe9ryzQ+vD54XP172vpSb69ZmFdyXUtSPizLrhf0YuBWkaN5hcaZ8TzSnqX485efXXbtn3+CzwX4cGDuRKu7H3XVrc1rsxyWZ9cJ+7MxvVVE/ZuspGr+nZ9Z7kjuCptrv71x08ZUr9m+6J9jvu8r2+wN1a70F/e46PRDfdfob4nX/ovnIP9g8QDJvPV3zAFcHtk91HqBn0jfjeY163c0DBH4vAMDrWXr9P36/fHL9/0+Zcq1eHwbP2wbacz9r8Lxt/Ly2tfPyYPvHz8tbuy4Kxh+/LmrtuiXYP+PXLa1ddwXjj193tTZPE+yfx9P+mXzev7NE/PS8P/TnAul5/+v/umh65xlcFyXrUfabMa6LAAA4EqTX/+npanr//xPJevbcePqvc6f7OnS6r6One55huudJXu/XuYd/nqFM/PLzDNM9z2YewDxAMfMAAABvDO9KlteXLN8xeg9xFH3shhvPWbV28BOr1m0ZHBy+ec0Ng6uGNg1tHS/XOXrlNfk+6VB9RfdJ55Wf1aD8qmD8+vZcGigf0mr+ofqK8s8r3yj/1cH49e25LFA+pNX8Q/UV5Z9XvlH+a4Lx69tzeaB8SKv5h+oryj+vfKP8PxaMX9+edwfKh7Saf6i+ovzzyjfK/4Zg/Pr2/FmgfEir+YfqK8o/r3yj/LPvlxnK/z2B8iGt5h+qryj/vPKN8h8Mxq9vz3sD5UNazT9UX1H+eeUb5b8uGL++PSsC5UNazT9UX1H+eeUb5b8+GL++PVcEyoe0mn+ovqL888o3yv/GYPz69rwvUD6k1fxD9RXln1e+Uf5Dwfj17bkyUL5OzcRxq/mH6ivKP698o/xvCsavb8/7A+VDWs0/VF9R/nnlG+X/8WD8+vZcFSgf0mr+ofqK8s8r3yj/DcH49e25OlA+pNX8Q/UV5Z9XvlH+G4Px69vzgUD5kFbzD9VXlH9e+Ub5bwrGr2/PBwPlQ1rNP1RfUf555RvlvzkYv749KwPlQ1rNP1RfUf555Rvlf3Mwfn17rgmUD2k1/1B9RfnnlW+U/y3B+PXt+VCgfEir+YfqK8o/r3yj/LcE49e358OB8iGt5h+qryj/vPKN8h8Oxq9vz0cC5UNazT9UX1H+eeUb5b81GL++PdcGyoe0mv+k+irZ9pXPp1H+23LKRzntuS5QPqTV/EP1FeWfV75R/p8Ixq9vz0cD5UNazT9UX1H+eeUb5b89GL++PdcHyoe0mn+ovqL888o3yv/WYPz69qwKlA8Zz3/rlsHBVdtuXrtm6+CqTZvXDg6v2r5laOvWweRErdX7EoP3lSX3JXZGHQ3zX5BZPyp5f6CjAu8PlC2fhj1+9JvJ7w+Urbaj4H1yivZXtv6i9xnKK5833kL7t+h4UHY8ZNX9fIwNkqFNw4NbJh+/uxv2R+2YiEZvm+seW8bHliqffbvOQDWFyufT1TCf7OaZyY2AM+NjSpWPAp8HN1Xl84mD+eS1Y6qfY5eGndLn2GW+TJLzHq11+a4bHj1ID63ZMLRjcHL7Zx0B7S/Tj7va3o7KpHYU7f840x/zkpbMC33eW6D/tn/9fx781a/+4T1R1H9M9YSW+i8eOLT6wLEf+9GFM88eaX+lYfvHS6afq1zw+YfZ8mk+HRs2D2/943Wbt23KfwUtvd+5Mr4+Tfc7J3lWS96/HLrfY6r3L8eTvjkylb1/GQAA4M0i/fv/9Hp1fvI3qPMyUwTl54Fb+/vo4Dzw3nLzwNnZiKJ54Gz5NO2ieeD0mrynxXngbP2hedpKg/KNXncpOw/8kUD5qSo/Tlp7H4DgOEl6qmicZP8Ov2icZMuXHSep7hbHSbb+onGSV77R69Nlx8k1gfIh5cdDE+870TfxvhPB8dBfbjxkP1ezaDxky091PHS1OB6y9ReNh7zyje7XKTsePhAoX1b58dHa+8IEx8fqcuMj+3kpReMjW36q4yNucXxk6y8aH3nlG93PWHZ8vD9QPlV+/7f2vj3B/b+73P7Pfm5L0f7Plp/q/q+0uP+z9Rft/7zyje7nLrv/rwiUT9Xv/5EdP7rfB1dt37yl9h7o6f7clpDy7Zvez61pVvn2T9f7PkX1L2BOW/un932lpr/9rV03Bdu/t7VXusq3f3o/l6hZ7Xg9dmH9ev7rscnfDBW9/1TR67QfDmyf6uu0MyZ9c2TyOi0AAABMv/T1//Tj+NP3h/98sgx8TH/TXl+f7z0xcTnx/v4+fzs3fps+f7toHvOw/X2F+bymmM8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj5kd80eXT35m+LdXLHjXD+4cfGXn5d/aeMfugRlPXnTPe5/58ke/+tzz85Ys/cpNlx68ZfaKu+8e+PF5B3/4+9sLA/eOLU5PVruiKH4xjqITf7TkC3d976njRrbFURRV495dUTQvrnw3zkbofzWKorXj7ax/8LFXlq0bWe76/My67UdlgmTzinqqaXvq2hndWpgRr0NdyTj77Hc2n/DLsy59Zs9PLnmlv+vVLbsmisRdI0MoGU9RNHd17fM7oyjqTv6PSEfb/PTJyfLKKIpm1Tzv/IJ2nVKy/WcG1hckyxnJsqcgTvr4yZn1zpLt6Mgsu0o+r1mVaY6fSvff7Gmuf9LRLVPPvGT59WR5+hTjV9P/cVSJo47x6jbEE2MkqtlvcRSP7vuJ9UrdWIgzYyOOojizXsmsVzszeY3Wmwy0ahzXb0/LZbb3Jds7ku0nF4y1qwPb35bmm/ygHsjknw3aM+mb8bxGpe36WYO2HA6VmmNQ3va0vV3JzuhJtvXER096zqEc6WMrn7/30ed23L+oN1Bf/LU4iR83Ff/pjRfsW7zjp/vnB/KMV1eS+JWm4g+f9dIjL1z1/eOC8Xen8atNxX/23MVf/PbO7Qd6Q/F/nfZPR1Pxq8vPOLj0zv6VwfY/kMbvair+g5c8/KW573jikWD7+9P+6W6uf4a2vXbtQ8fsD8aP0vizmop/8cvHnrZ888Prg/EfT/unp6n4Tw0PrbjrxoXb+0Lx96bx5zQV/5SfX3ftnn2DzwbbP5D2T29T8d+56OIrV+zfdE/o2BnvOly/YQHemN6SnGN9LllveJ1ZM2+Rvc5sVc31wn298dg53+zk/5x2VpQxUs/caYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAb0+Bl9+28bO+qyzviKIoDZQ7lSB+rzhgY6Gui3uryMw4uvbN/Ze22+U3EAQAAAIql1+GV8S1d0fxoe9wdHZ9bPp0jOD5di+u3Z+cQuidKtiVOpU1xqm2K09GmOJ1tijOjTXFmtilOV0GcrqhcnO6GcSql2zOrTXF62hRndpvizGlTnLltinNUm+L0NoxTfhzOa1Oco9sU5y1tivPWNsU5pk1xjm1TnOPaFCc7pzzVcTgnKbkgFGf0m2phnI64Ov5A3nx6Ws+JmedVplhPT8l6snP2U62nu2Q9p7ZYT1fJeha3WE9csp7TW6ynUlBPOm5vzbYvrSddKzn+b2tTnB1tivPJNsX5VJvi3N6mOJ9uU5ydLcYBKCu9/p+4buyNZnZcGM1KjjjZWYD0enfh2LMnHY+6shfoiTTeCZntM4riZS/UM/EWtrl9p2S2d9bF6xg/b2oQr7c23qLMg4X5ZicUMu1bMtV42YkFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJhGg5fdt/Oyvasuj+Jo5F+uQznSx6ozBgb6mqh35fP3PvrcjvsX1W6b2dFEIADg/9m1vxi5qjoO4Ofu/GVbcGqgDqTQkdKKEWnpovxJDRd9mCUGJYDRgOluKUPddLuL7DaFFVnrA/FBA0YTV58MTxjCgxoUlWR50BiUhE0UmwjKi0TRAAmQUBOTMbtz7/zrTGcZ0Rb8fB7unXvO95zf3Jmmye/uAAAMlPbhueZIMRSyO0M+ynfkislzgGJynSk1zlFlZO08Gm06aT6b5HfOH7pz59w9Cx+eOrTvQO1AbWZsbOzKy8d2X7H7ozvvmJqu7WocQ2HAfrlkv7l7Fg7um56u3TXXuO5+3+VkXbk1NLl6OJq87/cOqBMl+Vad/96Lwd8WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWrXq0mJ1ZWJ8NAoh6pOp95DOZfJxXBmi7rVvbN5+9ewjB9rHCtkhNgIAAAAGSvvwXHOkGArZTMiEc9euLmxFSyG0+n4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/T626tFhdmRjfEIUQ9cnUe0jnMvk4rgxR97dzU9ff/4WtR9rHykPsAwAAAAyW9uEjzZFiKIdtIRed25FLnw2c17V+LZdrXaf7nN8rF07MdT876Jfbts7cjnXmPjgg96nkfHcAAACAd760/882R0qhkD2zb/8/qK9Pc1u7cpnkPMxvBQAAAID/TNr/55sj5VDIlpv9+nr7/Qu7cun6QX+3T9cP+rt9mru4T53uv+cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKevWnVpsboyMZ6JQoj6ZOo9pHOZfBxXhqj7wuU7vvOLxSPH28cK2SE2AgAAAAZK+/BW610MhexoyIUNa33/lTv+8cWFyaObcqVkOp8Pd++bn79rd+OY5rZ99bXP/f5nUeWE3GWN4ym5OQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G1Vqy4tVlcmxs+IQoj6ZOo9pHOZfBxXhqj7wtThf9368Dmvto+Vh9gHAAAAGCztw1u9fzGUQz7kw+a1q/Zef9VI1/p+zwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAd4+5exYO7puerkXpi7u88MILL071/0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpolZdWqyuTIwXoxCiPpl6D+lcJh/HlSHqPvTxR7531kd++Wj7WHmIfQAAAIDB0j681fsXQznkQi6cs3bV65nAWv9f+h++SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LRQqy4tVlcmxs+MQoj6ZOo9pHOZfBxXhqh74V8+f+vysdoL7WOF7BAbAQAAAAOlfXi+OVIMhexloRC2JNfTnQuiTHLu/Vygte7OjmWj6153b8e6zLrXfa3rzrLJ3TTWFdP9So1zc13lxHWVEEI5WVduTUx2rAsPdqw6c93v8/sd60oD1gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DdWqS4vVlYnxKAoh6pOp95DOZfJxXFlPoa7Nnz101bEdC396tX2sPNQdAAAAAIOkfXirPS+Gcjg/nBXOX+v7Q6kzn+b2PPzy1X/7+RnfCGHX5t9dkO27/18vrv6q+xDCSGdoJIT3JPWiPvWO/OTvD73yyk8/GcKuczJb3mq9zi3j+uTxzbc9s6ew8yQfDAAAALyLpP1/rjlSCoXsTN/+P+2831L/P3v2TfduSo5JR961YqSU1BvpU+/gFd/6ceWCY39c7f9PVu/TXz7vE5vC7BXxVHpsjHSJ4vr0A9v3vrTxqcPpXTfqZ7rqp5/Li8d/9Jkjc/u/0qhfDMVk/Lxsr/onHrucEdffnHn8yf17Fm7orJ/tc//3b3//n//w3UMvr9Z/fetos/4HTnL/J69/9s3V544+9uCNnfVzfeofuGnDD96ozP6zcf/fbM6PhnCwPZ988o0vvO1b6BLF9dennr5m4/K2vZ31QwiT7cH083/y8W9Xln+z6VD6+ae/Fbl4W+fG7f/U2o9dz5yiuL685ZIDY0/Mb+isH3XVT+//2H0/fPNLx569rvv7vz2st373/V+3I3PL81vH1vXjGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAd55adWmxujIxHjIhRH0y9R7SuUw+jitD1P3YRdfecP2rM19vHytkh9gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeNvUqkuL1ZWJ8ZEohKhPpt5DOpfJx3FliLpzl7726Es3/vp97WPlIfYBAAAABkv78FbvXwzlkA/5MLrW908e33zbM3sKO0OpMRsl5+z07Nz8h+6YPTxz+yl65wAAAMB6pf1/tjlSCoXsRSGX9P/LWy45MPbE/Ia0/w8hTK4eindMTdfGQvM5wXU7Mrc8v3Ws0nxO0J67dP/sdPKYIN33vqs2vjj32ZXre+67u5V7ferpazYub9ub5nLJeS13WSs3/cD2vS9tfOpwmhtJn1Os5na1cm/OPP7k/j0LN6Tzmfb92nJn31x97uhjD97Y3Cc5jyZ1AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4NztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYr6MQq4o4DsAz9+7q1btuu0W5SZGKiQbJSkUlRKuQ9NCGFPhigQ9ZGZnUEoYQbkIWJuFTRVBEFAQiBUEPRVhQBkkURGgPYWgP9RAb0Ya4UbG7M7t3j552O7UK8n1wGGfOPb/5nznj2XsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6vuW09Y+3hpwd+v3PRbZ/v3jK86/b3tz21v2/O4Vv33XHslXvfPHGye8XqNx5aP/JoR//evX1f3zjyxZ9PThv8xHizMnUbIcSfYwhXfrnihT2fHlk4OhZDCPXYNRhCd6x93B0LCb2nQwj3TdQ59eS7w9fdP9oOPjd3yvhFhZDifYVmPdczrmtqvVxYGmmfPfPh9it+XLX+2KFv1w33Nk4/Njj5kdho2U8hdG5uvb49hDAvHaPybuvJF6d2Qwhhfst1N01T19IZ1n9tSX9RauektjlNTj6/pNBvn2EdbYW2McPrqqrNcn6Wn1/HLM9ffLkV5+lO7XupXfkv8+v5iKEWQ9vEdA/HyT0SWp5bDHHs2U/2a1P2QizsjRhCLPRrhX69vXBfY/OmjVaPcep4/lxhfHEab0vjS6bZa3eXjF+e7zf9Rz1VuP9iaPOMf0zc15hc1/f/UMu5UGt5B51tPNfbSA+jmcaa8eIzrvnrLPK5jSeff/vEzleXdZXUEd+JKT9Wyv9m281Hl+/8bqinLH9zLeXXKuUPrPr14E93fbawNH9/zq9Xyj9+/fIXP9i141Tp+vyS16etUn59zTUjq3f3biyt/7Wc36iU//q6Ay933vDJwdL6e/P6zKu2Plsf/2PTW5cOleaHnD+/Uv7a3y67es32Aw+U5n+U16dZKf/IwNb+PQ9etWNxWf5XOX9BpfylP9yz6dDRLcdL6+/L69NVKf+WZWs39A89sq/s3RkHz9VfWIAL0yXpO9azqV/1d+Z/1fJ74aWuOP6dryMdC/7PiQpG5+mcxXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZgcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeCgAA//9tfVke") r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 7.884222802s ago: executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 7.257225973s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="a50000007e0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19}, 0x80) 7.055042765s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x79}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 6.837258913s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)) write$FUSE_ATTR(r1, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x8, 0x6000, 0x0, 0x0, 0x0, 0x1, 0x2}}}, 0x78) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_setup(0x222, 0x0) r2 = socket(0x11, 0x0, 0x0) socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000005c40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000005a40)={@flat, @fda={0x66646185, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.674610275s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000020000000000a01020000000000000000010000000900010073798c310000000020000000000a03000000000000000000050000000900010073797a300000000014000000110001"], 0x88}}, 0x0) 5.470386947s ago: executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 5.467207224s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000400)=0x60) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='^.}-].\x00', 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) 4.695083591s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2008418, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESOCT], 0x1, 0x5549, &(0x7f0000003d80)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002a000000350000000000ba0085000000a000000095000000000000004cf1c09faf5d6806f81f06a9cf4ef5e0a141d524581835d8050864d2a51f7c8f32cb447f454698165b61a3cf5fc6dd8442230e7953f91136aa1f7035175135230163cf09494997cbe593f90a84768fa1ef1f83dd6c1023158a1086f7d0f9dce435554bc34e6bdea4217ce4a98af8ad0887c697acd9a7ab696922c9e34f0aee6156c599c7b297de0119b27de967bfb3fe241454a04080bf7f8ce021879c820f9b80fe2338a820db941135d0c5d301d02c4004be5b11cc7bf16c8a02b6f573db051357c71be1f5e8ce8db0f96ee1d8a312e9f32c7a458f129a8d8bc9a5d905441c0785d333135a04001bb4cd5b295b9add7a02477d4b056be3a93c2b02e29f9d4b57ddd41323cbbbcd6e00"/309], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x2f00, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa593000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3.50773752s ago: executing program 1: r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x81) fchmodat(r0, &(0x7f0000000600)='./file0\x00', 0xde) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') 3.465889234s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003fc0)=""/4096, 0xffffffae}], 0x1}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005340)=""/128, 0x80}], 0x1}}], 0x3, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 3.080361592s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 2.483869585s ago: executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 2.331341647s ago: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.242472824s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003e5c0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r3}, 0x10) write$cgroup_pid(r2, &(0x7f0000000340), 0xfdef) 2.199346535s ago: executing program 4: chdir(0x0) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r6, 0x0, r6) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="f0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000000000067726f75705f6964000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/152, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000006000000000000002c2f265c262d0000"], 0x0, 0x0}) 1.829673588s ago: executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x11b8, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@broadcast}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 1.421007423s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) 932.982199ms ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x0, @desc1}) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c"}, 0x48, 0xffffffffffffffff) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) 862.881549ms ago: executing program 3: syz_read_part_table(0x59c, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 676.267006ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, r1, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 511.932363ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2008418, &(0x7f0000000b40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45aca9836c319f437199ff24212c651baef614d442ae89412ad3dcd0b7586d02fe296d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1e73fa85bae63db763c51fc02936b3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c500000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2680b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2100931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000008886b313bd01a22d576e414011a4f0a897514329f86d4585fa0ea17068f8af349696da4a2b37828931cf6a369db22b556a8e24310ca52ec51bc23d8c73e6410eb41ca6748e0b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515e34ac8c454a30dd54a580abcf2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55a0016ff1ec9da9ccc1191c2116322020c66d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d58633d97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575e2449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4ab22052b9467d0da116ccc1652d861a420f08baf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cfe0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c863907079cbafe80d01f8a0000000000024589ec3f88e6e99bf1d4373f24d760da4d35e6658f54190e4ce3f5ae00b44b71e299d3f6c892d9abbafbc531d68a84b4688b282bf99dd29c2c037be31b0e7d320a941fb000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESOCT], 0x1, 0x5549, &(0x7f0000003d80)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/309], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x2f00, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa593000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x28, 0x0, 0x0, {0x0, @tcp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, @hdata="464e23e2226dc06589280909dde37af14b2ff3a85329f8b0d3ef8301c8b94eee0829cdfbec6518a633ff152bde43489144d309a2"}}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 288.179474ms ago: executing program 2: syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r0, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000040)) 263.969708ms ago: executing program 3: chdir(0x0) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 0s ago: executing program 2: open(0x0, 0x0, 0x0) open(0x0, 0x14507e, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = eventfd(0x800a6) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r2 = dup(r1) read$eventfd(r2, &(0x7f0000000040), 0x8) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) memfd_create(0x0, 0x0) kernel console output (not intermixed with test programs): strongly recommended to keep mac addresses unique to avoid problems! [ 834.947576][T14614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.975621][T14614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.995761][T14614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.017537][T14614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.037661][T14614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.143689][T14614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.171194][T14614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.196284][T14614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.217534][T14614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.242402][T14614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.270848][T14614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.290842][T14614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.328309][T14614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.436011][T14767] loop2: detected capacity change from 0 to 2048 [ 835.448370][T14767] NILFS (loop2): invalid segment: Sequence number mismatch [ 835.460167][T14767] NILFS (loop2): trying rollback from an earlier position [ 835.479621][T14767] NILFS (loop2): recovery complete [ 835.488479][T14768] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 835.493144][T14614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.566916][T14614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.615485][T14614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.668756][T14614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.958332][T14776] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 835.970393][T14776] openvswitch: netlink: Message has 3068 unknown bytes. [ 836.428418][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 836.647558][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.691605][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.701823][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 836.762065][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.788442][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.829537][ T9] usb 4-1: config 0 descriptor?? [ 836.871095][T14782] loop2: detected capacity change from 0 to 1024 [ 836.893294][T10489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.905195][T14782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 836.912181][T10489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.982101][T14782] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.065379][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.101222][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.108919][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 837.108938][ T29] audit: type=1400 audit(1717654843.993:1391): avc: denied { rename } for pid=14781 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 837.141968][T14782] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 837.278067][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 837.319836][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 837.339665][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 837.431255][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 837.550435][T14507] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 837.905729][T14791] loop4: detected capacity change from 0 to 1024 [ 838.001491][T14793] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 838.379262][T14791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.595243][ T29] audit: type=1400 audit(1717654845.493:1392): avc: denied { mount } for pid=14798 comm="syz-executor.0" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 838.754823][ T45] usb 4-1: USB disconnect, device number 11 [ 838.910250][T14797] loop2: detected capacity change from 0 to 4096 [ 838.925470][T14797] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 838.953093][T14797] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 839.220883][T14614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.435460][T14811] loop1: detected capacity change from 0 to 2048 [ 839.554528][T14811] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 839.726965][T14814] loop4: detected capacity change from 0 to 2048 [ 840.197877][T14814] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 840.253732][T14823] loop0: detected capacity change from 0 to 2048 [ 840.300315][T14823] GPT:first_usable_lbas don't match. [ 840.305785][T14823] GPT:34 != 290 [ 840.309236][T14823] GPT: Use GNU Parted to correct GPT errors. [ 840.315367][T14823] loop0: p1 p2 p3 [ 840.513727][T14808] warn_alloc: 3 callbacks suppressed [ 840.513742][T14808] syz-executor.0: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 840.587738][T14808] CPU: 0 PID: 14808 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 [ 840.598296][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 840.608380][T14808] Call Trace: [ 840.611679][T14808] [ 840.614630][T14808] dump_stack_lvl+0x16c/0x1f0 [ 840.619359][T14808] warn_alloc+0x24d/0x3a0 [ 840.623740][T14808] ? __pfx_warn_alloc+0x10/0x10 [ 840.628631][T14808] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 840.633743][T14808] ? __get_vm_area_node+0x190/0x2d0 [ 840.638940][T14808] ? __get_vm_area_node+0x1bc/0x2d0 [ 840.644145][T14808] __vmalloc_node_range_noprof+0xff7/0x1520 [ 840.650094][T14808] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 840.655217][T14808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 840.661542][T14808] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 840.666648][T14808] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 840.672100][T14808] vmalloc_user_noprof+0x6b/0x90 [ 840.677050][T14808] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 840.682191][T14808] vb2_vmalloc_alloc+0x11e/0x3d0 [ 840.687127][T14808] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 840.692577][T14808] __vb2_queue_alloc+0x896/0x1220 [ 840.697599][T14808] vb2_core_reqbufs+0xa73/0xfb0 [ 840.702447][T14808] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 840.707811][T14808] ? __pfx___mutex_trylock_common+0x10/0x10 [ 840.713704][T14808] ? rcu_is_watching+0x12/0xc0 [ 840.718456][T14808] ? trace_contention_end+0xea/0x140 [ 840.723729][T14808] vb2_reqbufs+0x1a5/0x1f0 [ 840.728137][T14808] ? __video_do_ioctl+0x4a8/0xf00 [ 840.733149][T14808] ? __pfx_vb2_reqbufs+0x10/0x10 [ 840.738105][T14808] ? __pfx___mutex_lock+0x10/0x10 [ 840.743133][T14808] ? tomoyo_path_number_perm+0x292/0x590 [ 840.748764][T14808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 840.754655][T14808] v4l2_m2m_ioctl_reqbufs+0xe2/0x1f0 [ 840.759936][T14808] v4l_reqbufs+0x14c/0x1e0 [ 840.764369][T14808] __video_do_ioctl+0xaf9/0xf00 [ 840.769214][T14808] ? __pfx___video_do_ioctl+0x10/0x10 [ 840.774579][T14808] video_usercopy+0x4ce/0x1600 [ 840.779353][T14808] ? __pfx___video_do_ioctl+0x10/0x10 [ 840.784747][T14808] ? __pfx_video_usercopy+0x10/0x10 [ 840.789939][T14808] ? selinux_file_ioctl+0x180/0x270 [ 840.795136][T14808] v4l2_ioctl+0x1c0/0x260 [ 840.799457][T14808] ? __pfx_v4l2_ioctl+0x10/0x10 [ 840.804299][T14808] __x64_sys_ioctl+0x193/0x220 [ 840.809078][T14808] do_syscall_64+0xcd/0x250 [ 840.813586][T14808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.819476][T14808] RIP: 0033:0x7ff0c3c7cf69 [ 840.823880][T14808] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 840.843499][T14808] RSP: 002b:00007ff0c49330c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.851923][T14808] RAX: ffffffffffffffda RBX: 00007ff0c3db3f80 RCX: 00007ff0c3c7cf69 [ 840.859924][T14808] RDX: 0000000020000040 RSI: 00000000c0145608 RDI: 0000000000000005 [ 840.867917][T14808] RBP: 00007ff0c3cda6fe R08: 0000000000000000 R09: 0000000000000000 [ 840.875890][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.883865][T14808] R13: 000000000000000b R14: 00007ff0c3db3f80 R15: 00007ffc3b8f70a8 [ 840.891858][T14808] [ 840.914182][T14808] Mem-Info: [ 840.918742][T14808] active_anon:37496 inactive_anon:0 isolated_anon:0 [ 840.918742][T14808] active_file:201 inactive_file:8647 isolated_file:0 [ 840.918742][T14808] unevictable:768 dirty:2 writeback:0 [ 840.918742][T14808] slab_reclaimable:11607 slab_unreclaimable:112253 [ 840.918742][T14808] mapped:25935 shmem:16970 pagetables:670 [ 840.918742][T14808] sec_pagetables:0 bounce:0 [ 840.918742][T14808] kernel_misc_reclaimable:0 [ 840.918742][T14808] free:1378092 free_pcp:537 free_cma:0 [ 840.964984][T14808] Node 0 active_anon:149984kB inactive_anon:0kB active_file:804kB inactive_file:34584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103740kB dirty:8kB writeback:0kB shmem:66344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10832kB pagetables:2680kB sec_pagetables:0kB all_unreclaimable? no [ 841.002950][T14808] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 841.039700][T14808] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 841.068570][T14824] loop1: detected capacity change from 0 to 4096 [ 841.077572][T14824] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 841.106616][T14808] lowmem_reserve[]: 0 2565 2567 0 0 [ 841.112188][T14808] Node 0 DMA32 free:1547904kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:149540kB inactive_anon:0kB active_file:788kB inactive_file:32980kB unevictable:1536kB writepending:8kB present:3129332kB managed:2654748kB mlocked:0kB bounce:0kB free_pcp:2172kB local_pcp:488kB free_cma:0kB [ 841.200282][T14824] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 841.218403][T14808] lowmem_reserve[]: 0 0 1 0 0 [ 841.225046][T14808] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:244kB inactive_anon:0kB active_file:16kB inactive_file:1604kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 841.284212][T14829] loop3: detected capacity change from 0 to 2048 [ 841.304427][T14829] NILFS (loop3): invalid segment: Sequence number mismatch [ 841.311694][T14829] NILFS (loop3): trying rollback from an earlier position [ 841.324243][T14808] lowmem_reserve[]: 0 0 0 0 0 [ 841.331569][T14808] Node 1 Normal free:3948716kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 841.347932][T14829] NILFS (loop3): recovery complete [ 841.401546][T14832] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 841.733959][ T29] audit: type=1400 audit(1717654848.553:1393): avc: denied { setopt } for pid=14830 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 843.007557][T14837] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 843.017423][T14837] openvswitch: netlink: Message has 3068 unknown bytes. [ 843.423526][T14808] lowmem_reserve[]: 0 0 0 0 0 [ 843.428443][T14808] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 843.507711][T14808] Node 0 DMA32: 2*4kB (UE) 2*8kB (UM) 1*16kB (U) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 75*256kB (U) 52*512kB (UE) 12*1024kB (UM) 12*2048kB (UME) 343*4096kB (UM) = 1487976kB [ 843.783491][T14808] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 844.066448][T14808] Node 1 Normal: 3*4kB (U) 8*8kB (U) 10*16kB (U) 14*32kB (U) 8*64kB (UM) 2*128kB (U) 1*256kB (M) 3*512kB (UM) 1*1024kB (U) 0*2048kB 963*4096kB (UM) = 3948716kB [ 844.138460][T14808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 844.164502][T14808] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 844.194077][T14808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 844.203815][T14808] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 844.257491][T14808] 34251 total pagecache pages [ 844.277368][T14808] 0 pages in swap cache [ 844.286124][T14808] Free swap = 124684kB [ 844.295955][T14808] Total swap = 124996kB [ 844.316288][T14808] 2097051 pages RAM [ 844.328087][T14808] 0 pages HighMem/MovableOnly [ 844.346266][T14808] 401770 pages reserved [ 844.352779][T14808] 0 pages cma reserved [ 844.594965][T14844] loop3: detected capacity change from 0 to 4096 [ 844.642758][T14844] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 844.997967][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.052542][T14846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.124261][T14846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.179831][T14846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.354106][T14846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.230803][T14861] loop3: detected capacity change from 0 to 512 [ 846.359079][T14856] loop4: detected capacity change from 0 to 4096 [ 846.370379][T14861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.383245][T14856] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 846.676380][T14861] ext4 filesystem being mounted at /root/syzkaller-testdir893543305/syzkaller.GpDWHq/7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 848.024778][ T29] audit: type=1400 audit(1717654854.923:1394): avc: denied { setattr } for pid=14860 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 848.075239][T14869] loop2: detected capacity change from 0 to 2048 [ 848.301180][ T29] audit: type=1400 audit(1717654855.203:1395): avc: denied { create } for pid=14876 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 848.853361][T14583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.948575][T14869] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 849.037076][T14882] loop0: detected capacity change from 0 to 128 [ 849.048760][T14882] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 849.123231][T14884] loop1: detected capacity change from 0 to 2048 [ 849.169289][T14884] NILFS (loop1): invalid segment: Sequence number mismatch [ 849.180777][T14884] NILFS (loop1): trying rollback from an earlier position [ 849.211465][T14884] NILFS (loop1): recovery complete [ 849.219156][T14885] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 849.605986][T14892] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 849.616278][T14892] openvswitch: netlink: Message has 3068 unknown bytes. [ 850.244637][ T29] audit: type=1800 audit(1717654857.143:1396): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file3" dev="loop0" ino=95 res=0 errno=0 [ 850.383752][T14896] loop3: detected capacity change from 0 to 2048 [ 850.399968][T14894] loop4: detected capacity change from 0 to 16 [ 850.723242][T14896] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 850.841834][T14899] loop1: detected capacity change from 0 to 4096 [ 850.869372][T14899] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 850.972775][T14899] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 851.109002][T14901] loop4: detected capacity change from 0 to 4096 [ 851.160394][T14901] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 851.888272][T14905] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 851.997703][T14895] loop2: detected capacity change from 0 to 2048 [ 852.221912][ T29] audit: type=1400 audit(1717654859.103:1397): avc: denied { nlmsg_read } for pid=14904 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 852.266170][T14905] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 852.316252][T14914] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 852.428294][T14914] 0¥ûÀ: renamed from caif0 [ 852.504109][T14914] 0¥ûÀ: entered allmulticast mode [ 852.512826][T14914] A link change request failed with some changes committed already. Interface 60¥ûÀ may have been left with an inconsistent configuration, please check. [ 852.576788][T14916] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 852.616214][T14920] loop4: detected capacity change from 0 to 512 [ 852.683071][T14916] loop3: detected capacity change from 0 to 64 [ 852.714076][T14920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.785353][T14920] ext4 filesystem being mounted at /root/syzkaller-testdir119707621/syzkaller.m8XQJ7/6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 852.822501][T14928] loop0: detected capacity change from 0 to 4096 [ 852.838554][T14928] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 854.469644][T14614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.571710][T14942] loop2: detected capacity change from 0 to 2048 [ 854.585108][T14942] NILFS (loop2): invalid segment: Sequence number mismatch [ 854.592376][T14942] NILFS (loop2): trying rollback from an earlier position [ 854.612939][T14942] NILFS (loop2): recovery complete [ 854.624836][T14944] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 855.028536][T14947] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 855.038541][T14947] openvswitch: netlink: Message has 3068 unknown bytes. [ 855.570003][T14943] loop3: detected capacity change from 0 to 2048 [ 855.691257][T14943] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 857.194856][T14957] loop0: detected capacity change from 0 to 2048 [ 857.741694][T14957] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 857.758114][T14968] loop2: detected capacity change from 0 to 4096 [ 857.798719][T14968] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 859.494401][T14985] Bluetooth: MGMT ver 1.22 [ 859.549172][T14990] loop1: detected capacity change from 0 to 2048 [ 859.571328][T14990] NILFS (loop1): invalid segment: Sequence number mismatch [ 859.578686][T14990] NILFS (loop1): trying rollback from an earlier position [ 859.603646][T14990] NILFS (loop1): recovery complete [ 859.611225][T14992] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 860.093378][T15006] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 860.103242][T15006] openvswitch: netlink: Message has 3068 unknown bytes. [ 860.505732][T15007] loop3: detected capacity change from 0 to 2048 [ 860.668768][T15007] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 860.822156][T15009] loop0: detected capacity change from 0 to 1024 [ 860.868109][T15009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.006632][ T29] audit: type=1800 audit(1717654867.893:1398): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm=23223A23 name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 861.196045][T15019] loop3: detected capacity change from 0 to 4096 [ 861.226631][T15019] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 861.299840][T15019] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 861.801314][T15026] 9pnet_fd: Insufficient options for proto=fd [ 861.813941][T15026] loop4: detected capacity change from 0 to 16 [ 863.333421][T15026] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported [ 863.421918][T13062] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.671715][T15024] loop1: detected capacity change from 0 to 4096 [ 863.693018][T15024] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 863.774915][ T5165] kernel write not supported for file /vcs (pid: 5165 comm: kworker/0:4) [ 863.786369][ T5165] kernel write not supported for file /vcs (pid: 5165 comm: kworker/0:4) [ 865.471980][T15032] loop4: detected capacity change from 0 to 512 [ 865.549832][T15032] EXT4-fs (loop4): Test dummy encryption mode enabled [ 865.611470][T15032] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 865.686421][T15032] EXT4-fs error (device loop4): ext4_clear_blocks:881: inode #13: comm syz-executor.4: attempt to clear invalid blocks 2 len 1 [ 865.736179][T15032] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 865.849843][T15032] EXT4-fs error (device loop4): ext4_free_branches:1027: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0) [ 865.910203][T15032] EXT4-fs error (device loop4): ext4_free_branches:1027: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 1) [ 865.949570][T15032] EXT4-fs (loop4): 1 truncate cleaned up [ 865.962372][T15032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.055079][T15055] --map-set only usable from mangle table [ 866.126305][T15057] loop3: detected capacity change from 0 to 2048 [ 866.138736][T15057] NILFS (loop3): invalid segment: Sequence number mismatch [ 866.146122][T15057] NILFS (loop3): trying rollback from an earlier position [ 866.168110][T15057] NILFS (loop3): recovery complete [ 866.186611][T15058] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 866.190093][T15032] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 866.458001][T14614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.587906][T15065] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 866.597820][T15065] openvswitch: netlink: Message has 3068 unknown bytes. [ 867.588223][T15071] loop4: detected capacity change from 0 to 2048 [ 867.637878][ T29] audit: type=1804 audit(1717654874.543:1399): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2739038174/syzkaller.IfJywm/14/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 867.760144][T14295] IPVS: starting estimator thread 0... [ 867.838929][T15071] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 867.894532][T15080] IPVS: using max 19 ests per chain, 45600 per kthread [ 868.281209][T15086] 9pnet_fd: Insufficient options for proto=fd [ 868.300831][T15086] loop1: detected capacity change from 0 to 16 [ 869.762006][T15086] erofs: (device loop1): erofs_read_superblock: blkszbits 0 isn't supported [ 869.927113][ T29] audit: type=1400 audit(1717654876.833:1400): avc: denied { ioctl } for pid=15090 comm="syz-executor.4" path="socket:[52013]" dev="sockfs" ino=52013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 870.368365][T15092] loop0: detected capacity change from 0 to 4096 [ 870.410602][T15092] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 870.495693][ T29] audit: type=1800 audit(1717654877.393:1401): pid=15099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm=23223A23 name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 870.498305][T15096] loop1: detected capacity change from 0 to 4096 [ 870.540457][T15096] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 870.927066][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.933728][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.414148][T15096] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 871.695794][ T5113] Bluetooth: hci4: Malformed LE Event: 0x0d [ 873.095945][T15111] loop3: detected capacity change from 0 to 2048 [ 873.107516][T15111] NILFS (loop3): invalid segment: Sequence number mismatch [ 873.114864][T15111] NILFS (loop3): trying rollback from an earlier position [ 873.120186][T15113] loop0: detected capacity change from 0 to 64 [ 873.129176][T15111] NILFS (loop3): recovery complete [ 873.160316][T15114] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 873.631498][T15117] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 873.641321][T15117] openvswitch: netlink: Message has 3068 unknown bytes. [ 874.645776][T15122] loop3: detected capacity change from 0 to 512 [ 874.690626][T15122] EXT4-fs (loop3): unsupported inode size: 0 [ 874.697635][T15122] EXT4-fs (loop3): blocksize: 1024 [ 874.809857][T15129] loop2: detected capacity change from 0 to 2048 [ 874.907613][T15129] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 875.399633][T15132] loop3: detected capacity change from 0 to 4096 [ 875.416659][T15132] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 875.895745][T15136] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 876.519939][T15138] loop1: detected capacity change from 0 to 4096 [ 876.538995][T15138] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 876.668588][ T5113] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 876.676318][ T5113] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 876.914011][ T29] audit: type=1800 audit(1717654883.723:1402): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 876.953155][T15146] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 877.671578][T15151] loop2: detected capacity change from 0 to 1024 [ 877.955076][T15159] loop0: detected capacity change from 0 to 2048 [ 877.996740][T15151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.036536][T15159] GPT:first_usable_lbas don't match. [ 878.041865][T15159] GPT:34 != 290 [ 878.045448][T15159] GPT: Use GNU Parted to correct GPT errors. [ 878.055484][T15159] loop0: p1 p2 p3 [ 878.211456][T15161] loop3: detected capacity change from 0 to 2048 [ 878.230933][T15161] NILFS (loop3): invalid segment: Sequence number mismatch [ 878.238347][T15161] NILFS (loop3): trying rollback from an earlier position [ 878.295815][T15161] NILFS (loop3): recovery complete [ 878.306325][T15162] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 878.322056][T15155] loop1: detected capacity change from 0 to 4096 [ 878.484183][T15155] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 878.529768][T14507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.613273][T15155] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 878.811096][T15165] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 878.821022][T15165] openvswitch: netlink: Message has 3068 unknown bytes. [ 879.530498][T15170] wg2: entered promiscuous mode [ 879.541305][T15170] wg2: entered allmulticast mode [ 879.600465][T15167] loop2: detected capacity change from 0 to 4096 [ 879.618089][T15167] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 881.297107][T15180] Cannot find add_set index 0 as target [ 882.947227][T15198] loop2: detected capacity change from 0 to 1024 [ 883.039032][T15198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.076730][T15197] loop0: detected capacity change from 0 to 4096 [ 883.093961][T15197] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 883.189262][T15203] loop1: detected capacity change from 0 to 2048 [ 883.465056][T15203] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 883.688024][T15210] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 884.462273][T15207] loop3: detected capacity change from 0 to 4096 [ 884.500791][T15207] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 884.664566][T15219] loop1: detected capacity change from 0 to 64 [ 886.397142][T14507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.607252][T15230] loop1: detected capacity change from 0 to 2048 [ 886.618662][T15230] NILFS (loop1): invalid segment: Sequence number mismatch [ 886.626076][T15230] NILFS (loop1): trying rollback from an earlier position [ 886.641290][T15230] NILFS (loop1): recovery complete [ 886.658339][T15231] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 887.193496][T15234] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 887.203840][T15234] openvswitch: netlink: Message has 3068 unknown bytes. [ 887.691105][T15237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15237 comm=syz-executor.2 [ 887.904905][T15246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 887.913187][T15246] IPv6: NLM_F_CREATE should be set when creating new route [ 887.920499][T15246] IPv6: NLM_F_CREATE should be set when creating new route [ 887.957464][T15248] loop4: detected capacity change from 0 to 256 [ 887.989328][T15248] exfat: Deprecated parameter 'utf8' [ 888.006338][T15248] exfat: Deprecated parameter 'utf8' [ 888.026369][T15248] exfat: Deprecated parameter 'codepage' [ 888.036618][T15248] exfat: Bad value for 'codepage' [ 888.172518][ T29] audit: type=1400 audit(1717654895.073:1403): avc: denied { create } for pid=15247 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 888.210942][T15245] loop2: detected capacity change from 0 to 4096 [ 888.246511][ T29] audit: type=1400 audit(1717654895.113:1404): avc: denied { accept } for pid=15247 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 888.272695][T15245] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 888.280211][T15253] loop1: detected capacity change from 0 to 2048 [ 888.321081][T15245] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 888.329736][ T29] audit: type=1400 audit(1717654895.153:1405): avc: denied { read } for pid=15247 comm="syz-executor.4" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 888.351314][T15227] loop0: detected capacity change from 0 to 32768 [ 888.369509][ T29] audit: type=1400 audit(1717654895.153:1406): avc: denied { open } for pid=15247 comm="syz-executor.4" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 888.405084][T15227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (15227) [ 888.439466][T15253] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 888.464497][T15252] loop3: detected capacity change from 0 to 4096 [ 888.490058][T15227] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 888.517933][T15252] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 888.533010][T15227] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 888.569854][T15227] BTRFS info (device loop0): using free-space-tree [ 889.278941][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 889.543405][T13062] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 889.924470][T15278] loop4: detected capacity change from 0 to 4096 [ 889.942930][T15278] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 891.043054][T15290] fuse: Bad value for 'fd' [ 891.424962][T15292] loop3: detected capacity change from 0 to 2048 [ 891.436109][T15292] NILFS (loop3): invalid segment: Sequence number mismatch [ 891.443370][T15292] NILFS (loop3): trying rollback from an earlier position [ 891.458750][T15292] NILFS (loop3): recovery complete [ 891.483514][T15294] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 891.852816][T15301] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 891.862655][T15301] openvswitch: netlink: Message has 3068 unknown bytes. [ 892.443501][T15298] loop4: detected capacity change from 0 to 1024 [ 892.546382][T15298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.630059][T15297] loop0: detected capacity change from 0 to 4096 [ 892.640690][T15297] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 892.666884][T15307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15307 comm=syz-executor.3 [ 892.717028][T15297] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 893.198204][ T29] audit: type=1400 audit(1717654900.103:1407): avc: denied { unlink } for pid=14614 comm="syz-executor.4" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 893.771793][ T29] audit: type=1400 audit(1717654900.573:1408): avc: denied { unlink } for pid=14614 comm="syz-executor.4" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 893.798089][T14614] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 893.846105][T14614] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 894.132354][T15321] mmap: syz-executor.3 (15321) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 894.192569][T15312] loop1: detected capacity change from 0 to 4096 [ 894.268571][T15312] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 894.324164][T15312] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 894.387929][T14614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.653830][ T29] audit: type=1400 audit(1717654901.553:1409): avc: denied { connect } for pid=15320 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 894.840069][T12620] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.924033][ T29] audit: type=1400 audit(1717654901.733:1410): avc: denied { write } for pid=15320 comm="syz-executor.3" path="socket:[52467]" dev="sockfs" ino=52467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 895.274525][T12620] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.774301][T12620] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.793205][T13067] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 895.810635][T13067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 895.812933][T15334] fuse: Bad value for 'fd' [ 895.841609][T13067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 895.865459][T13067] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 895.879887][T13067] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 895.887660][T13067] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 895.942205][T12620] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.115567][T15336] loop2: detected capacity change from 0 to 4096 [ 896.141752][T15336] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 896.233414][T15336] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 896.787359][T12620] bridge_slave_1: left allmulticast mode [ 896.828782][T12620] bridge_slave_1: left promiscuous mode [ 896.852744][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.876356][T12620] bridge_slave_0: left allmulticast mode [ 896.889140][T12620] bridge_slave_0: left promiscuous mode [ 896.953820][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.485645][T15348] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15348 comm=syz-executor.0 [ 897.935267][ T5113] Bluetooth: hci2: command tx timeout [ 897.972846][T15352] loop3: detected capacity change from 0 to 4096 [ 898.075990][T15352] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 899.096040][T15352] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 899.896267][T15373] loop1: detected capacity change from 0 to 164 [ 900.015413][ T5113] Bluetooth: hci2: command tx timeout [ 900.207959][T12620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.220902][T15376] fuse: Bad value for 'fd' [ 900.234645][T12620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.290357][T12620] bond0 (unregistering): Released all slaves [ 900.362656][ T29] audit: type=1400 audit(1717654907.263:1411): avc: denied { getopt } for pid=15379 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 900.826336][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 901.129221][T15399] dccp_invalid_packet: invalid packet type [ 901.345208][T15402] loop2: detected capacity change from 0 to 2048 [ 901.356633][T15402] NILFS (loop2): invalid segment: Sequence number mismatch [ 901.364036][T15402] NILFS (loop2): trying rollback from an earlier position [ 901.381170][T15402] NILFS (loop2): recovery complete [ 901.393112][T15405] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 901.462146][T15406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15406 comm=syz-executor.3 [ 901.567534][T15333] chnl_net:caif_netlink_parms(): no params data found [ 901.673521][T15408] binder: BINDER_SET_CONTEXT_MGR already set [ 901.679813][T15408] binder: 15404:15408 ioctl 4018620d 20000040 returned -16 [ 901.862814][T15413] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 901.872671][T15413] openvswitch: netlink: Message has 3068 unknown bytes. [ 902.177032][ T5113] Bluetooth: hci2: command tx timeout [ 902.188689][T12620] hsr_slave_0: left promiscuous mode [ 902.314393][T12620] hsr_slave_1: left promiscuous mode [ 902.415993][T12620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.477734][T12620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.506297][T12620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.513740][T12620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.638859][T12620] veth1_macvtap: left promiscuous mode [ 902.651319][T12620] veth0_macvtap: left promiscuous mode [ 902.671356][T12620] veth1_vlan: left promiscuous mode [ 902.672514][T15411] loop0: detected capacity change from 0 to 4096 [ 902.701501][T15411] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 902.715308][T12620] veth0_vlan: left promiscuous mode [ 902.762489][T15420] loop1: detected capacity change from 0 to 1024 [ 903.002615][T15420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.401336][T15431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 903.838244][T14535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.254043][ T5113] Bluetooth: hci2: command tx timeout [ 904.443206][T15422] loop2: detected capacity change from 0 to 32768 [ 904.482690][T15422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (15422) [ 904.522691][T15422] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 904.554493][T15422] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 904.567596][T15422] BTRFS info (device loop2): using free-space-tree [ 904.602691][T15424] loop3: detected capacity change from 0 to 40427 [ 904.644065][T15424] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 904.659601][T15424] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 904.752723][T15424] F2FS-fs (loop3): Found nat_bits in checkpoint [ 904.975357][T15424] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 904.996129][T15424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 905.242528][T14507] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 905.919345][T12620] team0 (unregistering): Port device team_slave_1 removed [ 906.126451][T12620] team0 (unregistering): Port device team_slave_0 removed [ 908.284491][T15333] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.336510][T15333] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.366448][T15333] bridge_slave_0: entered allmulticast mode [ 908.408443][T15333] bridge_slave_0: entered promiscuous mode [ 908.439930][T15333] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.485424][T15333] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.507488][ T29] audit: type=1804 audit(1717654915.403:1412): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1939248526/syzkaller.Xn5NDN/34/bus" dev="sda1" ino=1960 res=1 errno=0 [ 908.534541][T15333] bridge_slave_1: entered allmulticast mode [ 908.586356][T15333] bridge_slave_1: entered promiscuous mode [ 908.689017][T15333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.709222][T15484] fuse: Bad value for 'fd' [ 908.758441][T15333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.820113][T15479] loop3: detected capacity change from 0 to 4096 [ 908.889783][T15487] loop0: detected capacity change from 0 to 2048 [ 908.905795][T15487] NILFS (loop0): invalid segment: Sequence number mismatch [ 908.913062][T15487] NILFS (loop0): trying rollback from an earlier position [ 908.924827][T15487] NILFS (loop0): recovery complete [ 909.242163][T15490] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 909.252036][T15490] openvswitch: netlink: Message has 3068 unknown bytes. [ 909.614371][T15488] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 909.921127][T15333] team0: Port device team_slave_0 added [ 909.947680][T15333] team0: Port device team_slave_1 added [ 910.068781][T15333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.113423][T15333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.178055][T15333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.235909][T15333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.268223][T15333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.364816][T15333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.580991][T15333] hsr_slave_0: entered promiscuous mode [ 910.605025][T15333] hsr_slave_1: entered promiscuous mode [ 910.636297][T15333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.648789][ T29] audit: type=1800 audit(1717654917.553:1413): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 910.672967][T15333] Cannot create hsr debugfs directory [ 912.237115][T15513] loop2: detected capacity change from 0 to 4096 [ 912.277562][T15503] loop3: detected capacity change from 0 to 32768 [ 912.286653][T15503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (15503) [ 912.290123][T15513] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 912.353636][T15503] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 912.368553][T15503] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 912.378039][T15503] BTRFS info (device loop3): using free-space-tree [ 912.420588][T15333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 912.484689][T15333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 912.520439][T15333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 912.688028][T15333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 912.847264][T15533] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 913.569558][T15333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.637463][T15333] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.696276][T14780] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.703479][T14780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.738109][T15547] loop2: detected capacity change from 0 to 256 [ 913.742676][T14780] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.751586][T14780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.830997][T14583] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 914.241635][T15553] loop2: detected capacity change from 0 to 1024 [ 914.375024][T15553] hfsplus: invalid attributes max_key_len 0 [ 914.401528][T15553] hfsplus: failed to load attributes file [ 914.687077][T15553] loop2: detected capacity change from 0 to 256 [ 914.695461][T15553] FAT-fs (loop2): Unrecognized mount option "B1ºâqàÂéž³ÿÚ+d'‡#.ԒͯÈ?oè\ò„Ž [ 914.695461][T15553] ÿÿ18446744073709551615" or missing value [ 914.804262][ T29] audit: type=1800 audit(1717654921.713:1414): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 914.921044][T15333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.043698][T15572] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.052897][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.230225][T15553] loop2: detected capacity change from 0 to 1024 [ 915.262942][T15553] hfsplus: unable to parse mount options [ 915.436738][T15579] loop3: detected capacity change from 0 to 2048 [ 915.507681][T15579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.615432][T15553] pim6reg9: entered allmulticast mode [ 915.767428][ T29] audit: type=1400 audit(1717654922.673:1415): avc: denied { ioctl } for pid=15552 comm="syz-executor.2" path="socket:[53020]" dev="sockfs" ino=53020 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 915.802073][T15333] veth0_vlan: entered promiscuous mode [ 915.834666][T15333] veth1_vlan: entered promiscuous mode [ 915.848187][ T29] audit: type=1400 audit(1717654922.753:1416): avc: denied { write } for pid=15577 comm="syz-executor.3" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 915.884242][T15585] loop1: detected capacity change from 0 to 4096 [ 915.908801][T15585] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 915.979629][T15333] veth0_macvtap: entered promiscuous mode [ 916.012024][T15333] veth1_macvtap: entered promiscuous mode [ 916.085360][T15579] hub 6-0:1.0: USB hub found [ 916.103309][T15579] hub 6-0:1.0: 1 port detected [ 916.110455][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.162299][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.211283][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.240975][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.255638][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.267020][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.276971][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.287668][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.298861][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.309448][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.319423][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.584203][T15598] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 916.648358][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.787631][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.822870][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.867966][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.897029][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.909299][T15333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.938038][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.948674][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.966515][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.994758][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.034016][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.063411][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.098048][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.108749][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.121069][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.131554][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.142392][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.153283][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.163226][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.188922][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.199595][T15333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.210493][T15333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.222983][T15333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.309657][T15333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.355043][T15333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.363808][T15333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.392893][T15333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.430084][T14583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.491239][T15606] loop2: detected capacity change from 0 to 4096 [ 917.543841][T15606] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 917.640290][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.673681][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.685005][T15606] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 917.785048][ T29] audit: type=1400 audit(1717654924.673:1417): avc: denied { mount } for pid=15610 comm="syz-executor.3" name="/" dev="ramfs" ino=54312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 917.807769][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.826677][ T5170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.866712][ T5170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.145695][ T29] audit: type=1400 audit(1717654925.053:1418): avc: denied { connect } for pid=15610 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 918.654223][ T29] audit: type=1400 audit(1717654925.533:1419): avc: denied { mounton } for pid=15621 comm="syz-executor.4" path="/root/syzkaller-testdir1385488296/syzkaller.JNuLQS/0/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 919.539262][T15611] loop1: detected capacity change from 0 to 32768 [ 919.711658][T15611] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 919.819507][ T29] audit: type=1800 audit(1717654926.713:1420): pid=15645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 920.053489][T15611] XFS (loop1): Ending clean mount [ 920.078089][T15614] loop0: detected capacity change from 0 to 40427 [ 920.152341][T15614] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 920.164699][T15611] XFS (loop1): Quotacheck needed: Please wait. [ 920.198677][T15614] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 920.250669][T15614] F2FS-fs (loop0): invalid crc value [ 920.327166][T15611] XFS (loop1): Quotacheck: Done. [ 920.358830][T15614] F2FS-fs (loop0): Found nat_bits in checkpoint [ 920.646907][T15614] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 920.684184][T15614] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 920.747777][ T29] audit: type=1326 audit(1717654927.643:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c3c7cf69 code=0x7ffc0000 [ 920.826043][ T29] audit: type=1326 audit(1717654927.653:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0c3c7cf69 code=0x7ffc0000 [ 920.884523][ T29] audit: type=1326 audit(1717654927.683:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c3c7cf69 code=0x7ffc0000 [ 920.965506][T14535] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 920.994158][ T29] audit: type=1326 audit(1717654927.683:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c3c7cf69 code=0x7ffc0000 [ 921.044449][T15655] syz-executor.0: attempt to access beyond end of device [ 921.044449][T15655] loop0: rw=2049, sector=77824, nr_sectors = 512 limit=40427 [ 921.063151][ T29] audit: type=1326 audit(1717654927.693:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0c3c7cf69 code=0x7ffc0000 [ 921.169621][ T29] audit: type=1326 audit(1717654927.703:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c3c7cf69 code=0x7ffc0000 [ 921.235854][T15653] loop4: detected capacity change from 0 to 4096 [ 921.242778][ T29] audit: type=1326 audit(1717654927.703:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0c3c7a6e7 code=0x7ffc0000 [ 921.282569][ T29] audit: type=1326 audit(1717654927.703:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0c3c403b9 code=0x7ffc0000 [ 921.307907][T15653] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 921.419186][ T29] audit: type=1326 audit(1717654927.703:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0c3c7a6e7 code=0x7ffc0000 [ 921.755912][T13062] syz-executor.0: attempt to access beyond end of device [ 921.755912][T13062] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 922.013123][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 922.338078][T13062] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 923.179478][T15669] loop1: detected capacity change from 0 to 1024 [ 923.247637][T15669] hfsplus: invalid attributes max_key_len 0 [ 923.257812][T15669] hfsplus: failed to load attributes file [ 923.476509][T15669] loop1: detected capacity change from 0 to 256 [ 923.546699][T15669] FAT-fs (loop1): Unrecognized mount option "B1ºâqàÂéž³ÿÚ+d'‡#.ԒͯÈ?oè\ò„Ž [ 923.546699][T15669] ÿÿ18446744073709551615" or missing value [ 923.747057][T15677] loop4: detected capacity change from 0 to 4096 [ 923.868821][T15684] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 924.339247][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 924.386135][T15669] loop1: detected capacity change from 0 to 1024 [ 924.522125][T15669] hfsplus: unable to parse mount options [ 924.798861][T15669] pim6reg9: entered allmulticast mode [ 925.132788][T15694] loop3: detected capacity change from 0 to 4096 [ 925.164231][T15694] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 925.234770][T15694] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 925.261253][T15696] loop2: detected capacity change from 0 to 4096 [ 925.281283][T15696] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 926.087904][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 926.100898][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 926.100940][ T29] audit: type=1400 audit(1717654932.943:1494): avc: denied { write open } for pid=15695 comm="syz-executor.2" path="/root/syzkaller-testdir1939248526/syzkaller.Xn5NDN/48/file0/bus" dev="loop2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 926.728341][T15692] loop0: detected capacity change from 0 to 32768 [ 926.784276][T15692] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (15692) [ 926.856614][T15692] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 926.893653][T15692] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 927.071987][T15692] BTRFS info (device loop0): using free-space-tree [ 927.628568][T15714] overlayfs: missing 'lowerdir' [ 929.982549][ T29] audit: type=1400 audit(1717654935.413:1495): avc: denied { bind } for pid=15708 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 930.065537][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 930.075492][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 930.175559][ T29] audit: type=1400 audit(1717654935.413:1496): avc: denied { node_bind } for pid=15708 comm="syz-executor.2" saddr=fe88::3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 930.245775][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 930.246715][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 930.321484][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 930.331698][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 930.342283][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 930.357829][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 930.390597][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 930.420236][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 930.432058][T15692] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 930.478829][T15692] BTRFS error (device loop0): open_ctree failed [ 932.123900][T13067] Bluetooth: hci3: command 0x0406 tx timeout [ 932.343192][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.349784][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.277760][T15764] loop2: detected capacity change from 0 to 8 [ 934.085111][T15764] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 934.094856][T15756] loop0: detected capacity change from 0 to 4096 [ 934.134034][T15756] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 934.193592][ T29] audit: type=1400 audit(1717654941.083:1497): avc: denied { mount } for pid=15763 comm="syz-executor.2" name="/" dev="loop2" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=filesystem permissive=1 [ 934.227137][T15764] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.2'. [ 934.272549][ T29] audit: type=1400 audit(1717654941.093:1498): avc: denied { read } for pid=15763 comm="syz-executor.2" name="/" dev="loop2" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=dir permissive=1 [ 934.273401][T15767] input: syz1 as /devices/virtual/input/input10 [ 934.396690][ T29] audit: type=1400 audit(1717654941.093:1499): avc: denied { open } for pid=15763 comm="syz-executor.2" path="/root/syzkaller-testdir1939248526/syzkaller.Xn5NDN/54/file0" dev="loop2" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=dir permissive=1 [ 934.396858][T15768] cramfs: Error -3 while decompressing! [ 934.434704][T13067] Bluetooth: hci4: command 0x0406 tx timeout [ 934.451075][T15764] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 934.526268][ T29] audit: type=1400 audit(1717654941.093:1500): avc: denied { search } for pid=15763 comm="syz-executor.2" name="/" dev="loop2" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=dir permissive=1 [ 934.623188][T15768] cramfs: ffffffff94c155c8(26)->ffff8880565f7000(4096) [ 934.714590][T15768] cramfs: Error -3 while decompressing! [ 934.720238][T15768] cramfs: ffffffff94c155c8(26)->ffff8880565f7000(4096) [ 935.046341][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 935.435246][ T29] audit: type=1400 audit(1717654941.263:1501): avc: denied { read } for pid=15763 comm="syz-executor.2" name="file2" dev="loop2" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=file permissive=1 [ 935.508677][T15764] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 935.520575][ T29] audit: type=1400 audit(1717654941.263:1502): avc: denied { open } for pid=15763 comm="syz-executor.2" path="/root/syzkaller-testdir1939248526/syzkaller.Xn5NDN/54/file0/file2" dev="loop2" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=file permissive=1 [ 935.578271][ T29] audit: type=1800 audit(1717654941.343:1503): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 935.699849][ T29] audit: type=1800 audit(1717654942.033:1504): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 936.136337][ T29] audit: type=1400 audit(1717654943.043:1505): avc: denied { unmount } for pid=14507 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=filesystem permissive=1 [ 936.694300][T15767] loop3: detected capacity change from 0 to 32768 [ 936.718479][T15796] loop2: detected capacity change from 0 to 2048 [ 936.734452][T15767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (15767) [ 936.736183][T15796] NILFS (loop2): invalid segment: Sequence number mismatch [ 936.755179][T15796] NILFS (loop2): trying rollback from an earlier position [ 936.797039][T15796] NILFS (loop2): recovery complete [ 936.811848][T15798] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 936.836488][T15767] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 936.974849][T15767] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 937.014202][T15767] BTRFS info (device loop3): using free-space-tree [ 937.062249][T15797] loop1: detected capacity change from 0 to 4096 [ 937.130099][T15797] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 937.169994][T15767] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 937.276378][T15812] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 937.295657][T15812] openvswitch: netlink: Message has 3068 unknown bytes. [ 937.435736][T15767] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 937.615591][T15797] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 938.085692][T15767] BTRFS error (device loop3): open_ctree failed [ 938.196595][T15781] loop0: detected capacity change from 0 to 40427 [ 938.219252][T15781] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 938.234031][T15781] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 938.283946][T15781] F2FS-fs (loop0): invalid crc value [ 938.519981][T15781] F2FS-fs (loop0): Found nat_bits in checkpoint [ 938.746484][T15826] loop2: detected capacity change from 0 to 2048 [ 939.061233][T15826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 939.667765][T15781] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 939.684613][T15781] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 939.828760][T15831] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 940.707500][T15840] loop4: detected capacity change from 0 to 32768 [ 940.844942][T15840] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 940.941484][T15840] XFS (loop4): Ending clean mount [ 940.955731][T15840] XFS (loop4): Quotacheck needed: Please wait. [ 941.372154][T15840] XFS (loop4): Quotacheck: Done. [ 942.632886][T15865] loop3: detected capacity change from 0 to 2048 [ 942.703563][T15865] NILFS (loop3): invalid segment: Sequence number mismatch [ 942.711080][T15865] NILFS (loop3): trying rollback from an earlier position [ 943.202928][T15865] NILFS (loop3): recovery complete [ 943.705972][T15869] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 944.108842][T15874] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 944.119023][T15874] openvswitch: netlink: Message has 3068 unknown bytes. [ 944.720906][T15876] loop0: detected capacity change from 0 to 164 [ 945.091266][T15333] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 946.059357][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 946.076683][T15886] loop0: detected capacity change from 0 to 2048 [ 946.155840][T15886] loop0: p1 < > p3 p4 < > [ 946.186221][T15886] loop0: p3 start 4284289 is beyond EOD, truncated [ 946.519358][T15882] loop2: detected capacity change from 0 to 32768 [ 946.538172][T15882] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (15882) [ 946.580137][T15882] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 946.595908][T15882] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 946.604960][T15882] BTRFS info (device loop2): using free-space-tree [ 947.117916][T15917] loop3: detected capacity change from 0 to 1024 [ 947.164266][T15916] loop1: detected capacity change from 0 to 4096 [ 947.203458][T15916] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 947.291292][T15916] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 947.397876][ T29] audit: type=1400 audit(1717654954.303:1506): avc: denied { write } for pid=15883 comm="syz-executor.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 947.768323][T14507] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 947.812824][T15888] loop4: detected capacity change from 0 to 40427 [ 947.828384][T15888] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 947.867148][T15888] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 947.943984][T15888] F2FS-fs (loop4): invalid crc value [ 948.027433][T15888] F2FS-fs (loop4): Found nat_bits in checkpoint [ 948.034523][T15928] fuse: Invalid rootmode [ 948.281784][T15936] loop3: detected capacity change from 0 to 2048 [ 948.318484][T15936] NILFS (loop3): invalid segment: Sequence number mismatch [ 948.325811][T15936] NILFS (loop3): trying rollback from an earlier position [ 948.343044][T15936] NILFS (loop3): recovery complete [ 948.364033][T15939] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 948.467004][T15888] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 948.686846][T15888] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 948.851426][T15944] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 948.861259][T15944] openvswitch: netlink: Message has 3068 unknown bytes. [ 949.569249][ T29] audit: type=1326 audit(1717654956.363:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163a47cf69 code=0x7ffc0000 [ 949.601156][ T29] audit: type=1326 audit(1717654956.363:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163a47cf69 code=0x7ffc0000 [ 949.647574][ T29] audit: type=1326 audit(1717654956.363:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f163a47cf69 code=0x7ffc0000 [ 949.759629][ T29] audit: type=1326 audit(1717654956.363:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163a47cf69 code=0x7ffc0000 [ 949.762785][T15945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.785186][T15946] syz-executor.4: attempt to access beyond end of device [ 949.785186][T15946] loop4: rw=2049, sector=77824, nr_sectors = 512 limit=40427 [ 949.906764][ T29] audit: type=1326 audit(1717654956.443:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163a47cf69 code=0x7ffc0000 [ 949.993897][ T29] audit: type=1326 audit(1717654956.443:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f163a47cf69 code=0x7ffc0000 [ 950.057736][ T29] audit: type=1326 audit(1717654956.443:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163a47cf69 code=0x7ffc0000 [ 950.105518][ T29] audit: type=1326 audit(1717654956.443:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f163a47a6e7 code=0x7ffc0000 [ 950.136079][ T29] audit: type=1326 audit(1717654956.443:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f163a4403b9 code=0x7ffc0000 [ 950.533222][T15957] loop2: detected capacity change from 0 to 132 [ 951.364367][T15333] syz-executor.4: attempt to access beyond end of device [ 951.364367][T15333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 951.429685][T15957] iso9660: Unknown parameter '1844674407370955161501777777777777777777777' [ 951.464969][T15333] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 951.673784][ T9] libceph: connect (1)[c::]:6789 error -101 [ 951.735485][T15966] loop2: detected capacity change from 0 to 2048 [ 951.799644][T15941] ceph: No mds server is up or the cluster is laggy [ 951.814525][T15945] ceph: No mds server is up or the cluster is laggy [ 951.817221][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 951.828418][ T5198] libceph: connect (1)[c::]:6789 error -101 [ 951.840692][ T5198] libceph: mon0 (1)[c::]:6789 connect error [ 952.126886][ T5198] libceph: connect (1)[c::]:6789 error -101 [ 952.166466][ T5198] libceph: mon0 (1)[c::]:6789 connect error [ 952.179445][ T5198] libceph: connect (1)[c::]:6789 error -101 [ 952.226147][ T5198] libceph: mon0 (1)[c::]:6789 connect error [ 952.415665][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 952.639232][T15975] loop3: detected capacity change from 0 to 2048 [ 952.707116][T15975] GPT:first_usable_lbas don't match. [ 952.712489][T15975] GPT:34 != 290 [ 952.716036][T15975] GPT: Use GNU Parted to correct GPT errors. [ 952.722094][T15975] loop3: p1 p2 p3 [ 953.331853][T15963] loop0: detected capacity change from 0 to 32768 [ 953.395585][T15963] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist [ 953.395585][T15963] [ 953.494080][T15963] ERROR: (device loop0): remounting filesystem as read-only [ 953.527079][T15963] ialloc: diAlloc returned -5! [ 953.943941][T15994] loop3: detected capacity change from 0 to 164 [ 954.676357][T15983] loop2: detected capacity change from 0 to 4096 [ 954.688973][T15983] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 954.698036][T15994] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 954.712178][T15992] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 954.840378][T15983] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 956.290334][T16017] overlayfs: missing 'lowerdir' [ 957.542892][T16023] loop2: detected capacity change from 0 to 2048 [ 957.578148][T16023] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 957.629615][T16023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 957.796606][T16026] loop0: detected capacity change from 0 to 4096 [ 957.834451][T16026] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 958.456576][T16036] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 959.159864][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 959.159884][ T29] audit: type=1800 audit(1717654966.063:1577): pid=16041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1951 res=0 errno=0 [ 960.698207][ T29] audit: type=1800 audit(1717654967.603:1578): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 961.708371][T16064] overlayfs: missing 'lowerdir' [ 964.233179][ T29] audit: type=1400 audit(1717654971.133:1579): avc: denied { ioctl } for pid=16068 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 964.356280][T16073] loop3: detected capacity change from 0 to 4096 [ 964.385225][T16073] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 964.438673][T16069] loop0: detected capacity change from 0 to 2048 [ 964.529780][T16069] loop0: p1 < > p3 [ 965.094883][T16083] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 965.136860][T16069] loop0: p3 size 134217728 extends beyond EOD, truncated [ 965.783554][T16091] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 965.865582][T16092] dvmrp0: entered allmulticast mode [ 965.900798][T16091] dvmrp0: left allmulticast mode [ 965.970246][T16089] loop3: detected capacity change from 0 to 4096 [ 966.018841][T16089] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 966.163477][ T29] audit: type=1400 audit(1717654973.063:1580): avc: denied { mounton } for pid=16088 comm="syz-executor.4" path="/root/syzkaller-testdir1385488296/syzkaller.JNuLQS/19/file0" dev="sda1" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 967.539716][T16103] loop1: detected capacity change from 0 to 1024 [ 967.671291][T16103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.351502][ T29] audit: type=1800 audit(1717654975.253:1581): pid=16128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 968.502041][T16127] loop2: detected capacity change from 0 to 4096 [ 968.515807][T14535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.527299][T16127] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 969.252622][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 969.787315][T16138] loop0: detected capacity change from 0 to 2048 [ 969.797041][T16138] udf: Unknown parameter 'iocharst' [ 969.830190][T16140] sg_write: data in/out 2011/14 bytes for SCSI command 0x0-- guessing data in; [ 969.830190][T16140] program syz-executor.1 not setting count and/or reply_len properly [ 972.393400][T16119] netlink: 14601 bytes leftover after parsing attributes in process `syz-executor.3'. [ 972.751320][T16143] loop3: detected capacity change from 0 to 4096 [ 972.814826][T16143] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 974.698191][T16175] overlayfs: missing 'lowerdir' [ 976.866181][ T29] audit: type=1800 audit(1717654983.773:1582): pid=16177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 977.158608][T16181] loop3: detected capacity change from 0 to 512 [ 977.259857][T16181] devtmpfs: Unknown parameter '' [ 977.271355][T16186] loop2: detected capacity change from 0 to 128 [ 977.284328][ T29] audit: type=1400 audit(1717654984.163:1583): avc: denied { remount } for pid=16180 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 977.328375][T16186] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 977.341176][T16186] ext4 filesystem being mounted at /root/syzkaller-testdir1939248526/syzkaller.Xn5NDN/72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 977.751263][T16196] loop3: detected capacity change from 0 to 64 [ 977.802003][T14507] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 977.872028][T16193] loop0: detected capacity change from 0 to 4096 [ 977.924884][T16193] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 977.991682][T16198] sg_write: data in/out 2011/14 bytes for SCSI command 0x0-- guessing data in; [ 977.991682][T16198] program syz-executor.4 not setting count and/or reply_len properly [ 978.079969][T16196] syz-executor.3: attempt to access beyond end of device [ 978.079969][T16196] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 978.334342][T16196] Buffer I/O error on dev loop3, logical block 512, async page read [ 978.789481][T16196] syz-executor.3: attempt to access beyond end of device [ 978.789481][T16196] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 979.074419][T16196] Buffer I/O error on dev loop3, logical block 56576, async page read [ 979.527720][ T29] audit: type=1400 audit(1717654986.413:1584): avc: denied { connect } for pid=16195 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 979.595675][T16196] syz-executor.3: attempt to access beyond end of device [ 979.595675][T16196] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 979.644333][T16196] Buffer I/O error on dev loop3, logical block 512, async page read [ 979.721378][T16196] syz-executor.3: attempt to access beyond end of device [ 979.721378][T16196] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 979.760491][T16196] Buffer I/O error on dev loop3, logical block 56576, async page read [ 979.850617][ T29] audit: type=1400 audit(1717654986.753:1585): avc: denied { append } for pid=16195 comm="syz-executor.3" path="/root/syzkaller-testdir893543305/syzkaller.GpDWHq/79/bus/memory.numa_stat" dev="loop3" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 979.903488][T16205] syz-executor.3: attempt to access beyond end of device [ 979.903488][T16205] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 979.918898][T16205] Buffer I/O error on dev loop3, logical block 512, async page read [ 979.937896][T16205] syz-executor.3: attempt to access beyond end of device [ 979.937896][T16205] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 979.953209][ T29] audit: type=1400 audit(1717654986.783:1586): avc: denied { write } for pid=16219 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 980.038969][T16205] Buffer I/O error on dev loop3, logical block 56576, async page read [ 980.089441][T16218] loop4: detected capacity change from 0 to 4096 [ 980.109748][T16218] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 980.356492][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 980.878694][T16230] dvmrp0: entered allmulticast mode [ 981.103514][T16225] dvmrp0: left allmulticast mode [ 981.599036][T16236] overlayfs: missing 'lowerdir' [ 983.871225][ T29] audit: type=1800 audit(1717654990.773:1587): pid=16239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 984.021576][T16244] autofs: Unknown parameter '0x0000000000000000' [ 984.129741][T16244] loop2: detected capacity change from 0 to 16 [ 984.155057][ T29] audit: type=1400 audit(1717654991.053:1588): avc: denied { listen } for pid=16246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 984.372252][ T29] audit: type=1400 audit(1717654991.183:1589): avc: denied { accept } for pid=16246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 984.490895][T16253] loop1: detected capacity change from 0 to 4096 [ 984.563263][T16253] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 985.723605][T16263] loop2: detected capacity change from 0 to 1024 [ 985.738980][T16261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.249377][T16279] loop4: detected capacity change from 0 to 64 [ 986.304950][T16277] loop2: detected capacity change from 0 to 4096 [ 986.350625][T16277] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 986.522058][T16279] syz-executor.4: attempt to access beyond end of device [ 986.522058][T16279] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 986.586555][T16279] Buffer I/O error on dev loop4, logical block 512, async page read [ 986.670790][T16254] loop0: detected capacity change from 0 to 40427 [ 986.716473][T16279] syz-executor.4: attempt to access beyond end of device [ 986.716473][T16279] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 986.784998][T16279] Buffer I/O error on dev loop4, logical block 56576, async page read [ 987.485807][T16280] syz-executor.4: attempt to access beyond end of device [ 987.485807][T16280] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 987.499481][T16280] Buffer I/O error on dev loop4, logical block 512, async page read [ 987.521395][T16280] syz-executor.4: attempt to access beyond end of device [ 987.521395][T16280] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 987.535265][T16280] Buffer I/O error on dev loop4, logical block 56576, async page read [ 987.812837][T16285] syz-executor.4: attempt to access beyond end of device [ 987.812837][T16285] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 988.318262][T16294] overlayfs: missing 'lowerdir' [ 990.432359][T16285] Buffer I/O error on dev loop4, logical block 512, async page read [ 990.542730][T16285] syz-executor.4: attempt to access beyond end of device [ 990.542730][T16285] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 990.556652][T16285] Buffer I/O error on dev loop4, logical block 56576, async page read [ 990.699193][T16298] loop1: detected capacity change from 0 to 1024 [ 990.858771][ T29] audit: type=1800 audit(1717654997.753:1590): pid=16301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 990.964824][ T29] audit: type=1400 audit(1717654997.853:1591): avc: denied { mounton } for pid=16297 comm="syz-executor.1" path="/root/syzkaller-testdir2739038174/syzkaller.IfJywm/67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:dosfs_t tclass=dir permissive=1 [ 991.234176][ T29] audit: type=1400 audit(1717654998.083:1592): avc: denied { mount } for pid=16297 comm="syz-executor.1" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 991.439068][T16306] loop4: detected capacity change from 0 to 4096 [ 991.468461][T16311] autofs: Unknown parameter '0x0000000000000000' [ 991.479008][T16306] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 991.542168][T16311] loop0: detected capacity change from 0 to 16 [ 992.231672][T14535] hfsplus: walked past end of dir [ 992.324784][ T29] audit: type=1400 audit(1717654999.233:1593): avc: denied { unmount } for pid=14535 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 992.422871][T14535] hfsplus: xattr search failed [ 993.321936][T16339] loop2: detected capacity change from 0 to 4096 [ 993.350538][T16339] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 993.912884][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.920567][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.796818][ T29] audit: type=1800 audit(1717655001.703:1594): pid=16365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 994.845481][T16366] autofs: Unknown parameter '0x0000000000000000' [ 994.935658][T16366] loop1: detected capacity change from 0 to 16 [ 994.961525][T16364] loop2: detected capacity change from 0 to 64 [ 995.693794][T16351] loop0: detected capacity change from 0 to 32768 [ 995.764427][T16351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (16351) [ 995.834822][T16351] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 996.036355][T16351] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 996.089073][T16351] BTRFS info (device loop0): using free-space-tree [ 996.633293][T16381] overlayfs: missing 'lowerdir' [ 999.228692][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 999.229881][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 999.255645][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 999.277953][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 999.290106][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 999.365097][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 999.380926][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 999.420611][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 999.466891][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 999.519566][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 999.551083][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 999.627746][T16351] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 999.666552][T16351] BTRFS error (device loop0): open_ctree failed [ 999.700189][T16402] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 999.764476][T16402] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 999.797945][T16402] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 999.831585][T16397] loop2: detected capacity change from 0 to 4096 [ 999.873697][T16397] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1000.200850][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1000.975273][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1000.989608][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1001.021676][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1001.041102][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.079524][ T9] usb 4-1: Product: syz [ 1001.083696][ T9] usb 4-1: Manufacturer: syz [ 1001.113977][ T9] usb 4-1: SerialNumber: syz [ 1001.132169][ T9] usb 4-1: config 0 descriptor?? [ 1001.156479][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1001.210355][ T9] usb 4-1: Detected FT232R [ 1002.428154][ T29] audit: type=1800 audit(1717655009.333:1595): pid=16402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1958 res=0 errno=0 [ 1002.509844][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1002.580686][T16428] autofs: Unknown parameter '0x0000000000000000' [ 1002.619679][T16428] loop2: detected capacity change from 0 to 16 [ 1002.859602][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1002.919519][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1002.957047][ T9] usb 4-1: USB disconnect, device number 12 [ 1003.007090][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1003.070922][ T9] ftdi_sio 4-1:0.0: device disconnected [ 1003.197950][T16430] loop4: detected capacity change from 0 to 8 [ 1003.216980][T16430] Page size > filesystem block size (0). This is currently not supported! [ 1003.748698][T16434] loop2: detected capacity change from 0 to 1764 [ 1004.031137][T16441] loop4: detected capacity change from 0 to 4096 [ 1004.079748][T16441] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1004.126655][T16437] loop0: detected capacity change from 0 to 8192 [ 1004.987786][T16450] loop2: detected capacity change from 0 to 4096 [ 1005.083457][T16450] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1006.647331][T16440] loop3: detected capacity change from 0 to 32768 [ 1006.654506][T16467] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 49 (only 8 groups) [ 1007.021450][T16475] autofs: Unknown parameter '0x0000000000000000' [ 1007.103790][T16475] loop4: detected capacity change from 0 to 16 [ 1007.246628][T16473] loop0: detected capacity change from 0 to 4096 [ 1007.305784][T16473] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1007.397309][T16473] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1008.110273][ T29] audit: type=1804 audit(1717655014.993:1596): pid=16488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1385488296/syzkaller.JNuLQS/38/bus" dev="sda1" ino=1967 res=1 errno=0 [ 1008.471486][T16477] loop1: detected capacity change from 0 to 2048 [ 1008.484456][ T29] audit: type=1800 audit(1717655014.993:1597): pid=16488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 1008.576205][T16477] GPT:first_usable_lbas don't match. [ 1008.586921][T16477] GPT:34 != 290 [ 1008.601874][T16477] GPT: Use GNU Parted to correct GPT errors. [ 1008.623685][T16477] loop1: p1 p2 p3 [ 1008.646127][T16465] loop2: detected capacity change from 0 to 32768 [ 1008.685101][T16465] XFS: attr2 mount option is deprecated. [ 1008.706934][T16465] XFS: ikeep mount option is deprecated. [ 1008.724041][T16465] xfs: Unknown parameter 'barrier' [ 1008.975679][T16497] loop4: detected capacity change from 0 to 4096 [ 1009.004970][T16497] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1010.134560][T16499] loop3: detected capacity change from 0 to 4096 [ 1010.177449][T16499] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1010.274783][T16508] loop2: detected capacity change from 0 to 2048 [ 1010.295083][ T29] audit: type=1326 audit(1717655017.183:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16502 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e8627cf69 code=0x0 [ 1010.365281][T16508] loop2: p1 < > p3 [ 1010.370539][T16508] loop2: p3 size 134217728 extends beyond EOD, truncated [ 1011.645308][T16524] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1011.987735][T16527] loop4: detected capacity change from 0 to 4096 [ 1012.026676][T16527] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1012.071690][T16534] autofs: Unknown parameter '0x0000000000000000' [ 1012.115489][T16534] loop3: detected capacity change from 0 to 16 [ 1012.167553][T16527] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1012.966935][T16548] loop1: detected capacity change from 0 to 4096 [ 1012.994076][T16548] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1013.172741][T16552] loop4: detected capacity change from 0 to 4096 [ 1013.181480][T16552] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1013.803046][T16559] loop2: detected capacity change from 0 to 2048 [ 1015.213002][ T29] audit: type=1400 audit(1717655022.113:1599): avc: denied { setopt } for pid=16570 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1015.343519][ T29] audit: type=1400 audit(1717655022.223:1600): avc: denied { append } for pid=16570 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1015.807936][T16587] loop2: detected capacity change from 0 to 2048 [ 1015.849822][T16589] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1015.925457][T16585] loop4: detected capacity change from 0 to 2048 [ 1016.070250][T16591] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1016.307130][T16597] autofs: Unknown parameter 'fd0x0000000000000000' [ 1016.412899][T16590] loop1: detected capacity change from 0 to 4096 [ 1016.435045][T16597] loop2: detected capacity change from 0 to 16 [ 1016.469513][T16590] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1016.616672][T16590] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1016.762463][T16601] loop0: detected capacity change from 0 to 4096 [ 1016.780289][T16601] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1017.630833][T16604] loop3: detected capacity change from 0 to 4096 [ 1017.879961][T16604] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1018.017365][ T29] audit: type=1400 audit(1717655024.923:1601): avc: denied { sqpoll } for pid=16611 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1018.319552][T16615] loop1: detected capacity change from 0 to 2048 [ 1018.330516][T16615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1018.994666][T16615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1019.090913][T16637] loop2: detected capacity change from 0 to 512 [ 1019.104950][T16612] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1019.128372][T16634] loop0: detected capacity change from 0 to 1024 [ 1019.139352][T16634] hfsplus: unable to parse mount options [ 1019.185489][T16637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.198264][T16637] ext4 filesystem being mounted at /root/syzkaller-testdir1939248526/syzkaller.Xn5NDN/100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.238345][T14535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.389499][ T29] audit: type=1400 audit(1717655027.583:1602): avc: denied { create } for pid=16647 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1022.535379][T16659] loop3: detected capacity change from 0 to 2048 [ 1022.633753][T14507] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.693013][T16659] GPT:first_usable_lbas don't match. [ 1022.698508][T16659] GPT:34 != 290 [ 1022.702006][T16659] GPT: Use GNU Parted to correct GPT errors. [ 1022.708538][T16659] loop3: p1 p2 p3 [ 1022.819905][T16664] loop0: detected capacity change from 0 to 4096 [ 1022.833743][T16664] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1023.915699][T16671] autofs: Unknown parameter 'fd0x0000000000000000' [ 1024.005261][T16671] loop2: detected capacity change from 0 to 16 [ 1024.600615][T16675] loop3: detected capacity change from 0 to 4096 [ 1024.646642][T16675] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1025.638701][ T5167] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1025.865835][ T5167] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 1025.907540][T16694] loop2: detected capacity change from 0 to 256 [ 1025.908090][ T5167] usb 1-1: config 0 has no interface number 0 [ 1025.988821][ T5167] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.015271][ T5167] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.044528][ T5167] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1026.075560][ T29] audit: type=1800 audit(1717655032.983:1603): pid=16698 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 1026.129096][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.132952][T16694] loop2: detected capacity change from 0 to 2048 [ 1026.191122][ T5167] usb 1-1: config 0 descriptor?? [ 1026.292541][T16694] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1026.334993][T16694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1026.637679][ T5167] logitech-djreceiver 0003:046D:C71B.0005: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input32 [ 1026.804124][T16701] loop1: detected capacity change from 0 to 512 [ 1026.832368][T16701] ext3: Unknown parameter 'smackfstransmute' [ 1026.981513][T16703] loop4: detected capacity change from 0 to 4096 [ 1027.010991][T16703] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1028.154245][ T5167] usb 1-1: USB disconnect, device number 4 [ 1028.354287][T16716] autofs: Unknown parameter 'fd0x0000000000000000' [ 1028.456841][T16716] loop0: detected capacity change from 0 to 16 [ 1028.895697][T16721] loop3: detected capacity change from 0 to 2048 [ 1028.958495][T16721] GPT:first_usable_lbas don't match. [ 1028.964010][T16721] GPT:34 != 290 [ 1028.967488][T16721] GPT: Use GNU Parted to correct GPT errors. [ 1028.973546][T16721] loop3: p1 p2 p3 [ 1029.702834][T16728] loop0: detected capacity change from 0 to 4096 [ 1029.720721][T16728] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1030.274538][T16740] overlayfs: missing 'lowerdir' [ 1032.541651][T16736] loop2: detected capacity change from 0 to 256 [ 1032.565252][T16728] ntfs3: loop0: Failed to read $UpCase (-4). [ 1032.652359][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1032.831247][T16743] loop4: detected capacity change from 0 to 2048 [ 1033.031941][T16752] sg_write: data in/out 2011/14 bytes for SCSI command 0x0-- guessing data in; [ 1033.031941][T16752] program syz-executor.3 not setting count and/or reply_len properly [ 1033.177792][T16743] loop4: detected capacity change from 0 to 256 [ 1033.183989][ T29] audit: type=1800 audit(1717655040.083:1604): pid=16754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1033.328633][T16751] loop0: detected capacity change from 0 to 4096 [ 1033.400299][T16751] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1033.579992][T16743] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1034.752433][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1035.283480][T16769] loop4: detected capacity change from 0 to 16 [ 1035.976890][ T29] audit: type=1400 audit(1717655042.883:1605): avc: denied { read } for pid=16775 comm="syz-executor.2" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1035.987325][ T29] audit: type=1400 audit(1717655042.893:1606): avc: denied { open } for pid=16775 comm="syz-executor.2" path="/sys/kernel/config" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1036.018172][T16774] loop1: detected capacity change from 0 to 4096 [ 1036.083361][ T29] audit: type=1400 audit(1717655042.953:1607): avc: denied { setattr } for pid=16775 comm="syz-executor.2" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1036.265623][T16780] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1037.569798][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1037.789096][T16788] loop3: detected capacity change from 0 to 4096 [ 1037.878331][T16789] loop0: detected capacity change from 0 to 2048 [ 1037.970909][T16788] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1037.978465][T16789] GPT:first_usable_lbas don't match. [ 1037.985342][T16789] GPT:34 != 290 [ 1037.988827][T16789] GPT: Use GNU Parted to correct GPT errors. [ 1037.995718][T16789] loop0: p1 p2 p3 [ 1039.481449][ T29] audit: type=1326 audit(1717655046.383:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f167c47cf69 code=0x0 [ 1039.674243][T16818] autofs4:pid:16818:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 1039.919610][T16817] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1039.942796][T16818] autofs4:pid:16818:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1040.313494][T16824] loop0: detected capacity change from 0 to 16 [ 1041.899438][T16832] sg_write: data in/out 2011/14 bytes for SCSI command 0x0-- guessing data in; [ 1041.899438][T16832] program syz-executor.2 not setting count and/or reply_len properly [ 1042.129711][T16840] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1042.138388][T16840] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1042.149986][T16840] overlayfs: missing 'lowerdir' [ 1042.493747][T16841] loop0: detected capacity change from 0 to 4096 [ 1042.646373][T16841] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1042.936031][ T29] audit: type=1400 audit(1717655049.823:1609): avc: denied { name_bind } for pid=16845 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1043.154880][T16846] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1045.277975][T16883] loop4: detected capacity change from 0 to 2048 [ 1045.339036][T16883] GPT:first_usable_lbas don't match. [ 1045.344632][T16883] GPT:34 != 290 [ 1045.348142][T16883] GPT: Use GNU Parted to correct GPT errors. [ 1045.354296][T16883] loop4: p1 p2 p3 [ 1047.603932][ T29] audit: type=1400 audit(1717655054.494:1610): avc: denied { setattr } for pid=16927 comm="syz-executor.1" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1048.386604][T16939] loop0: detected capacity change from 0 to 4096 [ 1048.414571][T16939] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1048.562458][T16939] ntfs3: loop0: failed to convert "c46c" to iso8859-13 [ 1048.563913][T14780] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1048.837218][T14780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1048.867675][T16932] loop1: detected capacity change from 0 to 32768 [ 1048.884085][T14780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1048.891762][T16932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (16932) [ 1048.910222][T14780] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1048.940503][T16932] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1048.950711][T14780] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1048.950751][T14780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.962022][T14780] usb 3-1: config 0 descriptor?? [ 1049.010361][T16932] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1049.040018][T16932] BTRFS info (device loop1): using free-space-tree [ 1049.205357][T16931] loop4: detected capacity change from 0 to 32768 [ 1049.258243][T16931] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (16931) [ 1049.359656][T16960] loop0: detected capacity change from 0 to 256 [ 1049.389068][T16960] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 1049.482137][T16945] loop3: detected capacity change from 0 to 8192 [ 1049.567733][T16945] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1049.647167][T16945] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1049.702030][T16945] REISERFS (device loop3): using writeback data mode [ 1049.732241][T14535] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1049.794923][T16945] REISERFS warning (device loop3): sh-457 journal_init_dev: journal_init_dev: Cannot open './cgroup': -15 [ 1049.830216][T16945] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 1049.890195][T14780] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1049.909303][T16931] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1049.924316][T14780] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1049.932439][T16931] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1049.966151][T14780] usb 3-1: USB disconnect, device number 9 [ 1049.988734][T16931] BTRFS info (device loop4): using free-space-tree [ 1050.410708][T16980] loop1: detected capacity change from 0 to 4096 [ 1050.466177][T16980] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1050.495685][T16980] ntfs3: loop1: Failed to load $MFTMirr (-22). [ 1051.015459][T16990] loop1: detected capacity change from 0 to 256 [ 1051.038644][T16990] FAT-fs (loop1): Unrecognized mount option "time_offset=0x0000000hash" or missing value [ 1051.060569][T15333] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1051.898735][T16988] loop3: detected capacity change from 0 to 32768 [ 1052.329665][T16988] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names [ 1052.605488][T17011] loop2: detected capacity change from 0 to 40427 [ 1052.613678][T17011] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1052.621455][T17011] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1052.639137][T16988] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 1052.659196][T17011] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1052.700776][T17011] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1052.707932][T17011] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1052.953677][T16988] bcachefs (loop3): alloc_read... done [ 1052.959310][T16988] bcachefs (loop3): stripes_read... done [ 1053.064457][T16988] bcachefs (loop3): snapshots_read... done [ 1053.091047][T16988] bcachefs (loop3): journal_replay... done [ 1053.189863][T16988] bcachefs (loop3): resume_logged_ops... done [ 1053.279517][T16988] bcachefs (loop3): going read-write [ 1053.312538][T16988] bcachefs (loop3): done starting filesystem [ 1053.556685][T14583] bcachefs (loop3): shutting down [ 1053.561752][T14583] bcachefs (loop3): going read-only [ 1053.585475][T14583] bcachefs (loop3): finished waiting for writes to stop [ 1053.647889][T14583] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 1053.684557][T14583] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 1053.729848][T14583] bcachefs (loop3): shutdown complete, journal seq 11 [ 1053.767986][T14583] bcachefs (loop3): marking filesystem clean [ 1054.157032][T14583] bcachefs (loop3): shutdown complete [ 1055.234763][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.241285][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.789539][ T29] audit: type=1326 audit(1717655062.644:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17034 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e8627cf69 code=0x0 [ 1057.746467][T17081] binder: 17080:17081 ioctl c0306201 0 returned -14 [ 1057.797176][ T29] audit: type=1326 audit(1717655064.694:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aff87cf69 code=0x0 [ 1058.567524][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1058.677124][T17091] syz_tun: entered promiscuous mode [ 1059.145209][T17102] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1059.649949][T17105] loop2: detected capacity change from 0 to 1024 [ 1061.318779][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1061.325419][T17093] loop1: detected capacity change from 0 to 32768 [ 1061.397960][T17095] loop0: detected capacity change from 0 to 32768 [ 1061.424206][T17093] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1061.508601][ T29] audit: type=1326 audit(1717655068.394:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167c47cf69 code=0x7ffc0000 [ 1061.533831][ T29] audit: type=1326 audit(1717655068.414:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167c47cf69 code=0x7ffc0000 [ 1061.564268][ T29] audit: type=1326 audit(1717655068.454:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f167c47cf69 code=0x7ffc0000 [ 1061.620823][T17093] XFS (loop1): Ending clean mount [ 1061.625293][ T29] audit: type=1326 audit(1717655068.524:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167c47cf69 code=0x7ffc0000 [ 1061.675394][T17093] XFS (loop1): Quotacheck needed: Please wait. [ 1061.786645][ T29] audit: type=1326 audit(1717655068.524:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167c47cf69 code=0x7ffc0000 [ 1061.842756][ T29] audit: type=1326 audit(1717655068.574:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f167c47cf69 code=0x7ffc0000 [ 1061.868640][T17112] loop4: detected capacity change from 0 to 32768 [ 1061.870403][T17112] XFS: attr2 mount option is deprecated. [ 1061.896122][T17112] XFS: noikeep mount option is deprecated. [ 1061.910324][T17093] XFS (loop1): Quotacheck: Done. [ 1061.937640][ T29] audit: type=1326 audit(1717655068.574:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167c47cf69 code=0x7ffc0000 [ 1061.948525][T17112] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1061.969700][T17095] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 1061.975764][ T29] audit: type=1326 audit(1717655068.584:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f167c47a6e7 code=0x7ffc0000 [ 1062.008003][ T29] audit: type=1326 audit(1717655068.584:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f167c4403b9 code=0x7ffc0000 [ 1062.033336][ T29] audit: type=1326 audit(1717655068.584:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17118 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f167c47cf69 code=0x7ffc0000 [ 1062.067349][T17095] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 1062.097957][T17112] XFS (loop4): Ending clean mount [ 1062.117499][T14535] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1062.144754][T17112] XFS (loop4): Quotacheck needed: Please wait. [ 1062.271580][T17112] XFS (loop4): Quotacheck: Done. [ 1062.302110][T17095] bcachefs (loop0): alloc_read... done [ 1062.345835][T17095] bcachefs (loop0): stripes_read... done [ 1062.364364][T17095] bcachefs (loop0): snapshots_read... done [ 1062.435134][T17095] bcachefs (loop0): going read-write [ 1062.514164][T17095] bcachefs (loop0): journal_replay... [ 1062.634229][T17095] bcachefs (loop0): bch2_journal_replay(): error ERESTARTSYS [ 1062.651622][T17095] bcachefs (loop0): bch2_fs_recovery(): error ERESTARTSYS [ 1062.659365][T17095] bcachefs (loop0): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 1062.670920][T14780] bcachefs (loop0): going read-only [ 1062.676850][T14780] bcachefs (loop0): finished waiting for writes to stop [ 1062.687447][T17095] bcachefs (loop0): shutting down [ 1062.692929][T14780] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 1062.706242][T14780] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 1062.731341][T14780] bcachefs (loop0): unshutdown complete, journal seq 11 [ 1062.740092][T14780] bcachefs (loop0): done going read-only, filesystem not clean [ 1062.803604][T17095] bcachefs (loop0): shutdown complete [ 1063.022264][T17130] loop2: detected capacity change from 0 to 32768 [ 1063.098111][T17151] binder: 17149:17151 ioctl 4018620d 0 returned -22 [ 1063.663981][T17130] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1063.762629][T17130] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 1063.862957][T17130] bcachefs (loop2): alloc_read... done [ 1063.894126][T17130] bcachefs (loop2): stripes_read... done [ 1063.903356][T17130] bcachefs (loop2): snapshots_read... done [ 1063.951430][T17130] bcachefs (loop2): journal_replay... done [ 1063.957953][T17163] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1064.001601][T17130] bcachefs (loop2): resume_logged_ops... done [ 1064.028571][T17130] bcachefs (loop2): going read-write [ 1064.074939][T17130] bcachefs (loop2): done starting filesystem [ 1064.248917][T14507] bcachefs (loop2): shutting down [ 1064.257083][T14507] bcachefs (loop2): going read-only [ 1064.262520][T14507] bcachefs (loop2): finished waiting for writes to stop [ 1064.268607][T15333] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1064.304472][T14507] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 1064.313511][T14507] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 1064.361774][T14507] bcachefs (loop2): shutdown complete, journal seq 9 [ 1064.384741][T14507] bcachefs (loop2): marking filesystem clean [ 1064.572035][T14507] bcachefs (loop2): shutdown complete [ 1065.583696][T17177] loop0: detected capacity change from 0 to 40427 [ 1065.663102][T17177] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1065.672121][T17177] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1065.861678][T17183] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1066.282216][T17177] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1066.311575][T17177] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1066.331725][T17177] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1066.338841][T17177] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1067.714270][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1067.714288][ T29] audit: type=1800 audit(1717655074.614:1632): pid=17205 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1958 res=0 errno=0 [ 1068.942619][T17213] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1068.994850][T17217] loop3: detected capacity change from 0 to 2048 [ 1069.117955][T17217] Alternate GPT is invalid, using primary GPT. [ 1069.155310][T17217] loop3: p2 p3 p7 [ 1069.797357][T17224] loop4: detected capacity change from 0 to 40427 [ 1069.806313][T17224] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1069.814184][T17224] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1069.842089][T17224] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1069.897306][T17224] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1069.908175][ T29] audit: type=1800 audit(1717655076.814:1633): pid=17234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 1070.068909][T17224] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1070.076079][T17224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1175.073755][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1175.080753][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3835/1:b..l [ 1175.089595][ C0] rcu: (detected by 0, t=10502 jiffies, g=122697, q=365 ncpus=2) [ 1175.097419][ C0] task:kworker/u8:10 state:R running task stack:22752 pid:3835 tgid:3835 ppid:2 flags:0x00004000 [ 1175.111200][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1175.119060][ C0] Call Trace: [ 1175.122349][ C0] [ 1175.125296][ C0] __schedule+0xf15/0x5d00 [ 1175.129752][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1175.134547][ C0] ? enqueue_to_backlog+0x480/0xdf0 [ 1175.139768][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1175.144562][ C0] ? __pfx___schedule+0x10/0x10 [ 1175.149434][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1175.154661][ C0] ? mark_held_locks+0x9f/0xe0 [ 1175.159451][ C0] preempt_schedule_irq+0x51/0x90 [ 1175.164502][ C0] irqentry_exit+0x36/0x90 [ 1175.168935][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1175.174945][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 1175.180259][ C0] Code: c1 05 9a af 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 1175.199896][ C0] RSP: 0018:ffffc9000bd37a70 EFLAGS: 00000206 [ 1175.205986][ C0] RAX: dffffc0000000000 RBX: 1ffff920017a6f50 RCX: 0000000095ff7145 [ 1175.213975][ C0] RDX: 0000000000000001 RSI: ffffffff8b2cb260 RDI: ffffffff8b900180 [ 1175.221968][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284d658 [ 1175.229959][ C0] R10: ffffffff9426b2c7 R11: 0000000000000003 R12: 0000000000000000 [ 1175.237946][ C0] R13: 0000000000000000 R14: ffffffff8dbb1920 R15: 0000000000000000 [ 1175.245942][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1175.251010][ C0] ? batadv_iv_ogm_schedule_buff+0x75c/0x1500 [ 1175.257107][ C0] ? __pfx_lock_release+0x10/0x10 [ 1175.262164][ C0] batadv_iv_ogm_schedule_buff+0x5ac/0x1500 [ 1175.268092][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500 [ 1175.274204][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 1175.280568][ C0] ? batadv_send_skb_packet+0x56c/0x6b0 [ 1175.286135][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 1175.293191][ C0] process_one_work+0x9fb/0x1b60 [ 1175.298153][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1175.305726][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1175.311121][ C0] ? assign_work+0x1a0/0x250 [ 1175.315742][ C0] worker_thread+0x6c8/0xf70 [ 1175.320354][ C0] ? __kthread_parkme+0x148/0x220 [ 1175.325401][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1175.330531][ C0] kthread+0x2c1/0x3a0 [ 1175.334622][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.339850][ C0] ? __pfx_kthread+0x10/0x10 [ 1175.344484][ C0] ret_from_fork+0x45/0x80 [ 1175.348938][ C0] ? __pfx_kthread+0x10/0x10 [ 1175.353559][ C0] ret_from_fork_asm+0x1a/0x30 [ 1175.358362][ C0] [ 1175.361406][ C0] rcu: rcu_preempt kthread starved for 10528 jiffies! g122697 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1175.372716][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1175.382702][ C0] rcu: RCU grace-period kthread stack dump: [ 1175.388604][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1175.400366][ C0] Call Trace: [ 1175.403660][ C0] [ 1175.406614][ C0] __schedule+0xf15/0x5d00 [ 1175.411069][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1175.416309][ C0] ? __pfx___schedule+0x10/0x10 [ 1175.421194][ C0] ? preempt_count_add+0x47/0x150 [ 1175.426257][ C0] schedule+0xe7/0x350 [ 1175.430358][ C0] schedule_timeout+0x136/0x2a0 [ 1175.435234][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1175.440638][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1175.445952][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1175.451783][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 1175.457272][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1175.462064][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1175.467383][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1175.473216][ C0] rcu_gp_kthread+0x271/0x380 [ 1175.477924][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1175.483155][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1175.488389][ C0] ? __kthread_parkme+0x148/0x220 [ 1175.493441][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1175.498668][ C0] kthread+0x2c1/0x3a0 [ 1175.502762][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.507987][ C0] ? __pfx_kthread+0x10/0x10 [ 1175.512602][ C0] ret_from_fork+0x45/0x80 [ 1175.517043][ C0] ? __pfx_kthread+0x10/0x10 [ 1175.521656][ C0] ret_from_fork_asm+0x1a/0x30 [ 1175.526464][ C0] [ 1175.529499][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1175.535840][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1175.541064][ C1] NMI backtrace for cpu 1 [ 1175.541083][ C1] CPU: 1 PID: 17234 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00064-g71d7b52cc33b #0 [ 1175.541107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1175.541119][ C1] RIP: 0010:write_comp_data+0x34/0x90 [ 1175.541144][ C1] Code: 48 8b 15 ff fa 75 7e 65 8b 05 00 fb 75 7e a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 82 1c 16 00 00 85 c0 74 4f 8b 82 f8 15 00 00 <83> f8 03 75 44 48 8b 82 00 16 00 00 8b 92 fc 15 00 00 48 8b 38 48 [ 1175.541164][ C1] RSP: 0018:ffffc90003487c90 EFLAGS: 00000246 [ 1175.541182][ C1] RAX: 0000000000000002 RBX: 00007f167d13f0c4 RCX: ffffffff81337724 [ 1175.541197][ C1] RDX: ffff8880287d5a00 RSI: 0000000000000000 RDI: 0000000000000007 [ 1175.541211][ C1] RBP: 00007f167d13ed80 R08: 0000000000000007 R09: 0000000000000000 [ 1175.541224][ C1] R10: 00007f167d13f0c4 R11: 0000000000000000 R12: 0000000000000000 [ 1175.541238][ C1] R13: 00007f167d13ed80 R14: ffff8880287d7340 R15: 0000000000000000 [ 1175.541253][ C1] FS: 00007f167d13f6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1175.541275][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.541290][ C1] CR2: 00007f167d13ef80 CR3: 0000000077db8000 CR4: 00000000003506f0 [ 1175.541305][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1175.541318][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1175.541332][ C1] Call Trace: [ 1175.541340][ C1] [ 1175.541348][ C1] ? show_regs+0x8c/0xa0 [ 1175.541376][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1175.541401][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1175.541427][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1175.541455][ C1] ? write_comp_data+0x34/0x90 [ 1175.541474][ C1] ? default_do_nmi+0x6a/0x160 [ 1175.541500][ C1] ? exc_nmi+0x170/0x1e0 [ 1175.541523][ C1] ? end_repeat_nmi+0xf/0x53 [ 1175.541550][ C1] ? fpu__restore_sig+0xd4/0x180 [ 1175.541575][ C1] ? write_comp_data+0x34/0x90 [ 1175.541594][ C1] ? write_comp_data+0x34/0x90 [ 1175.541613][ C1] ? write_comp_data+0x34/0x90 [ 1175.541632][ C1] [ 1175.541639][ C1] [ 1175.541646][ C1] fpu__restore_sig+0xd4/0x180 [ 1175.541672][ C1] restore_sigcontext+0x4ca/0x6a0 [ 1175.541697][ C1] ? __pfx_restore_sigcontext+0x10/0x10 [ 1175.541726][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.541752][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1175.541782][ C1] __do_sys_rt_sigreturn+0x138/0x230 [ 1175.541807][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1175.541834][ C1] do_syscall_64+0xcd/0x250 [ 1175.541861][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.541886][ C1] RIP: 0033:0x7f167c47cf67 [ 1175.541901][ C1] Code: 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 [ 1175.541921][ C1] RSP: 002b:00007f167d13f178 EFLAGS: 00000246 [ 1175.541937][ C1] RAX: 00000000000000ca RBX: 00007f167c5b3f88 RCX: 00007f167c47cf69 [ 1175.541951][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f167c5b3f88 [ 1175.541965][ C1] RBP: 00007f167c5b3f80 R08: 00007f167d13f6c0 R09: 00007f167d13f6c0 [ 1175.541980][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f167c5b3f8c [ 1175.541993][ C1] R13: 000000000000000b R14: 00007ffc69266140 R15: 00007ffc69266228 [ 1175.542010][ C1]