last executing test programs: 12.493295005s ago: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@udp=r0}, 0x20) r2 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1869, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) 12.067483153s ago: executing program 0: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x2039c1f, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11.495642077s ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8}}]}}]}, 0x3c}}, 0x0) 7.662433509s ago: executing program 0: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r3, 0x10, "347362998fdd1c98175d43aae4d3bfae"}, &(0x7f0000000340)=0x18) 7.654287384s ago: executing program 2: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="d8776a1a6020c669718694128ee57e3a"}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0xc0096616, 0x0) 7.535563669s ago: executing program 0: r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffff1f, 0x12, r1, 0x0) mbind(&(0x7f0000199000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 7.50945966s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000940)=""/40, 0x28}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000a40)=""/155, 0x9b}, {&(0x7f0000001c40)=""/4103, 0x1007}, {&(0x7f0000001b80)=""/40, 0x28}, {&(0x7f0000000b00)=""/110, 0x6e}], 0x6}}], 0x3, 0x0, 0x0) 7.365972013s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000002c0)={[{@dioread_lock}, {@usrquota}, {@errors_continue}, {@init_itable}, {@grpquota}, {@grpjquota, 0x2e}, {@resuid}, {@errors_remount}, {@nolazytime}, {@nomblk_io_submit}], [], 0x2c}, 0x84, 0x4ac, &(0x7f0000000740)="$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") syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000200)='./file0/../file0/file0\x00', 0x3210010, &(0x7f0000000500)={[{@nobarrier}, {}, {@order_strict}, {@order_strict}, {}, {}, {@discard}, {@nodiscard}, {@nobarrier}], [], 0x2c}, 0x5, 0xed7, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pwrite64(r0, &(0x7f0000000000)="1f", 0x1, 0x7fffffe) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 7.328013043s ago: executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 7.247744461s ago: executing program 3: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./file1\x00', 0x18005, &(0x7f0000000080)={[{@usebackuproot}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nobarrier}, {@usebackuproot}, {@ssd_spread}, {@space_cache_v1}, {@datasum}]}, 0x5, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x2d, 0x2, @tid=r1}, &(0x7f0000000300)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x5, 0x4002) open(0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x1, 0x27, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000400)=""/58, 0x3a}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='btrfs\x00', 0x0, 0x0) 6.329631706s ago: executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000440)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.473093508s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x20005) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x0, r0, 0x2}) copy_file_range(r3, 0x0, r2, &(0x7f00000000c0)=0x10000, 0x6, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000a40)={"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"}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000003850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRES16, @ANYBLOB="0100001f1a57b800fcffffffffffffff000000000000", @ANYRES32=r9], 0x20}}, 0x4004001) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000efff000000000000000040009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000005000000001400080008000000", @ANYRES32=0x0, @ANYBLOB="c604001000dfffff11f49477ee494c5a0000000072fd65ddee768df316509ff7762e41f773df2292a9ced46988934966e9326784cef4d7542559725ac63c15b8fc2a6bd65ad46083d23ba72c3f88e7e9665e24bb75c9"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) 5.055545613s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x14}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) 4.908088583s ago: executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000380)={'security\x00', 0x0, [0x9, 0x7bbfb561, 0x8000, 0x8, 0x4]}, &(0x7f0000000400)=0x54) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00008e3000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000044d564b"]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) io_setup(0x4, &(0x7f0000002c40)=0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000001500)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000001080000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000002c0)=r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 4.904603296s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) lseek(r1, 0x0, 0x0) 3.845092734s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x3c}}, 0x0) 3.523768353s ago: executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.213264691s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08009f000000400d080026000816000008009f00060000000800570038"], 0x3c}}, 0x0) 3.037362613s ago: executing program 3: r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.158836276s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000010) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x45, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) close(r0) 1.58118617s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x20005) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x0, r0, 0x2}) copy_file_range(r3, 0x0, r2, &(0x7f00000000c0)=0x10000, 0x6, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000a40)={"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"}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000003850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRES16, @ANYBLOB="0100001f1a57b800fcffffffffffffff000000000000", @ANYRES32=r9], 0x20}}, 0x4004001) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000efff000000000000000040009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000005000000001400080008000000", @ANYRES32=0x0, @ANYBLOB="c604001000dfffff11f49477ee494c5a0000000072fd65ddee768df316509ff7762e41f773df2292a9ced46988934966e9326784cef4d7542559725ac63c15b8fc2a6bd65ad46083d23ba72c3f88e7e9665e24bb75c9"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) 970.180337ms ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x210, 0x20a, 0x278, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x100, 0x0, {0x1800}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @local, [], [], 'vlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 932.488739ms ago: executing program 3: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@gquota}, {}]}, 0x1, 0x980a, &(0x7f00000130c0)="$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") lsetxattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200), &(0x7f0000000080)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000880)=ANY=[], 0xbfe, 0x0) 815.32233ms ago: executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0e85667, &(0x7f0000000040)) 685.410185ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000012c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0}) 434.456446ms ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 211.609613ms ago: executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x40c2, 0xd0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x101041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000004300)) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x80000000, 0x7ff) open(0x0, 0x2c2602, 0x160) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000003800), 0x11, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xae) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000780)=[{}]) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) getpgid(r1) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) fstat(0xffffffffffffffff, &(0x7f0000000d00)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 182.535319ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000580)) 87.222211ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xa1, 0x0, &(0x7f0000000000)) 0s ago: executing program 0: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[], 0x81, 0x14f7, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): er.s0VBIJ/24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.122334][ T5536] ntfs3: loop1: ino=3, Correct links count -> 2. [ 87.269046][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.307842][ T5535] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 87.358210][ T5535] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 87.384979][ T5536] ntfs3: loop1: failed to convert "0080" to cp1255 [ 87.400286][ T5536] ntfs3: loop1: failed to convert name for inode 1e. [ 87.417097][ T5535] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 87.435936][ T5535] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 87.467810][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.508637][ T5535] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 87.543567][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.552173][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.568888][ T5486] bridge_slave_0: entered allmulticast mode [ 87.576081][ T5486] bridge_slave_0: entered promiscuous mode [ 87.614168][ T5530] loop4: detected capacity change from 0 to 32768 [ 87.657888][ T5125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.671108][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.685729][ T5530] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 87.709631][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.717768][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.725375][ T5486] bridge_slave_1: entered allmulticast mode [ 87.734964][ T5486] bridge_slave_1: entered promiscuous mode [ 87.775914][ T5530] XFS (loop4): Ending clean mount [ 87.856149][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.867475][ T5112] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 87.981464][ T5486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.998767][ T5123] Bluetooth: hci3: command tx timeout [ 88.020112][ T5486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.123450][ T5486] team0: Port device team_slave_0 added [ 88.146088][ T5486] team0: Port device team_slave_1 added [ 88.187466][ T5568] loop3: detected capacity change from 0 to 8 [ 88.271761][ T51] bridge_slave_1: left allmulticast mode [ 88.279795][ T51] bridge_slave_1: left promiscuous mode [ 88.292335][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.307018][ T51] bridge_slave_0: left allmulticast mode [ 88.317156][ T51] bridge_slave_0: left promiscuous mode [ 88.333841][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.497665][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.515401][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.532691][ T51] bond0 (unregistering): Released all slaves [ 89.560977][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.568197][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.594376][ T5486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.629873][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.636854][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.673948][ T5486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.750615][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.801223][ T5585] syz_tun: entered promiscuous mode [ 89.807100][ T5585] macvtap1: entered promiscuous mode [ 89.818727][ T5585] macvtap1: entered allmulticast mode [ 89.824279][ T5585] syz_tun: entered allmulticast mode [ 89.876615][ T5377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.974690][ T5377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.010349][ T5377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.042509][ T5377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.079046][ T5123] Bluetooth: hci3: command tx timeout [ 90.224604][ T5601] loop3: detected capacity change from 0 to 8 [ 90.225240][ T5486] hsr_slave_0: entered promiscuous mode [ 90.261119][ T5486] hsr_slave_1: entered promiscuous mode [ 90.273494][ T5486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.297377][ T5486] Cannot create hsr debugfs directory [ 90.477635][ T51] hsr_slave_0: left promiscuous mode [ 90.528254][ T51] hsr_slave_1: left promiscuous mode [ 90.540862][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.552968][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.595291][ T5589] loop1: detected capacity change from 0 to 32768 [ 90.628367][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.636524][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.905159][ T5589] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.007685][ T51] veth1_macvtap: left promiscuous mode [ 91.210001][ T51] veth0_macvtap: left promiscuous mode [ 91.300924][ T51] veth1_vlan: left promiscuous mode [ 91.327508][ T51] veth0_vlan: left promiscuous mode [ 91.334906][ T5589] XFS (loop1): Ending clean mount [ 91.412390][ T5622] loop3: detected capacity change from 0 to 256 [ 91.420279][ T5111] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.496901][ T5622] FAT-fs (loop3): Directory bread(block 64) failed [ 91.504903][ T5622] FAT-fs (loop3): Directory bread(block 65) failed [ 91.527680][ T5622] FAT-fs (loop3): Directory bread(block 66) failed [ 91.545049][ T5622] FAT-fs (loop3): Directory bread(block 67) failed [ 91.559658][ T5622] FAT-fs (loop3): Directory bread(block 68) failed [ 91.574450][ T5622] FAT-fs (loop3): Directory bread(block 69) failed [ 91.588242][ T5622] FAT-fs (loop3): Directory bread(block 70) failed [ 91.595214][ T5622] FAT-fs (loop3): Directory bread(block 71) failed [ 91.605235][ T5622] FAT-fs (loop3): Directory bread(block 72) failed [ 91.628457][ T5622] FAT-fs (loop3): Directory bread(block 73) failed [ 91.750136][ T5624] openvswitch: netlink: Message has 4 unknown bytes. [ 91.911650][ T5628] loop1: detected capacity change from 0 to 4096 [ 91.921011][ T5628] ntfs3: loop1: ino=3, Correct links count -> 2. [ 92.069875][ T51] team0 (unregistering): Port device team_slave_1 removed [ 92.077294][ T5628] ntfs3: loop1: failed to convert "0080" to cp1255 [ 92.096859][ T5628] ntfs3: loop1: failed to convert name for inode 1e. [ 92.124133][ T51] team0 (unregistering): Port device team_slave_0 removed [ 92.168645][ T5123] Bluetooth: hci3: command tx timeout [ 92.507693][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.526124][ T5632] syz_tun: entered promiscuous mode [ 92.543229][ T5632] macvtap1: entered promiscuous mode [ 92.568552][ T5632] macvtap1: entered allmulticast mode [ 92.582401][ T5632] syz_tun: entered allmulticast mode [ 92.948522][ T5645] loop3: detected capacity change from 0 to 32768 [ 92.965395][ T5645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5645) [ 92.999289][ T5645] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.009786][ T5645] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 93.018581][ T5645] BTRFS info (device loop3): using free-space-tree [ 93.092030][ T5377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.275256][ T5377] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.298862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.142080][ T5125] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.176156][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.183285][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.281751][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.288942][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.308802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.460078][ T5671] openvswitch: netlink: Message has 4 unknown bytes. [ 94.668015][ T5679] loop3: detected capacity change from 0 to 8 [ 95.855476][ T5486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.913631][ T5486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.956389][ T5486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.983402][ T5693] loop3: detected capacity change from 0 to 64 [ 96.031849][ T5486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.148842][ T5377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.300537][ T5675] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.314514][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.332721][ T5675] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 96.356887][ T5698] syz_tun: entered promiscuous mode [ 96.362389][ T5698] macvtap1: entered promiscuous mode [ 96.368352][ T5698] macvtap1: entered allmulticast mode [ 96.373824][ T5698] syz_tun: entered allmulticast mode [ 96.401763][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.419254][ T5701] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 96.525485][ T5377] veth0_vlan: entered promiscuous mode [ 96.584766][ T5377] veth1_vlan: entered promiscuous mode [ 96.622271][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.662897][ T5377] veth0_macvtap: entered promiscuous mode [ 96.677223][ T5377] veth1_macvtap: entered promiscuous mode [ 96.689874][ T5486] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.710668][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.717828][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.737793][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.744969][ T5198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.763120][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.775612][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.790196][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.801196][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.811245][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.825552][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.842847][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.866117][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.876780][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.887740][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.898487][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.910444][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.921116][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.933715][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.957997][ T5377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.970494][ T5377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.979397][ T5377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.988215][ T5377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.135725][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.153160][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.224321][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.251259][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.292787][ T5717] binder: 5715:5717 ioctl c00c620f 0 returned -14 [ 97.352611][ T5486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.467395][ T5486] veth0_vlan: entered promiscuous mode [ 97.525438][ T5486] veth1_vlan: entered promiscuous mode [ 97.590871][ T5730] loop2: detected capacity change from 0 to 8 [ 97.630591][ T5486] veth0_macvtap: entered promiscuous mode [ 97.654765][ T5486] veth1_macvtap: entered promiscuous mode [ 97.692164][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.711731][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.736369][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.756527][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.814574][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.839239][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.885098][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.895840][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.919339][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.628156][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.700903][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.762741][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.797841][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.814843][ T5744] loop4: detected capacity change from 0 to 4096 [ 98.822146][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.827355][ T5744] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 98.833978][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.852143][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.862773][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.912528][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.955361][ T5486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.980589][ T5486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.997341][ T5486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.011731][ T5486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.201861][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.224318][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.322291][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.339403][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.532468][ T5778] loop0: detected capacity change from 0 to 512 [ 99.569007][ T5778] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 5: invalid block bitmap [ 99.617967][ T5778] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 99.648136][ T5778] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 3 (level 2) [ 99.670172][ T5778] EXT4-fs (loop0): 1 orphan inode deleted [ 99.676270][ T5778] EXT4-fs (loop0): 1 truncate cleaned up [ 99.694552][ T5778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.753859][ T5778] EXT4-fs warning (device loop0): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 99.907126][ T5486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.194637][ T5813] loop2: detected capacity change from 0 to 1024 [ 100.234058][ T5813] EXT4-fs: Ignoring removed orlov option [ 100.247296][ T5813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.252272][ T5807] loop0: detected capacity change from 0 to 4096 [ 100.307997][ T5807] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.332699][ T5822] loop3: detected capacity change from 0 to 512 [ 100.345594][ T5807] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 100.358967][ T5822] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap [ 100.363543][ T5813] EXT4-fs (loop2): Test dummy encryption mode enabled [ 100.393214][ T5822] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 100.409460][ T5813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.429270][ T5822] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 3 (level 2) [ 100.452922][ T5831] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.473102][ T5833] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 100.480850][ T5833] PKCS7: Only support pkcs7_signedData type [ 100.484405][ T5822] EXT4-fs (loop3): 1 orphan inode deleted [ 100.513555][ T5822] EXT4-fs (loop3): 1 truncate cleaned up [ 100.527345][ T5822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.566959][ T5822] EXT4-fs warning (device loop3): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 100.651569][ T5125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.778445][ T5839] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 100.990239][ T5377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.132458][ T5850] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.144695][ T5850] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.155563][ T5850] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 101.166582][ T5850] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 101.178407][ T5850] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.404672][ T5198] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.621431][ T5198] usb 3-1: descriptor type invalid, skip [ 101.627384][ T5198] usb 3-1: descriptor type invalid, skip [ 101.636682][ T5198] usb 3-1: descriptor type invalid, skip [ 101.642700][ T5198] usb 3-1: descriptor type invalid, skip [ 101.656068][ T5198] usb 3-1: descriptor type invalid, skip [ 101.669391][ T5198] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 101.695810][ T5198] usb 3-1: New USB device found, idVendor=03fc, idProduct=05d8, bcdDevice= 0.40 [ 101.708805][ T5198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.717106][ T5198] usb 3-1: Product: syz [ 101.726987][ T5198] usb 3-1: Manufacturer: syz [ 101.737977][ T5198] usb 3-1: SerialNumber: syz [ 101.758959][ T5868] loop1: detected capacity change from 0 to 32768 [ 101.772369][ T5868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5868) [ 101.790776][ T5868] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.801108][ T5868] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 101.802740][ T5198] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 101.809906][ T5868] BTRFS info (device loop1): using free-space-tree [ 102.085580][ T5198] usb 3-1: USB disconnect, device number 2 [ 103.087135][ T5111] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.332223][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.672977][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.803394][ T5935] loop2: detected capacity change from 0 to 512 [ 103.862238][ T5929] loop3: detected capacity change from 0 to 32768 [ 103.870601][ T5929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5929) [ 103.873556][ T5935] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 5: invalid block bitmap [ 103.909666][ T5929] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.924644][ T5929] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 103.933472][ T5929] BTRFS info (device loop3): using free-space-tree [ 103.953239][ T5935] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 103.966503][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.980423][ T5935] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 3 (level 2) [ 104.033874][ T5935] EXT4-fs (loop2): 1 orphan inode deleted [ 104.056754][ T5935] EXT4-fs (loop2): 1 truncate cleaned up [ 104.082782][ T5935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.185505][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.236003][ T5935] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 105.053117][ T5377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.229248][ T35] bridge_slave_1: left allmulticast mode [ 105.234938][ T35] bridge_slave_1: left promiscuous mode [ 105.252838][ T5125] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.306542][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.350837][ T35] bridge_slave_0: left allmulticast mode [ 105.356530][ T35] bridge_slave_0: left promiscuous mode [ 105.385403][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.387593][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.410355][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.418584][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.439188][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.448326][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.455701][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.190186][ T6001] loop1: detected capacity change from 0 to 256 [ 106.318862][ T6001] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 106.847415][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.883236][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.896590][ T35] bond0 (unregistering): Released all slaves [ 107.052647][ T5111] syz_tun (unregistering): left allmulticast mode [ 107.447971][ T6009] loop4: detected capacity change from 0 to 32768 [ 107.461739][ T6009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6009) [ 107.501680][ T6009] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.511973][ T6009] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 107.518673][ T5123] Bluetooth: hci3: command tx timeout [ 107.521258][ T6009] BTRFS info (device loop4): using free-space-tree [ 107.605797][ T35] hsr_slave_0: left promiscuous mode [ 107.629237][ T35] hsr_slave_1: left promiscuous mode [ 107.654360][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.691270][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.743635][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.792986][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.885678][ T6035] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 107.893957][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.903375][ T6035] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 107.919893][ T35] veth1_macvtap: left promiscuous mode [ 107.925454][ T35] veth0_macvtap: left promiscuous mode [ 107.931123][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.943280][ T35] veth1_vlan: left promiscuous mode [ 107.948912][ T35] veth0_vlan: left promiscuous mode [ 108.784266][ T5112] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.939938][ T6048] loop3: detected capacity change from 0 to 2048 [ 108.953808][ T6048] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.006747][ T6048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.138615][ T6048] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 109.190715][ T6048] EXT4-fs (loop3): Remounting filesystem read-only [ 109.260124][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.282369][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.294278][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.305563][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.316380][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.324081][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.335962][ T5125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.359442][ T6053] loop4: detected capacity change from 0 to 4096 [ 109.372957][ T6053] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 109.445713][ T6053] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 109.598764][ T5116] Bluetooth: hci3: command tx timeout [ 109.688337][ T29] audit: type=1804 audit(1717621868.691:74): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4031105570/syzkaller.DqZFs0/77/bus/bus" dev="loop4" ino=33 res=1 errno=0 [ 109.759918][ T2876] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 109.819533][ T35] team0 (unregistering): Port device team_slave_1 removed [ 109.866091][ T35] team0 (unregistering): Port device team_slave_0 removed [ 110.161204][ T5166] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.352485][ T5166] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 110.364242][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.381149][ T5166] usb 5-1: config 0 descriptor?? [ 110.646015][ T6074] loop3: detected capacity change from 0 to 512 [ 110.683426][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 110.757679][ T6074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.772084][ T6074] ext4 filesystem being mounted at /root/syzkaller-testdir387471391/syzkaller.s0VBIJ/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.820986][ T5166] usb 5-1: Cannot set MAC address [ 110.826405][ T5166] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 110.845576][ T5166] usb 5-1: USB disconnect, device number 2 [ 111.026997][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.042937][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.050959][ T5983] bridge_slave_0: entered allmulticast mode [ 111.065303][ T5983] bridge_slave_0: entered promiscuous mode [ 111.106713][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.125648][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.133750][ T5983] bridge_slave_1: entered allmulticast mode [ 111.143394][ T5983] bridge_slave_1: entered promiscuous mode [ 111.199750][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.263134][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.303428][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.362572][ T5125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.384362][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.417774][ T6055] chnl_net:caif_netlink_parms(): no params data found [ 111.439276][ T5116] Bluetooth: hci0: command tx timeout [ 111.506401][ T5983] team0: Port device team_slave_0 added [ 111.573445][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.607646][ T6092] loop4: detected capacity change from 0 to 1024 [ 111.630839][ T5983] team0: Port device team_slave_1 added [ 111.643396][ T6092] hfsplus: bad catalog file entry [ 111.644801][ T6095] loop2: detected capacity change from 0 to 256 [ 111.653425][ T6092] hfsplus: failed to load root directory [ 111.678730][ T5116] Bluetooth: hci3: command tx timeout [ 111.696448][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.720518][ T6096] Invalid ELF header len 1 [ 111.748143][ T29] audit: type=1800 audit(1717621870.761:75): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048608 res=0 errno=0 [ 111.796868][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.821138][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.871087][ T6093] Zero length message leads to an empty skb [ 111.879647][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.914952][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.927271][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.954693][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.995113][ T6101] ip6gretap0: entered promiscuous mode [ 112.004671][ T6101] ip6gretap0: left promiscuous mode [ 112.054928][ T6104] loop3: detected capacity change from 0 to 2048 [ 112.070570][ T6104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.204431][ T5983] hsr_slave_0: entered promiscuous mode [ 112.218415][ T5983] hsr_slave_1: entered promiscuous mode [ 112.251367][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.261070][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.269810][ T6055] bridge_slave_0: entered allmulticast mode [ 112.276769][ T6055] bridge_slave_0: entered promiscuous mode [ 112.323280][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.339130][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.346395][ T6055] bridge_slave_1: entered allmulticast mode [ 112.365822][ T6055] bridge_slave_1: entered promiscuous mode [ 112.524172][ T6121] loop3: detected capacity change from 0 to 1024 [ 112.550932][ T35] bridge_slave_1: left allmulticast mode [ 112.556735][ T35] bridge_slave_1: left promiscuous mode [ 112.574570][ T6121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.598654][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.629493][ T35] bridge_slave_0: left allmulticast mode [ 112.635270][ T35] bridge_slave_0: left promiscuous mode [ 112.641237][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.919960][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 112.937564][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 112.953095][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 112.965821][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 112.980925][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 112.996397][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 113.009626][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 113.021485][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 113.033737][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 113.048409][ T5125] EXT4-fs error (device loop3): ext4_empty_dir:3083: inode #11: comm syz-executor.3: invalid size [ 113.141905][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.158935][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.173275][ T35] bond0 (unregistering): Released all slaves [ 113.195454][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.280752][ T5125] syz_tun (unregistering): left allmulticast mode [ 113.351561][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.433764][ T5125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.518759][ T5116] Bluetooth: hci0: command tx timeout [ 113.598184][ T6055] team0: Port device team_slave_0 added [ 113.746673][ T6055] team0: Port device team_slave_1 added [ 113.759053][ T5116] Bluetooth: hci3: command tx timeout [ 113.794602][ T35] hsr_slave_0: left promiscuous mode [ 113.807171][ T35] hsr_slave_1: left promiscuous mode [ 113.835488][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.847227][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.872753][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.885629][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.951349][ T35] veth1_macvtap: left promiscuous mode [ 113.962706][ T35] veth0_macvtap: left promiscuous mode [ 113.974401][ T35] veth1_vlan: left promiscuous mode [ 113.985642][ T35] veth0_vlan: left promiscuous mode [ 114.165195][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.175111][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.183273][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.195248][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.203881][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 114.213420][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.254244][ T6133] loop4: detected capacity change from 0 to 40427 [ 114.263603][ T6133] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 114.273085][ T6133] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.286257][ T6133] F2FS-fs (loop4): invalid crc value [ 114.306800][ T6133] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.389453][ T6133] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.396586][ T6133] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.475413][ T6143] UBIFS error (pid: 6143): cannot open "./file0", error -22 [ 114.570611][ T2906] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 114.590062][ T2906] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 114.775523][ T35] team0 (unregistering): Port device team_slave_1 removed [ 114.822544][ T35] team0 (unregistering): Port device team_slave_0 removed [ 115.318602][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.325571][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.351413][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.358376][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.375810][ T6148] loop2: detected capacity change from 0 to 1024 [ 115.384643][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.395035][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.421359][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.440293][ T6148] hfsplus: bad catalog file entry [ 115.445458][ T6148] hfsplus: failed to load root directory [ 115.603875][ T5123] Bluetooth: hci0: command tx timeout [ 115.636727][ T6055] hsr_slave_0: entered promiscuous mode [ 115.657498][ T6055] hsr_slave_1: entered promiscuous mode [ 115.662027][ T6154] loop4: detected capacity change from 0 to 64 [ 115.678943][ T6055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.686584][ T6055] Cannot create hsr debugfs directory [ 115.805185][ T5112] hfs: request for non-existent node 131072 in B*Tree [ 115.822344][ T6156] Invalid ELF header len 1 [ 115.975003][ T6162] loop2: detected capacity change from 0 to 256 [ 116.030230][ T29] audit: type=1800 audit(1717621875.051:76): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048609 res=0 errno=0 [ 116.158182][ T6137] chnl_net:caif_netlink_parms(): no params data found [ 116.194886][ T6169] loop4: detected capacity change from 0 to 2048 [ 116.213363][ T6171] loop2: detected capacity change from 0 to 512 [ 116.228215][ T6169] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.238614][ T5123] Bluetooth: hci4: command tx timeout [ 116.255742][ T6171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000800000000 r/w without journal. Quota mode: writeback. [ 116.276143][ T6171] ext4 filesystem being mounted at /root/syzkaller-testdir1362905415/syzkaller.M375oI/34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.317986][ T5983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.406213][ T5983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.432630][ T5983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.495884][ T5377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000800000000. [ 116.520601][ T5983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.526194][ T6182] 9pnet_fd: p9_fd_create_unix (6182): problem connecting socket: ./file0: -111 [ 116.591892][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.605953][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.626030][ T6137] bridge_slave_0: entered allmulticast mode [ 116.634223][ T6137] bridge_slave_0: entered promiscuous mode [ 116.643512][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.650743][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.657928][ T6137] bridge_slave_1: entered allmulticast mode [ 116.666054][ T6137] bridge_slave_1: entered promiscuous mode [ 116.766803][ T6137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.797904][ T6137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.822186][ T6192] Invalid ELF header len 1 [ 116.892983][ T6137] team0: Port device team_slave_0 added [ 116.933303][ T6137] team0: Port device team_slave_1 added [ 117.032948][ T6055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.057349][ T6137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.064559][ T6137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.098713][ T6137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.127357][ T6055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 117.146852][ T6201] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.194477][ T6137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.207006][ T6137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.242316][ T6137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.260874][ T6055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.273079][ T6055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.362144][ T6137] hsr_slave_0: entered promiscuous mode [ 117.370202][ T6137] hsr_slave_1: entered promiscuous mode [ 117.376397][ T6137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.384730][ T6137] Cannot create hsr debugfs directory [ 117.615622][ T6211] loop2: detected capacity change from 0 to 512 [ 117.627776][ T6211] EXT4-fs (loop2): filesystem is read-only [ 117.642460][ T6211] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 117.666445][ T6211] EXT4-fs (loop2): filesystem is read-only [ 117.672637][ T6211] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.679626][ T5123] Bluetooth: hci0: command tx timeout [ 117.692443][ T6211] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 64: padding at end of block bitmap is not set [ 117.710148][ T6211] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 117.720856][ T6211] EXT4-fs (loop2): 1 orphan inode deleted [ 117.728085][ T6211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.735086][ T6137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.774226][ T5377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.853510][ T6137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.884494][ T6214] loop2: detected capacity change from 0 to 512 [ 117.893155][ T6214] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 117.903381][ T6214] UDF-fs: Scanning with blocksize 512 failed [ 117.916224][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.918687][ T6214] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 117.932212][ T6214] UDF-fs: Scanning with blocksize 1024 failed [ 117.940266][ T6214] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 117.971991][ T6214] UDF-fs: Scanning with blocksize 2048 failed [ 117.985259][ T6214] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 117.998792][ T6137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.014067][ T6214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.133626][ T6137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.164629][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.193336][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.208926][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.216117][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.248864][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.256058][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.279922][ T6224] loop2: detected capacity change from 0 to 1024 [ 118.319145][ T5123] Bluetooth: hci4: command tx timeout [ 118.334577][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.354837][ T6224] hfsplus: request for non-existent node 3 in B*Tree [ 118.363177][ T6224] hfsplus: request for non-existent node 3 in B*Tree [ 118.377425][ T5983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.394099][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.401270][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.422924][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.430143][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.607143][ T6137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.624707][ T6137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.637637][ T6137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.650129][ T6137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.766683][ T6234] loop2: detected capacity change from 0 to 256 [ 118.883403][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.921295][ T6137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.977878][ T6137] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.036741][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.043982][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.074503][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.081759][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.132621][ T5983] veth0_vlan: entered promiscuous mode [ 119.184214][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.213174][ T5983] veth1_vlan: entered promiscuous mode [ 119.388926][ T5983] veth0_macvtap: entered promiscuous mode [ 119.396760][ T6055] veth0_vlan: entered promiscuous mode [ 119.414054][ T5983] veth1_macvtap: entered promiscuous mode [ 119.444478][ T6055] veth1_vlan: entered promiscuous mode [ 119.466520][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.490737][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.501027][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.511891][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.524474][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.545456][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.561381][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.608931][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.640694][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.660079][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.675414][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.685880][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.718362][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.737360][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.747981][ T6258] loop2: detected capacity change from 0 to 24 [ 119.784576][ T5983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.795521][ T6258] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 119.802262][ T5983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.813944][ T5983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.828168][ T5983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.836936][ T6258] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 119.857936][ T6055] veth0_macvtap: entered promiscuous mode [ 119.917664][ T6055] veth1_macvtap: entered promiscuous mode [ 119.949752][ T6137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.996710][ T6243] loop4: detected capacity change from 0 to 32768 [ 120.070810][ T6243] Dev loop4 Sun disklabel: Csum bad, label corrupted [ 120.077587][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.090930][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.101443][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.112261][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.125045][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.135589][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.145459][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.156221][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.186569][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.212859][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.223486][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.236803][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.236923][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.271378][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.286894][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.303704][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.314939][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.334182][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.344885][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.360018][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.400623][ T5123] Bluetooth: hci4: command tx timeout [ 120.423061][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.434914][ T6055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.451185][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.458946][ T6055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.467643][ T6055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.498320][ T6055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.522256][ T6137] veth0_vlan: entered promiscuous mode [ 120.561579][ T6137] veth1_vlan: entered promiscuous mode [ 120.684057][ T6137] veth0_macvtap: entered promiscuous mode [ 120.705767][ T6137] veth1_macvtap: entered promiscuous mode [ 120.754914][ T6268] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 120.768684][ T2876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.775081][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.776532][ T2876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.808330][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.833609][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.849652][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.868386][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.891611][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.901658][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.912251][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.923339][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.934332][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.947242][ T6137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.978934][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.994258][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.008858][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.019673][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.029846][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.042277][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.052936][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.065184][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.075560][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.076467][ T6264] loop2: detected capacity change from 0 to 40427 [ 121.086228][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.105252][ T6137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.137919][ T6137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.151069][ T6137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.159856][ T6137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.168828][ T6137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.180998][ T2876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.190001][ T2876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.254103][ T6264] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.283391][ T6271] loop4: detected capacity change from 0 to 256 [ 121.413652][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.431372][ T6271] FAT-fs (loop4): Directory bread(block 64) failed [ 121.435147][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.453771][ T6271] FAT-fs (loop4): Directory bread(block 65) failed [ 121.469088][ T6271] FAT-fs (loop4): Directory bread(block 66) failed [ 121.475644][ T6271] FAT-fs (loop4): Directory bread(block 67) failed [ 121.505806][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.515683][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.527135][ T6271] FAT-fs (loop4): Directory bread(block 68) failed [ 121.536314][ T6264] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.552262][ T6271] FAT-fs (loop4): Directory bread(block 69) failed [ 121.561811][ T6271] FAT-fs (loop4): Directory bread(block 70) failed [ 121.568408][ T6271] FAT-fs (loop4): Directory bread(block 71) failed [ 121.575054][ T6271] FAT-fs (loop4): Directory bread(block 72) failed [ 121.620377][ T6271] FAT-fs (loop4): Directory bread(block 73) failed [ 121.888855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.980863][ T6294] syz-executor.2: attempt to access beyond end of device [ 121.980863][ T6294] loop2: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 122.373762][ T29] audit: type=1800 audit(1717621880.981:77): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 122.394311][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.431213][ T6299] loop4: detected capacity change from 0 to 24 [ 122.438223][ T6299] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 122.445895][ T6299] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 122.461507][ T5377] syz-executor.2: attempt to access beyond end of device [ 122.461507][ T5377] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 122.478703][ T5123] Bluetooth: hci4: command tx timeout [ 122.528603][ T5377] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 122.536756][ T5377] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 122.719283][ T6305] loop4: detected capacity change from 0 to 128 [ 122.728493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.767854][ T6305] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.782033][ T6305] ext4 filesystem being mounted at /root/syzkaller-testdir4031105570/syzkaller.DqZFs0/106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.829485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.900034][ T6311] loop1: detected capacity change from 0 to 512 [ 122.929998][ T6301] loop3: detected capacity change from 0 to 8192 [ 122.949462][ T6311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.963075][ T6311] ext4 filesystem being mounted at /root/syzkaller-testdir4082929062/syzkaller.JYJl4R/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.012331][ T5112] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.283358][ T6324] 9pnet_fd: p9_fd_create_unix (6324): problem connecting socket: ./file0: -111 [ 123.728649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.750179][ T6341] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 123.750996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.767232][ T6341] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.793616][ T6055] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.939430][ T6348] loop1: detected capacity change from 0 to 128 [ 123.969204][ T6348] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.989830][ T6348] ext4 filesystem being mounted at /root/syzkaller-testdir4082929062/syzkaller.JYJl4R/6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.028751][ T5164] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.177641][ T6055] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.228524][ T5164] usb 3-1: Using ep0 maxpacket: 8 [ 124.260112][ T5164] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 124.276723][ T5164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.302880][ T5164] usb 3-1: config 0 descriptor?? [ 124.436374][ T6359] loop3: detected capacity change from 0 to 8192 [ 124.515314][ T6367] loop1: detected capacity change from 0 to 256 [ 124.577132][ T6367] FAT-fs (loop1): Directory bread(block 64) failed [ 124.590674][ T6367] FAT-fs (loop1): Directory bread(block 65) failed [ 124.604112][ T6367] FAT-fs (loop1): Directory bread(block 66) failed [ 124.660801][ T6367] FAT-fs (loop1): Directory bread(block 67) failed [ 124.682524][ T6367] FAT-fs (loop1): Directory bread(block 68) failed [ 124.707664][ T6367] FAT-fs (loop1): Directory bread(block 69) failed [ 124.735698][ T6367] FAT-fs (loop1): Directory bread(block 70) failed [ 124.752898][ T6367] FAT-fs (loop1): Directory bread(block 71) failed [ 124.765852][ T6367] FAT-fs (loop1): Directory bread(block 72) failed [ 124.795331][ T6367] FAT-fs (loop1): Directory bread(block 73) failed [ 124.874240][ T6342] loop4: detected capacity change from 0 to 32768 [ 124.940041][ T6342] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.011067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 125.029821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 125.041145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 125.160637][ T6342] XFS (loop4): Ending clean mount [ 125.765370][ T5112] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.496497][ T6398] loop0: detected capacity change from 0 to 24 [ 126.525214][ T6398] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 126.560715][ T6398] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 126.581023][ T5164] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 126.603239][ T6399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.620082][ T5164] asix 3-1:0.0: probe with driver asix failed with error -71 [ 126.640218][ T5164] usb 3-1: USB disconnect, device number 3 [ 126.800570][ T6403] loop0: detected capacity change from 0 to 512 [ 126.819895][ T6403] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 126.876999][ T6403] UDF-fs: Scanning with blocksize 512 failed [ 126.893554][ T6385] loop3: detected capacity change from 0 to 40427 [ 126.929053][ T6403] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 126.936669][ T6403] UDF-fs: Scanning with blocksize 1024 failed [ 126.950195][ T6403] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 126.954862][ T6385] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 126.957581][ T6403] UDF-fs: Scanning with blocksize 2048 failed [ 126.986708][ T6403] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 127.002276][ T6406] loop1: detected capacity change from 0 to 1024 [ 127.010278][ T6385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.033200][ T6403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.046729][ T6385] F2FS-fs (loop3): invalid crc value [ 127.090804][ T6385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.156958][ T29] audit: type=1800 audit(1717621886.171:78): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=28 res=0 errno=0 [ 127.226470][ T6411] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.247876][ T6385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 127.260421][ T35] hfsplus: b-tree write err: -5, ino 4 [ 127.270749][ T6385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.484568][ T6423] loop2: detected capacity change from 0 to 256 [ 127.496204][ T6427] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 127.597217][ T2906] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 127.610501][ T6423] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.638595][ T2906] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 127.671256][ T6423] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.522290][ T6435] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.562331][ T6435] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.605627][ T6435] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.735339][ T6441] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.977878][ T6453] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.310152][ T6465] rdma_op ffff88806a0711f0 conn xmit_rdma 0000000000000000 [ 129.433098][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.445062][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.453843][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.463691][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.473491][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.480985][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.598920][ T5163] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.811953][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 129.824595][ T5163] usb 5-1: Using ep0 maxpacket: 16 [ 129.831214][ T5166] kernel read not supported for file /usbmon0 (pid: 5166 comm: kworker/1:6) [ 129.844791][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 129.857121][ T5163] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 129.867293][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.879916][ T6486] loop1: detected capacity change from 0 to 512 [ 129.880426][ T5163] usb 5-1: config 0 descriptor?? [ 130.035643][ T6486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.050030][ T6486] ext4 filesystem being mounted at /root/syzkaller-testdir4082929062/syzkaller.JYJl4R/23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.162491][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.170360][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.183043][ T6495] loop3: detected capacity change from 0 to 512 [ 130.191037][ T6471] bridge_slave_0: entered allmulticast mode [ 130.205904][ T6471] bridge_slave_0: entered promiscuous mode [ 130.222217][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.230537][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.237727][ T6495] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: unexpected EA_INODE flag [ 130.257278][ T6471] bridge_slave_1: entered allmulticast mode [ 130.264073][ T6495] EXT4-fs (loop3): get root inode failed [ 130.270110][ T6495] EXT4-fs (loop3): mount failed [ 130.279537][ T6471] bridge_slave_1: entered promiscuous mode [ 130.320942][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.346039][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.365988][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.384031][ T5163] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 130.385873][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.430482][ T5163] hid-generic 0003:0158:0100.0001: unexpected long global item [ 130.457303][ T5163] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 130.576517][ T6471] team0: Port device team_slave_0 added [ 130.594986][ T8] usb 5-1: USB disconnect, device number 3 [ 130.697202][ T6470] loop0: detected capacity change from 0 to 40427 [ 130.709212][ T6055] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.717150][ T6470] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 130.727955][ T6471] team0: Port device team_slave_1 added [ 130.749656][ T6470] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 130.777033][ T6470] F2FS-fs (loop0): invalid crc value [ 130.785904][ T29] audit: type=1326 audit(1717621889.801:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da0a7cf69 code=0x7ffc0000 [ 130.808597][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.825160][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.827132][ T29] audit: type=1326 audit(1717621889.811:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6da0a7cf69 code=0x7ffc0000 [ 130.838085][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.863461][ T29] audit: type=1326 audit(1717621889.811:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da0a7cf69 code=0x7ffc0000 [ 130.899052][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.916204][ T6470] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.948253][ T29] audit: type=1326 audit(1717621889.811:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da0a7cf69 code=0x7ffc0000 [ 130.957730][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.987505][ T29] audit: type=1326 audit(1717621889.811:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6da0a7cf69 code=0x7ffc0000 [ 131.008431][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.010227][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.037712][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.042040][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.059767][ T29] audit: type=1326 audit(1717621889.841:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da0a7cf69 code=0x7ffc0000 [ 131.107070][ T29] audit: type=1326 audit(1717621889.851:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6da0a7a6e7 code=0x7ffc0000 [ 131.140409][ T29] audit: type=1326 audit(1717621889.851:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6da0a403b9 code=0x7ffc0000 [ 131.204545][ T6470] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.218644][ T6470] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.230524][ T29] audit: type=1326 audit(1717621889.851:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6da0a7a6e7 code=0x7ffc0000 [ 131.253687][ T29] audit: type=1326 audit(1717621889.851:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6da0a403b9 code=0x7ffc0000 [ 131.276262][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.307301][ T6471] hsr_slave_0: entered promiscuous mode [ 131.336069][ T6471] hsr_slave_1: entered promiscuous mode [ 131.353498][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.356153][ T6470] UBIFS error (pid: 6470): cannot open "./file0", error -22 [ 131.381331][ T6471] Cannot create hsr debugfs directory [ 131.518698][ T5116] Bluetooth: hci2: command tx timeout [ 131.525821][ T51] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 131.568057][ T51] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 131.949470][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.960112][ T5123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.968429][ T5123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.996247][ T5123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.009202][ T5123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 132.016573][ T5123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.173982][ T6471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.460844][ T6471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.585895][ T2906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.723684][ T6471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.765944][ T6532] loop4: detected capacity change from 0 to 512 [ 132.826462][ T6532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.850254][ T6532] ext4 filesystem being mounted at /root/syzkaller-testdir4031105570/syzkaller.DqZFs0/120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.909917][ T6471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.965892][ T2906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.119622][ T2906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.150433][ T6520] loop1: detected capacity change from 0 to 32768 [ 133.206162][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.213651][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.222783][ T6520] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 133.242535][ T6520] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 133.266597][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.323004][ T6520] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 133.347852][ T5113] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 133.362285][ T5113] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 133.473399][ T5113] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 111ms [ 133.503579][ T5113] gfs2: fsid=syz:syz.0: jid=0: Done [ 133.509942][ T6520] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 133.598529][ T5116] Bluetooth: hci2: command tx timeout [ 133.640008][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.646873][ T6521] chnl_net:caif_netlink_parms(): no params data found [ 133.777351][ T6471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.794673][ T6471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.855140][ T6471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.959967][ T6471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.110780][ T2906] bridge_slave_1: left allmulticast mode [ 134.116563][ T2906] bridge_slave_1: left promiscuous mode [ 134.143149][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.159374][ T5116] Bluetooth: hci5: command tx timeout [ 134.182698][ T2906] bridge_slave_0: left allmulticast mode [ 134.189616][ T2906] bridge_slave_0: left promiscuous mode [ 134.197871][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.230505][ T6570] rdma_op ffff88807cb009f0 conn xmit_rdma 0000000000000000 [ 134.264862][ T6572] loop4: detected capacity change from 0 to 128 [ 134.275398][ T6572] zonefs (loop4) ERROR: Not a zoned block device [ 134.880923][ T6580] loop4: detected capacity change from 0 to 32768 [ 134.939375][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.957317][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.975121][ T2906] bond0 (unregistering): Released all slaves [ 135.021379][ T6584] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.033994][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.054086][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.066634][ T6521] bridge_slave_0: entered allmulticast mode [ 135.074457][ T6521] bridge_slave_0: entered promiscuous mode [ 135.083248][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.095293][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.106433][ T6521] bridge_slave_1: entered allmulticast mode [ 135.125854][ T6521] bridge_slave_1: entered promiscuous mode [ 135.334165][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.355980][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.496392][ T6521] team0: Port device team_slave_0 added [ 135.556138][ T6521] team0: Port device team_slave_1 added [ 135.580756][ T6602] netlink: 'syz-executor.4': attribute type 96 has an invalid length. [ 135.650889][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.662673][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.690752][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.707594][ T5116] Bluetooth: hci2: command tx timeout [ 135.721567][ T2906] hsr_slave_0: left promiscuous mode [ 135.732111][ T2906] hsr_slave_1: left promiscuous mode [ 135.741990][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.751389][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.763349][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.772297][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.788684][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.800629][ T2906] veth1_macvtap: left promiscuous mode [ 135.806306][ T2906] veth0_macvtap: left promiscuous mode [ 135.814490][ T2906] veth1_vlan: left promiscuous mode [ 135.821338][ T2906] veth0_vlan: left promiscuous mode [ 135.938548][ T5163] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.009499][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 136.016860][ T25] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.034500][ T25] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.055816][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 136.066551][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.091994][ T25] hub 2-1:4.0: USB hub found [ 136.112020][ T8] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 136.171870][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.183135][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.193308][ T5163] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 136.202547][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.219544][ T5163] usb 5-1: config 0 descriptor?? [ 136.248587][ T5116] Bluetooth: hci5: command tx timeout [ 136.296632][ T25] hub 2-1:4.0: 2 ports detected [ 136.314953][ T8] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 136.333565][ T8] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 136.351036][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 136.374526][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 136.394134][ T8] usb 1-1: string descriptor 0 read error: -22 [ 136.413764][ T8] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 136.434583][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.487956][ T8] usb 1-1: config 0 descriptor?? [ 136.500184][ T6608] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 136.511462][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 136.517396][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 136.537792][ T8] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 136.600575][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 136.621620][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 136.716748][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 136.797586][ T5163] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 136.805884][ T8] usb 1-1: USB disconnect, device number 2 [ 136.807688][ T5163] itetech 0003:06CB:73F5.0002: item fetching failed at offset 10/11 [ 136.820712][ T5163] itetech 0003:06CB:73F5.0002: probe with driver itetech failed with error -22 [ 137.453974][ T6610] loop1: detected capacity change from 0 to 512 [ 137.609365][ T25] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 137.621073][ T25] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 137.758616][ T5116] Bluetooth: hci2: command tx timeout [ 137.808391][ T8] usb 5-1: USB disconnect, device number 4 [ 138.316390][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.323811][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.328925][ T5116] Bluetooth: hci5: command tx timeout [ 138.374286][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.737260][ T6521] hsr_slave_0: entered promiscuous mode [ 138.764343][ T6521] hsr_slave_1: entered promiscuous mode [ 138.773636][ T6521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.788252][ T6521] Cannot create hsr debugfs directory [ 138.821702][ T25] usb 2-1: USB disconnect, device number 2 [ 139.007063][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.250122][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.316766][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.323917][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.371725][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.378900][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.002178][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.026613][ T6676] loop4: detected capacity change from 0 to 256 [ 140.157108][ T6521] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.192937][ T6521] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.214167][ T6521] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.242803][ T6521] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.282895][ T6471] veth0_vlan: entered promiscuous mode [ 140.313312][ T6471] veth1_vlan: entered promiscuous mode [ 140.398520][ T5116] Bluetooth: hci5: command tx timeout [ 140.491203][ T6471] veth0_macvtap: entered promiscuous mode [ 140.522098][ T6688] Bluetooth: MGMT ver 1.23 [ 140.530601][ T6471] veth1_macvtap: entered promiscuous mode [ 140.547969][ T6688] Bluetooth: hci3: unsupported parameter 65535 [ 140.555365][ T6688] Bluetooth: hci3: invalid len left 3, exp >= 190 [ 140.654020][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.671069][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.706787][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.728366][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.746821][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.758859][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.773721][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.785117][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.800021][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.809997][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.820509][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.834126][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.887063][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.907413][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.927049][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.937700][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.948872][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.970622][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.981975][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.001557][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.012711][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.032001][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.060465][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.084893][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.111169][ T6471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.127762][ T6471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.147633][ T6471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.156473][ T6471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.184230][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.191430][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.223035][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.230241][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.279815][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.421203][ T6693] loop1: detected capacity change from 0 to 32768 [ 141.422847][ T6521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.470626][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.486259][ T6693] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6693) [ 141.515243][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.563200][ T6693] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.575820][ T6693] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 141.584844][ T6693] BTRFS info (device loop1): using free-space-tree [ 141.753114][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.761420][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.813534][ T6736] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 141.854458][ T6055] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.042397][ T6521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.112142][ T6521] veth0_vlan: entered promiscuous mode [ 143.203989][ T6521] veth1_vlan: entered promiscuous mode [ 143.336754][ T6521] veth0_macvtap: entered promiscuous mode [ 143.391081][ T6521] veth1_macvtap: entered promiscuous mode [ 143.431860][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.495687][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.507848][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.548805][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.572641][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.587874][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.608002][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.628434][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.644762][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.665531][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.684533][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.700665][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.712663][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.723281][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.770130][ T6766] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 143.820004][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.844437][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.857674][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.881452][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.896227][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.919677][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.944305][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.970734][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.988395][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.008235][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.018215][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.029914][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.037663][ T6759] loop4: detected capacity change from 0 to 32768 [ 144.050484][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.057976][ T6759] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6759) [ 144.091552][ T6521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.102648][ T6521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.115668][ T6521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.125046][ T6521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.135835][ T6759] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 144.169149][ T6759] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 144.217071][ T6759] BTRFS info (device loop4): using free-space-tree [ 144.407468][ T944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.419773][ T944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.472779][ T5112] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 144.500199][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.527732][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.770560][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 144.770577][ T29] audit: type=1800 audit(1717621903.781:173): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 145.505415][ T6829] loop3: detected capacity change from 0 to 256 [ 145.574493][ T6829] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 145.899486][ T29] audit: type=1800 audit(1717621904.911:174): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 145.932215][ T6806] loop2: detected capacity change from 0 to 32768 [ 145.941880][ T6806] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6806) [ 145.975677][ T6806] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 146.011968][ T6806] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 146.041779][ T6806] BTRFS info (device loop2): using free-space-tree [ 147.192768][ T6826] loop4: detected capacity change from 0 to 32768 [ 147.236588][ T6826] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6826) [ 147.307691][ T6826] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.318098][ T6826] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 147.343350][ T6826] BTRFS info (device loop4): using free-space-tree [ 147.359343][ T6471] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 147.804186][ T5112] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.051108][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.041662][ T6894] loop1: detected capacity change from 0 to 40427 [ 149.095403][ T6894] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 149.108402][ T6894] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 149.137268][ T6894] F2FS-fs (loop1): invalid crc value [ 149.184245][ T6894] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.294342][ T6910] loop0: detected capacity change from 0 to 32768 [ 149.312869][ T6910] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6910) [ 149.327207][ T6894] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 149.338456][ T6910] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 149.345838][ T6894] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.348828][ T6910] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 149.370127][ T6902] loop3: detected capacity change from 0 to 32768 [ 149.383317][ T6910] BTRFS info (device loop0): using free-space-tree [ 149.408025][ T6902] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 149.416501][ T6902] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 149.441993][ T6902] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 149.461119][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 149.462722][ T6055] syz-executor.1: attempt to access beyond end of device [ 149.462722][ T6055] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.467897][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 149.492796][ T6055] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 149.531055][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 149.539935][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 149.546157][ T6902] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 149.709719][ T5983] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.163381][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.426780][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022350400: rx timeout, send abort [ 150.438025][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022350400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 151.719568][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062715800: rx timeout, send abort [ 151.728025][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062715800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.109707][ T7012] loop1: detected capacity change from 0 to 512 [ 152.168106][ T7012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.213123][ T7012] ext4 filesystem being mounted at /root/syzkaller-testdir4082929062/syzkaller.JYJl4R/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.276815][ T6982] loop4: detected capacity change from 0 to 32768 [ 152.299108][ T6977] loop3: detected capacity change from 0 to 40427 [ 152.307579][ T6977] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 152.315590][ T6977] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 152.318677][ T6982] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6982) [ 152.328767][ T6977] F2FS-fs (loop3): invalid crc value [ 152.369521][ T7012] EXT4-fs error (device loop1): ext4_get_parent:1902: inode #11: comm syz-executor.1: bad parent inode number: 1 [ 152.372690][ T7025] loop2: detected capacity change from 0 to 128 [ 152.392606][ T6977] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.414804][ T6982] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.438329][ T7025] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.452791][ T6055] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.464311][ T6982] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 152.475657][ T7025] ext4 filesystem being mounted at /root/syzkaller-testdir4222994722/syzkaller.biwcxX/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.488418][ T6982] BTRFS info (device loop4): using free-space-tree [ 152.621470][ T6977] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 152.663834][ T6977] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.699706][ T6471] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.796535][ T7046] loop1: detected capacity change from 0 to 164 [ 153.748287][ C0] sched: RT throttling activated [ 154.697112][ T7046] Unable to read rock-ridge attributes [ 154.729742][ T5112] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 154.808586][ T6521] syz-executor.3: attempt to access beyond end of device [ 154.808586][ T6521] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.841558][ T7046] Unable to read rock-ridge attributes [ 154.872451][ T6521] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.937682][ T7046] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 156.232130][ T7074] loop0: detected capacity change from 0 to 512 [ 157.019828][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.136550][ T7074] ext4 filesystem being mounted at /root/syzkaller-testdir572196860/syzkaller.4X0Jyl/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.286558][ T7074] EXT4-fs error (device loop0): ext4_get_parent:1902: inode #11: comm syz-executor.0: bad parent inode number: 1 [ 157.433257][ T5983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.548025][ T7088] loop3: detected capacity change from 0 to 2048 [ 157.599767][ T7089] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.671583][ T29] audit: type=1800 audit(1717621916.691:175): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=2097152 res=0 errno=0 [ 157.681180][ T7091] unsupported nlmsg_type 40 [ 158.110637][ T7077] loop1: detected capacity change from 0 to 32768 [ 158.130831][ T7077] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7077) [ 158.229725][ T7077] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.279733][ T7077] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 158.328646][ T7077] BTRFS info (device loop1): using free-space-tree [ 158.385134][ T7085] loop4: detected capacity change from 0 to 32768 [ 158.479480][ T7085] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7085) [ 158.556869][ T7085] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 158.616267][ T7085] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 158.650857][ T7085] BTRFS info (device loop4): using free-space-tree [ 158.671198][ T7125] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 158.811667][ T29] audit: type=1804 audit(1717621917.831:176): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1697725873/syzkaller.NTAynX/17/file1" dev="sda1" ino=1965 res=1 errno=0 [ 158.849543][ T6055] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.051027][ T5112] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 159.289843][ T7101] loop2: detected capacity change from 0 to 32768 [ 159.365542][ T7101] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 159.565970][ T7101] XFS (loop2): Ending clean mount [ 159.619430][ T7101] XFS (loop2): Quotacheck needed: Please wait. [ 159.737410][ T7101] XFS (loop2): Quotacheck: Done. [ 159.796245][ T6471] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 159.895914][ T7146] loop3: detected capacity change from 0 to 32768 [ 160.045063][ T7146] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7146) [ 160.522627][ T7146] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.540670][ T7146] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 160.592460][ T7146] BTRFS info (device loop3): using free-space-tree [ 160.719419][ T5123] Bluetooth: hci4: command 0x1003 tx timeout [ 160.726800][ T5116] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 160.955647][ T7188] loop1: detected capacity change from 0 to 256 [ 161.020324][ T6521] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.054155][ T7188] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 161.074865][ T7194] loop0: detected capacity change from 0 to 128 [ 161.106634][ T7194] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 161.182119][ T7194] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.193718][ T7196] loop4: detected capacity change from 0 to 512 [ 161.259880][ T7196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.326216][ T7196] ext4 filesystem being mounted at /root/syzkaller-testdir4031105570/syzkaller.DqZFs0/169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.408395][ T7196] EXT4-fs error (device loop4): ext4_get_parent:1902: inode #11: comm syz-executor.4: bad parent inode number: 1 [ 161.443145][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.481545][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.485577][ T7205] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.675180][ T29] audit: type=1326 audit(1717621920.691:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f4187cf69 code=0x0 [ 161.951221][ T7224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.115390][ T7226] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 162.324038][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.435206][ T7244] sd 0:0:1:0: PR command failed: 1026 [ 163.448411][ T7244] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 163.458170][ T7244] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 163.580320][ T29] audit: type=1326 audit(1717621922.601:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ae9c7cf69 code=0x0 [ 163.774278][ T7269] tipc: Started in network mode [ 163.782103][ T7266] Driver unsupported XDP return value 0 on prog (id 96) dev N/A, expect packet loss! [ 163.786195][ T7269] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 163.822168][ T7269] tipc: Enabled bearer , priority 10 [ 164.018827][ T7275] loop3: detected capacity change from 0 to 2048 [ 164.063319][ T7275] loop3: p3 < > p4 < > [ 164.067537][ T7275] loop3: partition table partially beyond EOD, truncated [ 164.093355][ T7275] loop3: p3 start 4284289 is beyond EOD, truncated [ 164.104849][ T7283] loop0: detected capacity change from 0 to 8 [ 164.119400][ T7283] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 164.158409][ T5116] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 164.158501][ T5123] Bluetooth: hci4: command 0x1003 tx timeout [ 164.402599][ T7286] loop1: detected capacity change from 0 to 128 [ 164.460245][ T7286] ADFS-fs (loop1): error: can't find an ADFS filesystem on dev loop1. [ 164.929251][ T5162] tipc: Node number set to 4269801491 [ 164.987586][ T7309] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.996942][ T7309] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.006178][ T7309] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.015008][ T7309] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.462901][ T7327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.477157][ T7322] sd 0:0:1:0: PR command failed: 1026 [ 165.491971][ T7322] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 165.507438][ T7322] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 165.511469][ T7330] loop1: detected capacity change from 0 to 256 [ 165.581079][ T7330] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 165.724646][ T7339] loop4: detected capacity change from 0 to 64 [ 165.841892][ T7300] loop2: detected capacity change from 0 to 32768 [ 165.893546][ T7300] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7300) [ 165.947514][ T7343] loop3: detected capacity change from 0 to 8 [ 165.967519][ T7343] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 165.979856][ T7300] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.013783][ T7300] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 166.047095][ T7300] BTRFS info (device loop2): using free-space-tree [ 166.276225][ T6471] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.503984][ T7374] loop4: detected capacity change from 0 to 128 [ 166.543785][ T7374] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4. [ 166.640530][ T5163] IPVS: starting estimator thread 0... [ 166.770782][ T7378] IPVS: using max 19 ests per chain, 45600 per kthread [ 166.974467][ T7385] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.141483][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.326219][ T7409] loop3: detected capacity change from 0 to 128 [ 168.342763][ T7409] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 168.385504][ T7408] Bluetooth: hci3: invalid length 0, exp 2 for type 20 [ 168.452005][ T7420] loop0: detected capacity change from 0 to 256 [ 168.571507][ T7425] loop3: detected capacity change from 0 to 8 [ 168.595071][ T7425] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 168.902380][ T5161] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.119675][ T7452] loop4: detected capacity change from 0 to 128 [ 169.120530][ T5161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.144447][ T7452] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 169.177841][ T5161] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.178200][ T7452] FAT-fs (loop4): FAT read failed (blocknr 255) [ 169.220754][ T5161] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.369857][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.378211][ T5161] usb 1-1: SerialNumber: syz [ 171.055086][ T5116] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 171.069764][ T5116] Bluetooth: hci0: Injecting HCI hardware error event [ 171.083268][ T5123] Bluetooth: hci0: hardware error 0x00 [ 171.322122][ T7475] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.496318][ T5161] usb 1-1: bad CDC descriptors [ 171.507140][ T5161] usb 1-1: USB disconnect, device number 3 [ 171.880655][ T783] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 172.082767][ T7462] loop2: detected capacity change from 0 to 32768 [ 172.102956][ T783] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.126363][ T783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.144838][ T7462] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7462) [ 172.152236][ T783] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.177564][ T783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.191019][ T783] usb 2-1: Product: syz [ 172.216601][ T783] usb 2-1: Manufacturer: syz [ 172.230028][ T783] usb 2-1: SerialNumber: syz [ 172.652912][ T7511] loop0: detected capacity change from 0 to 256 [ 172.987553][ T783] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 173.013816][ T783] cdc_ncm 2-1:1.0: bind() failure [ 173.044018][ T783] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 173.074579][ T783] cdc_ncm 2-1:1.1: bind() failure [ 173.108599][ T783] usb 2-1: USB disconnect, device number 3 [ 173.138572][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.198908][ T5123] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 173.385107][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.396683][ T7503] loop4: detected capacity change from 0 to 131072 [ 173.430134][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.455317][ T7503] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.500272][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.510797][ T7503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 173.512656][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.547181][ T45] usb 1-1: SerialNumber: syz [ 173.826855][ T7518] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE. [ 174.594500][ T45] usb 1-1: bad CDC descriptors [ 174.619716][ T45] usb 1-1: USB disconnect, device number 4 [ 174.980465][ T7537] loop1: detected capacity change from 0 to 256 [ 175.031305][ T7537] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 175.210043][ T7528] loop2: detected capacity change from 0 to 32768 [ 175.218952][ T7528] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7528) [ 175.293721][ T7528] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 175.318366][ T7528] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 175.327811][ T7528] BTRFS info (device loop2): using free-space-tree [ 175.618209][ T6471] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 176.817523][ T7568] loop0: detected capacity change from 0 to 40427 [ 176.844600][ T7568] F2FS-fs (loop0): Invalid segment/section count (458776 != 24 * 1) [ 176.869735][ T7568] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 176.899106][ T7568] F2FS-fs (loop0): invalid crc value [ 176.945944][ T7568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.132940][ T7568] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 177.152787][ T7568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 177.440168][ T7583] loop1: detected capacity change from 0 to 32768 [ 178.493245][ T7583] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 178.871910][ T7583] XFS (loop1): Ending clean mount [ 179.132567][ T6055] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.659148][ T7637] loop0: detected capacity change from 0 to 64 [ 179.694022][ T7638] loop3: detected capacity change from 0 to 8 [ 181.372152][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 182.241165][ T5123] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 182.250240][ T5123] Bluetooth: hci1: Injecting HCI hardware error event [ 182.260150][ T5123] Bluetooth: hci1: hardware error 0x00 [ 182.672866][ T7681] loop2: detected capacity change from 0 to 8 [ 182.909887][ T7682] loop0: detected capacity change from 0 to 8192 [ 183.685748][ T29] audit: type=1800 audit(1717621942.701:179): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 183.777049][ T29] audit: type=1800 audit(1717621942.751:180): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 183.947145][ T7714] loop1: detected capacity change from 0 to 256 [ 184.135501][ T7717] loop3: detected capacity change from 0 to 2048 [ 184.174440][ T7717] EXT4-fs: quotafile must be on filesystem root [ 184.318790][ T5123] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 184.389924][ T7722] loop0: detected capacity change from 0 to 8192 [ 184.522591][ T29] audit: type=1800 audit(1717621943.541:181): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 184.529904][ T29] audit: type=1800 audit(1717621943.551:182): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 184.727643][ T7737] loop4: detected capacity change from 0 to 8 [ 185.171224][ T7747] syz-executor.4 (7747): /proc/7746/oom_adj is deprecated, please use /proc/7746/oom_score_adj instead. [ 185.227843][ T7747] Bluetooth: MGMT ver 1.23 [ 185.679718][ T29] audit: type=1804 audit(1717621944.701:183): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4031105570/syzkaller.DqZFs0/223/bus" dev="sda1" ino=1962 res=1 errno=0 [ 185.945179][ T29] audit: type=1326 audit(1717621944.961:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1a7cf69 code=0x7fc00000 [ 185.968478][ T29] audit: type=1326 audit(1717621944.961:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcba1a7cf69 code=0x7fc00000 [ 186.667531][ T29] audit: type=1326 audit(1717621945.681:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1a7cf69 code=0x7fc00000 [ 187.284978][ T5123] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 188.056245][ T7806] loop1: detected capacity change from 0 to 8 [ 188.446547][ T7813] loop1: detected capacity change from 0 to 1024 [ 188.656001][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 188.812009][ T7833] loop4: detected capacity change from 0 to 164 [ 188.835432][ T7834] loop1: detected capacity change from 0 to 256 [ 188.835918][ T7831] loop2: detected capacity change from 0 to 512 [ 188.864225][ T7833] isofs_fill_super: get root inode failed [ 188.895975][ T7834] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.916914][ T7831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.952352][ T7831] EXT4-fs: old and new quota format mixing [ 188.963284][ T7834] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 189.118248][ T29] audit: type=1804 audit(1717621948.131:187): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4082929062/syzkaller.JYJl4R/131/file0/bus" dev="loop1" ino=1048699 res=1 errno=0 [ 189.196807][ T7831] loop2: detected capacity change from 0 to 4096 [ 189.258021][ T7843] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.297941][ T29] audit: type=1800 audit(1717621948.311:188): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 190.803484][ T29] audit: type=1804 audit(1717621949.811:189): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4082929062/syzkaller.JYJl4R/133/bus" dev="sda1" ino=1952 res=1 errno=0 [ 190.993987][ T29] audit: type=1326 audit(1717621950.011:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f4c7cf69 code=0x0 [ 191.108697][ T7861] tipc: Enabling of bearer rejected, failed to enable media [ 191.279276][ T7838] loop3: detected capacity change from 0 to 32768 [ 191.311954][ T7838] btrfs: Deprecated parameter 'usebackuproot' [ 191.319517][ T7838] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 191.336847][ T7838] btrfs: Deprecated parameter 'usebackuproot' [ 191.345457][ T7838] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 191.362628][ T7838] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7838) [ 191.392399][ T7838] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 191.409765][ T7838] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 191.420337][ T7838] BTRFS info (device loop3): disk space caching is enabled [ 191.597158][ T7869] loop1: detected capacity change from 0 to 2048 [ 191.789078][ T7869] Alternate GPT is invalid, using primary GPT. [ 191.795298][ T7869] loop1: p1 p2 p3 [ 192.279361][ T6521] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 192.528007][ T7890] loop4: detected capacity change from 0 to 256 [ 192.588396][ T7890] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.682254][ T7890] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 192.829522][ T29] audit: type=1804 audit(1717621951.841:191): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4031105570/syzkaller.DqZFs0/236/file0/bus" dev="loop4" ino=1048700 res=1 errno=0 [ 192.962874][ T29] audit: type=1800 audit(1717621951.981:192): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="overlay" ino=1958 res=0 errno=0 [ 192.973857][ T7892] evm: overlay not supported [ 193.691291][ T783] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 193.901455][ T783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.950905][ T783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.962511][ T783] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.975375][ T783] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.004372][ T783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.034712][ T783] usb 4-1: Product: syz [ 194.049571][ T783] usb 4-1: Manufacturer: syz [ 194.066246][ T783] usb 4-1: SerialNumber: syz [ 194.528960][ T783] cdc_ncm 4-1:1.0: bind() failure [ 194.556519][ T783] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 194.591631][ T783] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 194.637765][ T783] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 194.655460][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.662758][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.708470][ T29] audit: type=1804 audit(1717621953.711:193): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4082929062/syzkaller.JYJl4R/137/bus" dev="sda1" ino=1957 res=1 errno=0 [ 194.778761][ T783] usb 4-1: USB disconnect, device number 2 [ 195.007392][ T29] audit: type=1326 audit(1717621954.021:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f4c7cf69 code=0x0 [ 195.206909][ T7920] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 196.036125][ T29] audit: type=1800 audit(1717621955.051:195): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 301.108282][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 301.108310][ C1] rcu: 0-...!: (0 ticks this GP) idle=0994/1/0x4000000000000000 softirq=20418/20418 fqs=0 [ 301.126757][ C1] rcu: (detected by 1, t=10502 jiffies, g=25733, q=209 ncpus=2) [ 301.126797][ C1] Sending NMI from CPU 1 to CPUs 0: [ 301.126828][ C0] NMI backtrace for cpu 0 [ 301.126861][ C0] CPU: 0 PID: 5083 Comm: syz-fuzzer Tainted: G W 6.10.0-rc2-next-20240605-syzkaller #0 [ 301.126885][ C0] Tainted: [W]=WARN [ 301.126892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 301.126906][ C0] RIP: 0010:validate_chain+0x23/0x5920 [ 301.126947][ C0] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 02 00 00 49 89 ce 89 54 24 58 <48> 89 bc 24 80 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 a0 [ 301.126963][ C0] RSP: 0018:ffffc90000005500 EFLAGS: 00000086 [ 301.126980][ C0] RAX: 1ffffffff2595d4c RBX: ffffffff92caea60 RCX: d57e1d102ea6ccdd [ 301.126995][ C0] RDX: 0000000000000001 RSI: ffff8880287ae648 RDI: ffff8880287ada00 [ 301.127008][ C0] RBP: ffffc90000005800 R08: ffffffff92fc36cf R09: 1ffffffff25f86d9 [ 301.127022][ C0] R10: dffffc0000000000 R11: fffffbfff25f86da R12: ffff8880287ada00 [ 301.127036][ C0] R13: ffff8880287ae4d8 R14: d57e1d102ea6ccdd R15: 0000000000000001 [ 301.127050][ C0] FS: 000000c00005a090(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 301.127067][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.127080][ C0] CR2: 0000001b32f23000 CR3: 0000000076b18000 CR4: 00000000003506f0 [ 301.127095][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.127106][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.127118][ C0] Call Trace: [ 301.127126][ C0] [ 301.127135][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 301.127159][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 301.127180][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 301.127206][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 301.127227][ C0] ? nmi_handle+0x14f/0x5a0 [ 301.127244][ C0] ? nmi_handle+0x2a/0x5a0 [ 301.127262][ C0] ? validate_chain+0x23/0x5920 [ 301.127284][ C0] ? default_do_nmi+0x63/0x160 [ 301.127302][ C0] ? exc_nmi+0x123/0x1f0 [ 301.127318][ C0] ? end_repeat_nmi+0xf/0x53 [ 301.127349][ C0] ? validate_chain+0x23/0x5920 [ 301.127372][ C0] ? validate_chain+0x23/0x5920 [ 301.127396][ C0] ? validate_chain+0x23/0x5920 [ 301.127418][ C0] [ 301.127424][ C0] [ 301.127435][ C0] ? __lock_acquire+0x1359/0x2000 [ 301.127457][ C0] ? __pfx_validate_chain+0x10/0x10 [ 301.127484][ C0] ? mark_lock+0x9a/0x360 [ 301.127506][ C0] ? mark_lock+0x9a/0x360 [ 301.127528][ C0] ? __lock_acquire+0x1359/0x2000 [ 301.127553][ C0] ? mark_lock+0x9a/0x360 [ 301.127575][ C0] ? mark_lock+0x9a/0x360 [ 301.127602][ C0] __lock_acquire+0x1359/0x2000 [ 301.127629][ C0] lock_acquire+0x1ed/0x550 [ 301.127648][ C0] ? __hrtimer_run_queues+0x670/0xd50 [ 301.127667][ C0] ? advance_sched+0xa02/0xca0 [ 301.127690][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 301.127712][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.127729][ C0] ? taprio_set_budgets+0x333/0x370 [ 301.127750][ C0] ? advance_sched+0xa02/0xca0 [ 301.127770][ C0] ? advance_sched+0xa02/0xca0 [ 301.127793][ C0] _raw_spin_lock_irq+0xd3/0x120 [ 301.127819][ C0] ? __hrtimer_run_queues+0x670/0xd50 [ 301.127836][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 301.127866][ C0] __hrtimer_run_queues+0x670/0xd50 [ 301.127884][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 301.127914][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 301.127936][ C0] hrtimer_interrupt+0x396/0x990 [ 301.127964][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 301.127991][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 301.128013][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.128038][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 301.128061][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 [ 301.128076][ C0] RSP: 0018:ffffc90000005e60 EFLAGS: 00000246 [ 301.128091][ C0] RAX: ffffffff81411491 RBX: ffffffff9011d154 RCX: ffff8880287ada00 [ 301.128105][ C0] RDX: 0000000080000305 RSI: ffffffff89610bda RDI: ffffffff89610b1a [ 301.128119][ C0] RBP: ffffffff89610b1a R08: ffffffff81411470 R09: ffffc90000006030 [ 301.128133][ C0] R10: 0000000000000003 R11: ffffffff81824050 R12: ffffffff9011d158 [ 301.128146][ C0] R13: ffffffff9011d158 R14: ffffffff89610bda R15: ffffffff9011d154 [ 301.128160][ C0] ? __napi_poll+0xca/0x490 [ 301.128179][ C0] ? __napi_poll+0xa/0x490 [ 301.128198][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.128219][ C0] ? unwind_next_frame+0x510/0x2a00 [ 301.128243][ C0] ? unwind_next_frame+0x531/0x2a00 [ 301.128266][ C0] ? __napi_poll+0xca/0x490 [ 301.128284][ C0] ? __napi_poll+0xa/0x490 [ 301.128304][ C0] unwind_next_frame+0x531/0x2a00 [ 301.128329][ C0] ? __napi_poll+0xca/0x490 [ 301.128350][ C0] ? __napi_poll+0xcb/0x490 [ 301.128368][ C0] ? __napi_poll+0xcb/0x490 [ 301.128386][ C0] ? __kernel_text_address+0xd/0x40 [ 301.128410][ C0] ? __napi_poll+0xcb/0x490 [ 301.128428][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.128449][ C0] arch_stack_walk+0x151/0x1b0 [ 301.128469][ C0] ? __napi_poll+0xcb/0x490 [ 301.128491][ C0] stack_trace_save+0x118/0x1d0 [ 301.128512][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 301.128534][ C0] ? __lock_acquire+0x1359/0x2000 [ 301.128557][ C0] kasan_save_track+0x3f/0x80 [ 301.128584][ C0] ? kasan_save_track+0x3f/0x80 [ 301.128607][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 301.128631][ C0] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 301.128651][ C0] ? skb_clone+0x20c/0x390 [ 301.128669][ C0] ? dev_queue_xmit_nit+0x419/0xc10 [ 301.128692][ C0] ? dev_hard_start_xmit+0x15f/0x7e0 [ 301.128708][ C0] ? sch_direct_xmit+0x2b6/0x5f0 [ 301.128726][ C0] ? __dev_queue_xmit+0x1a24/0x3d30 [ 301.128743][ C0] ? ip_finish_output2+0xd41/0x1380 [ 301.128767][ C0] ? __ip_queue_xmit+0x118c/0x1b70 [ 301.128789][ C0] ? __tcp_transmit_skb+0x2544/0x3b30 [ 301.128811][ C0] ? tcp_rcv_established+0x107e/0x2020 [ 301.128835][ C0] ? tcp_v4_do_rcv+0x965/0xc60 [ 301.128852][ C0] ? tcp_v4_rcv+0x2d9e/0x37c0 [ 301.128869][ C0] ? ip_protocol_deliver_rcu+0x225/0x430 [ 301.128888][ C0] ? ip_local_deliver_finish+0x341/0x5f0 [ 301.128907][ C0] ? NF_HOOK+0x3a4/0x450 [ 301.128924][ C0] ? ip_sublist_rcv_finish+0x3be/0x4f0 [ 301.128943][ C0] ? ip_sublist_rcv+0x75d/0xab0 [ 301.128961][ C0] ? ip_list_rcv+0x42b/0x480 [ 301.128979][ C0] ? __netif_receive_skb_list_core+0x95a/0x980 [ 301.128999][ C0] ? netif_receive_skb_list_internal+0xa51/0xe30 [ 301.129019][ C0] ? napi_complete_done+0x310/0x8e0 [ 301.129037][ C0] ? virtnet_poll+0xd68/0x18c0 [ 301.129059][ C0] ? __napi_poll+0xcb/0x490 [ 301.129093][ C0] __kasan_slab_alloc+0x66/0x80 [ 301.129118][ C0] ? skb_clone+0x20c/0x390 [ 301.129135][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 301.129158][ C0] skb_clone+0x20c/0x390 [ 301.129176][ C0] ? dev_queue_xmit_nit+0x230/0xc10 [ 301.129201][ C0] dev_queue_xmit_nit+0x419/0xc10 [ 301.129225][ C0] ? dev_queue_xmit_nit+0x2b/0xc10 [ 301.129253][ C0] dev_hard_start_xmit+0x15f/0x7e0 [ 301.129271][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 301.129292][ C0] sch_direct_xmit+0x2b6/0x5f0 [ 301.129314][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 301.129337][ C0] __dev_queue_xmit+0x1a24/0x3d30 [ 301.129362][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 301.129383][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 301.129403][ C0] ? mark_lock+0x9a/0x360 [ 301.129425][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.129447][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.129468][ C0] ? ip_finish_output2+0xa14/0x1380 [ 301.129494][ C0] ? ip_finish_output2+0x45f/0x1380 [ 301.129518][ C0] ip_finish_output2+0xd41/0x1380 [ 301.129543][ C0] ? ip_finish_output2+0x45f/0x1380 [ 301.129571][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 301.129600][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 301.129624][ C0] ? __ip_finish_output+0x347/0x400 [ 301.129650][ C0] __ip_queue_xmit+0x118c/0x1b70 [ 301.129673][ C0] ? __pfx___tcp_select_window+0x10/0x10 [ 301.129696][ C0] ? __ip_queue_xmit+0x5f/0x1b70 [ 301.129718][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 301.129741][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 301.129775][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 301.129807][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 301.129834][ C0] ? __tcp_send_ack+0x17e/0x600 [ 301.129858][ C0] tcp_rcv_established+0x107e/0x2020 [ 301.129889][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 301.129913][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 301.129934][ C0] tcp_v4_do_rcv+0x965/0xc60 [ 301.129955][ C0] tcp_v4_rcv+0x2d9e/0x37c0 [ 301.129995][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 301.130017][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 301.130036][ C0] ip_protocol_deliver_rcu+0x225/0x430 [ 301.130057][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 301.130077][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 301.130099][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 301.130119][ C0] NF_HOOK+0x3a4/0x450 [ 301.130139][ C0] ? NF_HOOK+0x9a/0x450 [ 301.130157][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 301.130176][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 301.130201][ C0] ip_sublist_rcv_finish+0x3be/0x4f0 [ 301.130224][ C0] ip_sublist_rcv+0x75d/0xab0 [ 301.130243][ C0] ? __pfx_packet_rcv+0x10/0x10 [ 301.130269][ C0] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 301.130288][ C0] ? skb_orphan+0xae/0xd0 [ 301.130307][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 301.130331][ C0] ip_list_rcv+0x42b/0x480 [ 301.130354][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 301.130376][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 301.130395][ C0] __netif_receive_skb_list_core+0x95a/0x980 [ 301.130421][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 301.130442][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 301.130463][ C0] ? timekeeping_get_ns+0x2c0/0x420 [ 301.130488][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 301.130508][ C0] netif_receive_skb_list_internal+0xa51/0xe30 [ 301.130532][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 301.130553][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 301.130573][ C0] ? napi_gro_receive+0x6f3/0xc90 [ 301.130598][ C0] ? receive_buf+0x1d0a/0x3830 [ 301.130624][ C0] napi_complete_done+0x310/0x8e0 [ 301.130647][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 301.130668][ C0] ? virtqueue_get_buf_ctx+0x48e/0xde0 [ 301.130688][ C0] ? virtqueue_enable_cb_prepare+0x283/0x540 [ 301.130708][ C0] virtnet_poll+0xd68/0x18c0 [ 301.130739][ C0] ? __pfx_virtnet_poll+0x10/0x10 [ 301.130763][ C0] ? __pfx_validate_chain+0x10/0x10 [ 301.130788][ C0] ? __pfx_virtnet_poll+0x10/0x10 [ 301.130815][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.130837][ C0] __napi_poll+0xcb/0x490 [ 301.130858][ C0] net_rx_action+0x7bb/0x10a0 [ 301.130888][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 301.130911][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.130939][ C0] handle_softirqs+0x2c4/0x970 [ 301.130960][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 301.130980][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 301.131000][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 301.131022][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 301.131040][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 301.131063][ C0] irq_exit_rcu+0x9/0x30 [ 301.131079][ C0] common_interrupt+0xaa/0xd0 [ 301.131096][ C0] [ 301.131102][ C0] [ 301.131109][ C0] asm_common_interrupt+0x26/0x40 [ 301.131133][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 301.131157][ C0] Code: c9 50 e8 f9 b4 0b 00 48 83 c4 08 4c 89 f7 e8 7d 38 00 00 e9 de 04 00 00 4c 89 f7 e8 d0 25 31 0a e8 3b 2e 37 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 301.131173][ C0] RSP: 0018:ffffc9000353f7a8 EFLAGS: 00000286 [ 301.131187][ C0] RAX: 3c64faf3916d9800 RBX: ffff8880287ada00 RCX: ffffffff947bb803 [ 301.131201][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabee0 RDI: ffffffff8c200640 [ 301.131215][ C0] RBP: ffffc9000353f7f0 R08: ffffffff8fadd32f R09: 1ffffffff1f5ba65 [ 301.131229][ C0] R10: dffffc0000000000 R11: fffffbfff1f5ba66 R12: 1ffff11017287ea7 [ 301.131243][ C0] R13: dffffc0000000000 R14: ffff8880b943e7c0 R15: ffff8880b943f538 [ 301.131265][ C0] ? finish_task_switch+0x1e5/0x870 [ 301.131291][ C0] __schedule+0x17f0/0x4a20 [ 301.131318][ C0] ? __pfx___schedule+0x10/0x10 [ 301.131336][ C0] ? __pfx_lock_release+0x10/0x10 [ 301.131356][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 301.131384][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 301.131410][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 301.131438][ C0] ? schedule+0x90/0x320 [ 301.131453][ C0] schedule+0x14b/0x320 [ 301.131470][ C0] ? futex_wait_queue+0x27/0x1d0 [ 301.131493][ C0] futex_wait_queue+0x14e/0x1d0 [ 301.131518][ C0] __futex_wait+0x17f/0x320 [ 301.131544][ C0] ? __pfx___futex_wait+0x10/0x10 [ 301.131568][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 301.131600][ C0] ? ktime_add_safe+0x38/0x70 [ 301.131626][ C0] futex_wait+0x101/0x360 [ 301.131650][ C0] ? __pfx_futex_wait+0x10/0x10 [ 301.131673][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 301.131693][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 301.131714][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 301.131735][ C0] ? ktime_get+0x3c/0xb0 [ 301.131754][ C0] do_futex+0x33b/0x560 [ 301.131776][ C0] ? __pfx_do_futex+0x10/0x10 [ 301.131799][ C0] __se_sys_futex+0x3f9/0x480 [ 301.131822][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 301.131842][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.131862][ C0] ? do_syscall_64+0x100/0x230 [ 301.131885][ C0] ? __x64_sys_futex+0x21/0xf0 [ 301.131906][ C0] do_syscall_64+0xf3/0x230 [ 301.131928][ C0] ? clear_bhb_loop+0x35/0x90 [ 301.131945][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.131969][ C0] RIP: 0033:0x473523 [ 301.131988][ C0] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 301.132003][ C0] RSP: 002b:000000c00006be80 EFLAGS: 00000202 ORIG_RAX: 00000000000000ca [ 301.132020][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000473523 [ 301.132032][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000025cdce0 [ 301.132044][ C0] RBP: 000000c00006bec8 R08: 0000000000000000 R09: 0000000000000000 [ 301.132056][ C0] R10: 000000c00006beb8 R11: 0000000000000202 R12: 000000c00006beb8 [ 301.132068][ C0] R13: 000000c000e21800 R14: 000000c0000064e0 R15: 0000000000000003 [ 301.132088][ C0] [ 301.132823][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g25733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 301.132846][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 301.132855][ C1] rcu: RCU grace-period kthread stack dump: [ 301.132862][ C1] task:rcu_preempt state:R running task stack:23992 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 301.132899][ C1] Call Trace: [ 301.132905][ C1] [ 301.132917][ C1] __schedule+0x17e8/0x4a20 [ 301.132956][ C1] ? __pfx___schedule+0x10/0x10 [ 301.132978][ C1] ? __pfx_lock_release+0x10/0x10 [ 301.132996][ C1] ? __asan_memset+0x23/0x50 [ 301.133022][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 301.133043][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.133066][ C1] ? schedule+0x90/0x320 [ 301.133082][ C1] schedule+0x14b/0x320 [ 301.133102][ C1] schedule_timeout+0x1be/0x310 [ 301.133125][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 301.133149][ C1] ? __pfx_process_timeout+0x10/0x10 [ 301.133178][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 301.133202][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 301.133222][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 301.133246][ C1] ? rcu_gp_init+0x126f/0x1650 [ 301.133272][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 301.133290][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 301.133326][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 301.133350][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 301.133380][ C1] ? finish_swait+0xd4/0x1e0 [ 301.133402][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 301.133425][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 301.133444][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 301.133472][ C1] ? __kthread_parkme+0x169/0x1d0 [ 301.133496][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 301.133516][ C1] kthread+0x2f0/0x390 [ 301.133537][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 301.133556][ C1] ? __pfx_kthread+0x10/0x10 [ 301.133578][ C1] ret_from_fork+0x4b/0x80 [ 301.133599][ C1] ? __pfx_kthread+0x10/0x10 [ 301.133620][ C1] ret_from_fork_asm+0x1a/0x30 [ 301.133659][ C1] [ 301.133670][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 301.133679][ C1] CPU: 1 PID: 7932 Comm: syz-executor.1 Tainted: G W 6.10.0-rc2-next-20240605-syzkaller #0 [ 301.133702][ C1] Tainted: [W]=WARN [ 301.133707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 301.133717][ C1] RIP: 0010:smp_call_function_many_cond+0x1871/0x29d0 [ 301.133743][ C1] Code: 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 a4 08 0c 00 eb 38 f3 90 42 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 <74> 1e e8 88 08 0c 00 eb e4 44 89 e9 80 e1 07 80 c1 03 38 c1 7c e2 [ 301.133757][ C1] RSP: 0018:ffffc9000e47f7e0 EFLAGS: 00000202 [ 301.133772][ C1] RAX: 0000000000000000 RBX: 1ffff11017288c11 RCX: 0000000000040000 [ 301.133785][ C1] RDX: ffffc900045e9000 RSI: 000000000003ffff RDI: 0000000000040000 [ 301.133797][ C1] RBP: ffffc9000e47f9b0 R08: ffffffff818a8877 R09: 1ffffffff1f5ba65 [ 301.133810][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 301.133823][ C1] R13: ffff8880b9446088 R14: ffff8880b953f900 R15: 0000000000000000 [ 301.133836][ C1] FS: 00007ff9f59986c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 301.133852][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.133864][ C1] CR2: 0000000000000000 CR3: 000000001e46e000 CR4: 00000000003506f0 [ 301.133879][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.133890][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.133901][ C1] Call Trace: [ 301.133907][ C1] [ 301.133914][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 301.133941][ C1] ? print_other_cpu_stall+0x147a/0x15b0 [ 301.133975][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 301.133996][ C1] ? __pfx_lock_release+0x10/0x10 [ 301.134026][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 301.134048][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 301.134080][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 301.134103][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 301.134121][ C1] ? acct_account_cputime+0xdd/0x210 [ 301.134146][ C1] ? update_process_times+0x1ce/0x230 [ 301.134169][ C1] ? tick_nohz_handler+0x37c/0x500 [ 301.134192][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 301.134212][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 301.134230][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 301.134267][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 301.134286][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 301.134313][ C1] ? hrtimer_interrupt+0x396/0x990 [ 301.134359][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 301.134385][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 301.134405][ C1] [ 301.134411][ C1] [ 301.134418][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.134447][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 301.134475][ C1] ? smp_call_function_many_cond+0x1871/0x29d0 [ 301.134510][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 301.134534][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.134564][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 301.134588][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 301.134609][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 301.134632][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 301.134657][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 301.134692][ C1] clock_was_set+0x75c/0x810 [ 301.134724][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 301.134747][ C1] ? __asan_memcpy+0x40/0x70 [ 301.134769][ C1] ? timekeeping_update+0x3e5/0x450 [ 301.134790][ C1] ? do_adjtimex+0x515/0xab0 [ 301.134811][ C1] timekeeping_inject_offset+0x4e8/0x580 [ 301.134830][ C1] ? do_adjtimex+0x515/0xab0 [ 301.134856][ C1] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 301.134877][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 301.134903][ C1] ? security_capable+0x90/0xb0 [ 301.134928][ C1] do_adjtimex+0x515/0xab0 [ 301.134954][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 301.134975][ C1] ? __pfx___might_resched+0x10/0x10 [ 301.134994][ C1] ? __might_fault+0xaa/0x120 [ 301.135014][ C1] ? __pfx_lock_release+0x10/0x10 [ 301.135043][ C1] ? __might_fault+0xc6/0x120 [ 301.135068][ C1] __x64_sys_clock_adjtime+0x1e1/0x290 [ 301.135091][ C1] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 301.135111][ C1] ? rcu_is_watching+0x15/0xb0 [ 301.135155][ C1] ? __secure_computing+0x125/0x370 [ 301.135181][ C1] do_syscall_64+0xf3/0x230 [ 301.135203][ C1] ? clear_bhb_loop+0x35/0x90 [ 301.135221][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.135243][ C1] RIP: 0033:0x7ff9f4c7cf69 [ 301.135259][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 301.135273][ C1] RSP: 002b:00007ff9f59980c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 301.135289][ C1] RAX: ffffffffffffffda RBX: 00007ff9f4db3f80 RCX: 00007ff9f4c7cf69 [ 301.135303][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 301.135314][ C1] RBP: 00007ff9f4cda6fe R08: 0000000000000000 R09: 0000000000000000 [ 301.135325][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.135340][ C1] R13: 000000000000000b R14: 00007ff9f4db3f80 R15: 00007ffc30777df8 [ 301.135368][ C1]