last executing test programs: 28.5247597s ago: executing program 4: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000f00)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) 27.299863189s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) 26.970999149s ago: executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 26.824174993s ago: executing program 4: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000001800)={[{@errors_continue}, {@utf8}, {@allow_utime={'allow_utime', 0x3d, 0x101}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@namecase}, {@utf8}, {@namecase}]}, 0x1, 0x1515, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/class/net', 0x0, 0x0) 26.532013835s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa00400, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@journal_checksum}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x576, &(0x7f0000004a80)="$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") 26.362411142s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000800)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xfffffffd}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x90) 25.893648542s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) fsync(r0) 25.890994741s ago: executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000000180)={[{@dmode={'dmode', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@gid_ignore}, {@shortad}, {@mode={'mode', 0x3d, 0x8}}, {@nostrict}, {@volume={'volume', 0x3d, 0x7}}, {@anchor={'anchor', 0x3d, 0x101}}]}, 0xfc, 0xc34, &(0x7f00000002c0)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==") openat$dir(0xffffffffffffff9c, &(0x7f000001f4c0)='./file1\x00', 0x0, 0x0) 25.607370607s ago: executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x1}) 25.548308766s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x5}]}]}}}]}, 0x68}}, 0x0) 25.471273876s ago: executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 25.102662313s ago: executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000340)={0x28, 0x4, 0x0, {0x1, 0x2}}, 0x28) syz_open_procfs(0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x7f, 0xa0, 0x14, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x7}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x2, "8b"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x6}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x5, "a0c7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x40, 0x0, {0x7, 0x25, 0x1, 0x3, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7f, 0x81, "63fb24b70803000000"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x7, 0x8, "40320bcc57a3edf4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x6, 0x80, {0x7, 0x25, 0x1, 0x82, 0x0, 0xd31}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x54, 0x2, 0x40}, 0x0, 0x0, 0x5, [{0x3e, &(0x7f0000000280)=@string={0x3e, 0x3, "97a3db172e8221127191d4999e36c62bf32edec93e16190b5ab244e4cb6f3ffbc9ca5148d3ed21c9c30afb3334fb3eba5d428bc05b593b252dd6fa8a"}}, {0x9a, &(0x7f0000000300)=@string={0x9a, 0x3, "363dec78fda22cf16598b0a1b0ea41bf3fa9886f74da16604eafffbb0743ebb1ce3a8e374babaaf32cba18b3d9608b51462105894ee90afcad061b6f012b4001f12aac56a3dbfd3b58ff877e6633457a17c4e6499d8c56ebee387cabc26eed5d38ac2bc049739a27b96b7cf6b3f1756806a8d8d9b250ff60821130807343be14ef1836d50740a8c957bd694d13b4f5c23e3c523d7d2f7395"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40e}}, {0xf9, &(0x7f0000000480)=@string={0xf9, 0x3, "0ae969768d0bc63a0cb475ee81eb143ffe31cbc7ea5f45b9e424b584e2595ca6c1409c82f2c4783029cf7b6170d1ea2d60b5eec0392284229799c5ce62aff4977db1c3d1a6e05336db16acf2b6aba0b4b4122f07451931324ffdd3134d944ea090b7252a864c60700eb6eec226407ee7304bafc9367761fb0e67f5b7d3e2ea71e75b3cd1081e5ec5495125ade17579cec388eb15d7cc6f7a64d46d2cee67d0d2cd58678b5c96086a624f7979ff4e981e463e804c024da523f06224cb85f7e0722b3812c3fc5123beabcfb88cd8312c021fdea3a19074fd1889a0fc9db08b4fb9742c2a31748743d3e13cceda44258308e2e435a8e7852a"}}]}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x407a51c8, 0x4, 0x9, 0x4, 0x1}) 24.979659348s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = fspick(r0, &(0x7f0000002200)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 24.474117703s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00180800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 23.76784984s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 23.531282695s ago: executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x4}, 0x20) getpeername$l2tp6(r0, 0x0, &(0x7f0000000300)) 22.302588332s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 22.227099994s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = syz_io_uring_setup(0x1a05, &(0x7f0000000140), &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000280)) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300)={0x515082, 0x0, 0x29}, &(0x7f0000000040)='./file0\x00', 0x18}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x3f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xb6, &(0x7f00000002c0)=""/182, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000440)={0x800, 0x5a, {}, {}, 0xa86a, 0x5}) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x7f, 0x1ff, 0x4, @mcast2, @remote, 0x10, 0x80, 0x3, 0x1}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="12040500d3fc030000004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.083650178s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = fspick(r0, &(0x7f0000002200)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 21.760186217s ago: executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000003c0)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 21.31111603s ago: executing program 0: r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000), 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000300), 0x0, 0x0) recvmmsg(r6, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000180)=0x8) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) 21.2457611s ago: executing program 3: unshare(0x680) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000180)="66454a021f406c83568aa8e7873e9c41", 0x10) 20.345000277s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0xa66, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 20.011647034s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x60}}, 0x0) 3.746263137s ago: executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80789440, &(0x7f0000000280)) 3.677857842s ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001ac0000002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.448108656s ago: executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x5, @sliced}) 3.356208869s ago: executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 3.242500987s ago: executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}) 3.160389351s ago: executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000030426bd70000000000000000300", @ANYRES32=r1, @ANYBLOB="0100000000000000340012800b00010067656e657665"], 0x5c}}, 0x0) 2.800481693s ago: executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x4}]}}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}}}, 0x0) 2.670155728s ago: executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x24, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) dup3(r0, r1, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.709212565s ago: executing program 5: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.56400055s ago: executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x8006, 0x86, 0x3) 1.47342486s ago: executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000006c000100"/20, @ANYBLOB], 0x4c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r1}, 0x10) socketpair(0x18, 0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9febfa0018000000000000000c0000000c000000040000000400000000f1cb18000000000000ad3b5500000000"], 0x0, 0x28}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000280)=0xee, 0x4) io_setup(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000300)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r9, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 4977][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.777358][ T5177] usb 4-1: config 0 descriptor?? [ 479.190136][T12110] loop1: detected capacity change from 0 to 8 [ 479.231316][ T5177] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 479.248314][T12110] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 479.316899][ T5177] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 479.352032][T12110] cramfs: Error -3 while decompressing! [ 479.384172][T12110] cramfs: ffffffff948d4a68(18)->ffff888058b17000(4096) [ 479.394242][T12110] cramfs: Error -3 while decompressing! [ 479.429683][T12110] cramfs: ffffffff948d4a68(18)->ffff888058b17000(4096) [ 479.458793][ T5178] usb 4-1: USB disconnect, device number 8 [ 479.495714][ T29] audit: type=1800 audit(1718308452.405:567): pid=12110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=324 res=0 errno=0 [ 479.619861][T12123] loop5: detected capacity change from 0 to 16 [ 479.639900][T12123] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 479.840431][T12136] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 479.866635][T12136] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 479.876492][T12137] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 479.913230][T12141] loop0: detected capacity change from 0 to 256 [ 479.954252][T12141] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 479.988652][T12146] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 480.319385][ T5177] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 480.526724][ T5177] usb 5-1: Using ep0 maxpacket: 32 [ 480.533397][T12167] loop1: detected capacity change from 0 to 1024 [ 480.560505][ T5177] usb 5-1: config 0 has no interfaces? [ 480.574992][ T5177] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.616105][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.669121][ T5177] usb 5-1: config 0 descriptor?? [ 480.883401][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 480.945090][ T9] usb 5-1: USB disconnect, device number 6 [ 482.089773][T12201] xt_TCPMSS: Only works on TCP SYN packets [ 482.417948][T12219] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.142760][T12258] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.184057][T12259] loop0: detected capacity change from 0 to 256 [ 483.275821][T12259] FAT-fs (loop0): Directory bread(block 64) failed [ 483.326760][T12259] FAT-fs (loop0): Directory bread(block 65) failed [ 483.354266][T12259] FAT-fs (loop0): Directory bread(block 66) failed [ 483.367247][T12259] FAT-fs (loop0): Directory bread(block 67) failed [ 483.384363][T12259] FAT-fs (loop0): Directory bread(block 68) failed [ 483.394552][T12259] FAT-fs (loop0): Directory bread(block 69) failed [ 483.411424][T12259] FAT-fs (loop0): Directory bread(block 70) failed [ 483.426566][T12259] FAT-fs (loop0): Directory bread(block 71) failed [ 483.434008][T12259] FAT-fs (loop0): Directory bread(block 72) failed [ 483.444087][T12259] FAT-fs (loop0): Directory bread(block 73) failed [ 483.528814][T12259] syz-executor.0: attempt to access beyond end of device [ 483.528814][T12259] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 483.596750][T12259] syz-executor.0: attempt to access beyond end of device [ 483.596750][T12259] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 483.628039][ T29] audit: type=1800 audit(1718308456.545:568): pid=12259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=1048710 res=0 errno=0 [ 483.777358][ T29] audit: type=1326 audit(1718308456.685:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a99c7cea9 code=0x0 [ 483.798403][T12229] loop4: detected capacity change from 0 to 32768 [ 483.857875][T12229] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 483.980035][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 484.001235][T12229] XFS (loop4): Ending clean mount [ 484.068206][T12229] XFS (loop4): Quotacheck needed: Please wait. [ 484.132311][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 484.177592][T12229] XFS (loop4): Quotacheck: Done. [ 484.221870][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 484.241010][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.287357][ T9] usb 1-1: config 0 descriptor?? [ 484.401388][T11137] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 484.519919][ T9] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 484.544476][ T9] usb 1-1: USB disconnect, device number 10 [ 484.711324][T12316] xt_TCPMSS: Only works on TCP SYN packets [ 485.919827][T12351] xt_TCPMSS: Only works on TCP SYN packets [ 487.682297][T12355] IPVS: Error joining to the multicast group [ 487.700826][T12338] loop3: detected capacity change from 0 to 32768 [ 487.772587][ T4485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.803207][ T4485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.830266][ T4485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.841295][ T4485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.853509][ T4485] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 487.864210][ T4485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 487.992738][T12338] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 488.037931][ T2445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.039607][ T4485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 488.078546][ T4485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 488.103779][ T4485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 488.132901][ T4485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 488.145351][ T4485] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 488.158421][ T4485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.207120][T12338] XFS (loop3): Ending clean mount [ 488.227304][T12338] XFS (loop3): Quotacheck needed: Please wait. [ 488.320503][T12379] loop1: detected capacity change from 0 to 128 [ 488.324653][T12338] XFS (loop3): Quotacheck: Done. [ 488.346099][T12381] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 488.368716][T12379] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 488.398526][ T9199] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 488.426806][ T2445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.027852][ T2445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.034677][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 490.046560][ T53] Bluetooth: hci2: command tx timeout [ 490.209444][ T53] Bluetooth: hci3: command tx timeout [ 490.228449][T12393] xt_CT: No such helper "pptp" [ 491.493521][ T2445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.505118][T12416] loop1: detected capacity change from 0 to 2048 [ 491.564187][T12421] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.644258][ T29] audit: type=1800 audit(1718308464.555:570): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 491.711671][T12425] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.5'. [ 491.768114][ T29] audit: type=1800 audit(1718308464.685:571): pid=12428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 491.977896][T12431] loop3: detected capacity change from 0 to 1024 [ 492.065075][T12400] loop2: detected capacity change from 0 to 40427 [ 492.092219][T12400] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 492.100108][T12400] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 492.118633][T12400] F2FS-fs (loop2): invalid crc value [ 492.126803][ T53] Bluetooth: hci2: command tx timeout [ 492.176398][T12400] F2FS-fs (loop2): Found nat_bits in checkpoint [ 492.220971][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 492.303556][ T53] Bluetooth: hci3: command tx timeout [ 492.365276][T12400] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 492.386435][T12400] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 492.409401][ T29] audit: type=1800 audit(1718308465.325:572): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 492.520841][ T5835] syz-executor.2: attempt to access beyond end of device [ 492.520841][ T5835] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 492.555679][ T5835] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 492.574191][ T5835] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 492.733980][T12359] chnl_net:caif_netlink_parms(): no params data found [ 492.825596][ T2445] bridge_slave_1: left allmulticast mode [ 492.836570][ T2445] bridge_slave_1: left promiscuous mode [ 492.845252][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.878925][ T2445] bridge_slave_0: left allmulticast mode [ 492.884741][ T2445] bridge_slave_0: left promiscuous mode [ 492.906759][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.790836][ T2445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.805436][ T2445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.826139][ T2445] bond0 (unregistering): Released all slaves [ 493.845556][ T2445] bond1 (unregistering): Released all slaves [ 493.955845][T12360] chnl_net:caif_netlink_parms(): no params data found [ 494.159557][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.169870][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.187827][T12359] bridge_slave_0: entered allmulticast mode [ 494.195710][T12359] bridge_slave_0: entered promiscuous mode [ 494.216736][ T53] Bluetooth: hci2: command tx timeout [ 494.266860][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.279292][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.287028][T12359] bridge_slave_1: entered allmulticast mode [ 494.294965][T12359] bridge_slave_1: entered promiscuous mode [ 494.350460][ T2445] hsr_slave_0: left promiscuous mode [ 494.358913][ T2445] hsr_slave_1: left promiscuous mode [ 494.365333][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.374779][ T53] Bluetooth: hci3: command tx timeout [ 494.378193][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.398781][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.406641][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.432488][ T2445] veth1_macvtap: left promiscuous mode [ 494.438287][ T2445] veth0_macvtap: left promiscuous mode [ 494.444069][ T2445] veth1_vlan: left promiscuous mode [ 494.450224][ T2445] veth0_vlan: left promiscuous mode [ 495.389238][ T2445] team0 (unregistering): Port device team_slave_1 removed [ 496.287018][ T53] Bluetooth: hci2: command tx timeout [ 496.293527][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.305225][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.313959][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.324795][T12360] bridge_slave_0: entered allmulticast mode [ 496.333381][T12360] bridge_slave_0: entered promiscuous mode [ 496.345243][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.355027][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.362943][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.370447][T12360] bridge_slave_1: entered allmulticast mode [ 496.378661][T12360] bridge_slave_1: entered promiscuous mode [ 496.448096][ T53] Bluetooth: hci3: command tx timeout [ 496.527278][T12359] team0: Port device team_slave_0 added [ 496.544012][T12360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.582654][T12360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.611457][T12359] team0: Port device team_slave_1 added [ 496.743594][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.750801][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.779565][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.809837][T12360] team0: Port device team_slave_0 added [ 496.823957][T12360] team0: Port device team_slave_1 added [ 496.831015][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.840395][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.866609][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.976649][T12359] hsr_slave_0: entered promiscuous mode [ 496.983731][T12359] hsr_slave_1: entered promiscuous mode [ 496.994674][T12359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.003239][T12359] Cannot create hsr debugfs directory [ 497.027153][T12360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.034126][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.063013][T12360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.106274][T12360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.113346][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.141978][T12360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.222242][T12360] hsr_slave_0: entered promiscuous mode [ 497.235392][T12360] hsr_slave_1: entered promiscuous mode [ 497.248649][T12360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.257250][T12360] Cannot create hsr debugfs directory [ 497.461386][ T2445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.631181][ T2445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.759093][ T2445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.876114][ T2445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.082426][ T2445] bridge_slave_1: left allmulticast mode [ 498.089749][ T2445] bridge_slave_1: left promiscuous mode [ 498.095548][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.106872][ T2445] bridge_slave_0: left allmulticast mode [ 498.112551][ T2445] bridge_slave_0: left promiscuous mode [ 498.118486][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.709810][ T2445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.724595][ T2445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.736808][ T2445] bond0 (unregistering): Released all slaves [ 499.144784][ T2445] hsr_slave_0: left promiscuous mode [ 499.151434][ T2445] hsr_slave_1: left promiscuous mode [ 499.160867][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.168657][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.177483][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.188854][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.244810][ T2445] veth1_macvtap: left promiscuous mode [ 499.251874][ T2445] veth0_macvtap: left promiscuous mode [ 499.257727][ T2445] veth1_vlan: left promiscuous mode [ 499.263314][ T2445] veth0_vlan: left promiscuous mode [ 499.756059][T12464] Process accounting resumed [ 499.776542][T12464] kernel write not supported for file /8135/clear_refs (pid: 12464 comm: syz-executor.2) [ 499.919074][ T29] audit: type=1326 audit(1718308472.835:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 499.979229][ T29] audit: type=1326 audit(1718308472.835:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.044096][ T29] audit: type=1326 audit(1718308472.835:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.073015][T12466] kernel write not supported for file /8135/clear_refs (pid: 12466 comm: syz-executor.2) [ 500.089653][ T29] audit: type=1326 audit(1718308472.835:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.163935][ T29] audit: type=1326 audit(1718308472.855:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.215202][T12476] kernel write not supported for file /8135/clear_refs (pid: 12476 comm: syz-executor.2) [ 500.239347][ T29] audit: type=1326 audit(1718308472.855:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.267494][T12475] loop5: detected capacity change from 0 to 2048 [ 500.289457][ T29] audit: type=1326 audit(1718308472.855:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.325298][T12479] loop2: detected capacity change from 0 to 64 [ 500.351978][ T29] audit: type=1326 audit(1718308472.855:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.378424][ T29] audit: type=1326 audit(1718308472.865:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.403848][ T29] audit: type=1326 audit(1718308472.875:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 500.703018][T12470] Falling back ldisc for ptm0. [ 500.751825][T12483] syz-executor.5 (pid 12483) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 500.882173][T12487] loop1: detected capacity change from 0 to 128 [ 500.998217][T12487] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 501.090987][T12487] ext4 filesystem being mounted at /root/syzkaller-testdir432414002/syzkaller.TK5DI9/249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 501.171930][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.180904][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.237688][ T2445] team0 (unregistering): Port device team_slave_1 removed [ 501.536192][ T2445] team0 (unregistering): Port device team_slave_0 removed [ 503.561706][T12479] kernel write not supported for file /8135/clear_refs (pid: 12479 comm: syz-executor.2) [ 503.637390][ T3583] kworker/u8:9: attempt to access beyond end of device [ 503.637390][ T3583] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 503.670740][ T3583] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 503.715134][ T3583] kworker/u8:9: attempt to access beyond end of device [ 503.715134][ T3583] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 503.759990][ T9158] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.779612][ T3583] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 503.818455][ T3583] kworker/u8:9: attempt to access beyond end of device [ 503.818455][ T3583] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 503.853895][ T3583] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 503.859746][T12359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 503.862795][ T3583] kworker/u8:9: attempt to access beyond end of device [ 503.862795][ T3583] loop2: rw=1, sector=68, nr_sectors = 1 limit=64 [ 503.882721][ T3583] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 503.891489][ T3583] kworker/u8:9: attempt to access beyond end of device [ 503.891489][ T3583] loop2: rw=1, sector=72, nr_sectors = 1 limit=64 [ 503.911492][ T3583] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 503.922854][ T3583] kworker/u8:9: attempt to access beyond end of device [ 503.922854][ T3583] loop2: rw=1, sector=73, nr_sectors = 1 limit=64 [ 504.015303][ T3583] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 504.026746][ T3583] kworker/u8:9: attempt to access beyond end of device [ 504.026746][ T3583] loop2: rw=1, sector=76, nr_sectors = 1 limit=64 [ 504.062475][ T3583] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 504.092551][ T3583] kworker/u8:9: attempt to access beyond end of device [ 504.092551][ T3583] loop2: rw=1, sector=77, nr_sectors = 1 limit=64 [ 504.136427][ T3583] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 504.161970][ T3583] kworker/u8:9: attempt to access beyond end of device [ 504.161970][ T3583] loop2: rw=1, sector=78, nr_sectors = 89 limit=64 [ 504.192598][T12359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 504.214710][T12508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.224544][T12359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 504.287726][T12508] loop5: detected capacity change from 0 to 512 [ 504.366131][T12359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 504.427988][T12512] kernel write not supported for file /8135/clear_refs (pid: 12512 comm: syz-executor.2) [ 504.740036][T12520] kernel write not supported for file /8135/clear_refs (pid: 12520 comm: syz-executor.2) [ 505.159671][T12537] loop1: detected capacity change from 0 to 2048 [ 505.837918][T12531] xt_CT: No such helper "snmp_trap" [ 505.923388][T12531] kernel write not supported for file /8135/clear_refs (pid: 12531 comm: syz-executor.2) [ 505.983840][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.992903][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 506.148866][T12547] kernel write not supported for file /8135/clear_refs (pid: 12547 comm: syz-executor.2) [ 506.168351][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.177704][T12360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 506.219712][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.226988][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.267362][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 506.267386][ T29] audit: type=1326 audit(1718308479.175:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.321206][T12555] kernel write not supported for file /8135/clear_refs (pid: 12555 comm: syz-executor.2) [ 506.364003][T12360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 506.379302][ T29] audit: type=1326 audit(1718308479.215:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.422617][T12360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 506.441874][ T29] audit: type=1326 audit(1718308479.215:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.465092][T12360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 506.496996][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.510276][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.517632][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.519769][T12561] xt_CT: No such helper "pptp" [ 506.546472][ T29] audit: type=1326 audit(1718308479.215:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.648054][ T29] audit: type=1326 audit(1718308479.215:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.689314][ T29] audit: type=1326 audit(1718308479.215:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.755730][T12560] kernel write not supported for file /8135/clear_refs (pid: 12560 comm: syz-executor.2) [ 506.799920][T12570] loop5: detected capacity change from 0 to 512 [ 506.816438][ T29] audit: type=1326 audit(1718308479.215:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.858164][T12570] EXT4-fs: Ignoring removed oldalloc option [ 506.899599][ T29] audit: type=1326 audit(1718308479.215:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.935766][ T29] audit: type=1326 audit(1718308479.215:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 506.961997][ T29] audit: type=1326 audit(1718308479.215:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 507.020130][T12575] kernel write not supported for file /8135/clear_refs (pid: 12575 comm: syz-executor.2) [ 507.140021][T12360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.213784][T12360] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.235188][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 507.258627][T12581] kernel write not supported for file /8135/clear_refs (pid: 12581 comm: syz-executor.2) [ 507.271937][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.279282][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.331923][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.339207][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.500327][T12590] kernel write not supported for file /8135/clear_refs (pid: 12590 comm: syz-executor.2) [ 507.530019][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.885016][T12611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.982120][T12611] loop5: detected capacity change from 0 to 512 [ 508.066729][ T5177] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 508.111442][T12360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.271864][ T5177] usb 2-1: Using ep0 maxpacket: 16 [ 508.279862][ T5177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.293991][T12360] veth0_vlan: entered promiscuous mode [ 508.326780][ T5177] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 508.354459][ T5177] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.375520][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 508.409697][ T5177] usb 2-1: SerialNumber: syz [ 508.430164][T12360] veth1_vlan: entered promiscuous mode [ 508.495263][T12600] kernel write not supported for file /8135/clear_refs (pid: 12600 comm: syz-executor.2) [ 508.540706][T12359] veth0_vlan: entered promiscuous mode [ 508.669463][T12623] loop2: detected capacity change from 0 to 64 [ 508.679993][T12359] veth1_vlan: entered promiscuous mode [ 508.693374][ T5211] usb 2-1: USB disconnect, device number 14 [ 508.771288][T12360] veth0_macvtap: entered promiscuous mode [ 508.809386][T12623] kernel write not supported for file /8135/clear_refs (pid: 12623 comm: syz-executor.2) [ 508.859424][T12360] veth1_macvtap: entered promiscuous mode [ 508.946200][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.969707][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.029737][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.038388][T12632] kernel write not supported for file /8135/clear_refs (pid: 12632 comm: syz-executor.2) [ 509.046017][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.062694][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.073518][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.085156][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.097895][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.108281][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.123385][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.128541][T12635] loop3: detected capacity change from 0 to 256 [ 509.149939][T12635] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 509.162604][T12635] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 509.190594][T12360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.240293][T12359] veth0_macvtap: entered promiscuous mode [ 509.290467][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.346427][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.382831][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.394600][T12643] tmpfs: Bad value for 'nr_inodes' [ 509.407334][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.426186][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.441539][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.479936][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.495000][T12647] loop2: detected capacity change from 0 to 256 [ 509.501809][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.501839][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.536190][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.569270][T12360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.591559][T12360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.623439][T12360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.632408][T12360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.644461][T12360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.684181][T12359] veth1_macvtap: entered promiscuous mode [ 509.852370][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.908901][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.933803][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.009165][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.061217][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.105067][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.136432][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.155711][T12659] loop1: detected capacity change from 0 to 4096 [ 510.170876][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.191129][T12659] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 510.208337][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.259514][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.311141][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.354180][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.400365][T12359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.463435][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.484991][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.546714][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.575982][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.596118][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.626126][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.653620][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.677619][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.698204][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.734680][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.769176][T12675] loop3: detected capacity change from 0 to 64 [ 510.782310][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.826986][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.885313][T12359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.949547][T12677] warn_unsupported: 6 callbacks suppressed [ 510.949574][T12677] kernel write not supported for file /8135/clear_refs (pid: 12677 comm: syz-executor.2) [ 511.833605][T12359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.852511][T12359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.868101][T12359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.878232][T12359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.895591][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 511.895611][ T29] audit: type=1804 audit(1718308484.805:656): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2914191869/syzkaller.DiFxQ0/213/bus" dev="sda1" ino=1953 res=1 errno=0 [ 511.943021][ T29] audit: type=1804 audit(1718308484.845:657): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2914191869/syzkaller.DiFxQ0/213/bus" dev="sda1" ino=1953 res=1 errno=0 [ 512.147440][T12687] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.204241][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.254194][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.480865][T12687] kernel write not supported for file /8135/clear_refs (pid: 12687 comm: syz-executor.2) [ 512.545470][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.578781][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.743926][T12704] loop2: detected capacity change from 0 to 4096 [ 512.758047][T12704] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 512.846998][ T8126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.854974][ T8126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.065236][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.186479][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.528004][T12717] tmpfs: Bad value for 'nr_inodes' [ 513.755626][T12720] loop4: detected capacity change from 0 to 2048 [ 513.892387][T12720] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 514.154027][T12731] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 514.482758][T12738] loop1: detected capacity change from 0 to 256 [ 515.875358][T12746] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 516.141632][T11501] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 516.349699][T12755] loop1: detected capacity change from 0 to 64 [ 516.376735][T11501] usb 4-1: Using ep0 maxpacket: 32 [ 516.402016][T11501] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 516.462919][T11501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.548203][T11501] usb 4-1: config 0 descriptor?? [ 516.613497][T11501] gspca_main: sunplus-2.14.0 probing 041e:400b [ 516.694114][T12713] kernel write not supported for file /8135/clear_refs (pid: 12713 comm: syz-executor.2) [ 517.630331][T11501] gspca_sunplus: reg_w_riv err -71 [ 517.649387][T11501] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 517.711389][T11501] usb 4-1: USB disconnect, device number 9 [ 517.832770][T12751] infiniband syz0: set active [ 517.881160][T12751] infiniband syz0: added veth0_vlan [ 517.965792][T12751] syz0: rxe_create_cq: returned err = -12 [ 518.071591][T12775] loop5: detected capacity change from 0 to 256 [ 518.084136][T12751] infiniband syz0: Couldn't create ib_mad CQ [ 518.084443][T12751] infiniband syz0: Couldn't open port 1 [ 518.419010][T12751] RDS/IB: syz0: added [ 518.474424][T12751] smc: adding ib device syz0 with port count 1 [ 519.111449][T12751] smc: ib device syz0 port 1 has pnetid [ 519.692707][T12780] sit0: entered promiscuous mode [ 519.745587][T12780] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 519.788038][T12773] kernel write not supported for file /8135/clear_refs (pid: 12773 comm: syz-executor.2) [ 519.907687][T12780] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.058278][T12789] loop2: detected capacity change from 0 to 2048 [ 520.172617][ T29] audit: type=1326 audit(1718308493.085:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x0 [ 520.573147][T12800] loop4: detected capacity change from 0 to 512 [ 520.616195][T12800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 520.659973][T12800] EXT4-fs (loop4): 1 truncate cleaned up [ 520.706813][T12800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.750632][T12794] kernel write not supported for file /8135/clear_refs (pid: 12794 comm: syz-executor.2) [ 520.879474][T12809] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 520.904685][T12809] netlink: 161700 bytes leftover after parsing attributes in process `syz-executor.5'. [ 520.959633][T12359] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.989906][T12806] loop3: detected capacity change from 0 to 4096 [ 521.119731][T12813] kernel write not supported for file /8135/clear_refs (pid: 12813 comm: syz-executor.2) [ 521.393837][T12806] ntfs3: loop3: ino=1e, "file1" failed to parse mft record [ 521.466768][T12806] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 521.561876][T12821] kernel write not supported for file /8135/clear_refs (pid: 12821 comm: syz-executor.2) [ 521.625762][T12829] kernel write not supported for file /8135/clear_refs (pid: 12829 comm: syz-executor.2) [ 521.662040][T12806] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 522.920758][T12836] loop2: detected capacity change from 0 to 256 [ 522.977204][T12833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 522.988229][T12836] kernel write not supported for file /8135/clear_refs (pid: 12836 comm: syz-executor.2) [ 523.023127][T12833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 523.161142][T12840] loop3: detected capacity change from 0 to 2048 [ 523.237821][ T29] audit: type=1326 audit(1718308496.155:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71007cea9 code=0x0 [ 523.250865][T12848] input: syz0 as /devices/virtual/input/input33 [ 523.440202][T12848] kernel write not supported for file /8135/clear_refs (pid: 12848 comm: syz-executor.2) [ 523.546475][T12855] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 523.678507][T12857] loop1: detected capacity change from 0 to 2048 [ 523.725034][T12860] kernel write not supported for file /8135/clear_refs (pid: 12860 comm: syz-executor.2) [ 523.775410][T12857] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.957786][T12863] kernel write not supported for file /8135/clear_refs (pid: 12863 comm: syz-executor.2) [ 524.212814][T12869] kernel write not supported for file /8135/clear_refs (pid: 12869 comm: syz-executor.2) [ 524.336067][T12867] loop4: detected capacity change from 0 to 4096 [ 524.350060][T12873] loop2: detected capacity change from 0 to 256 [ 524.477494][T12871] kernel write not supported for file /8135/clear_refs (pid: 12871 comm: syz-executor.2) [ 524.544410][T12867] ntfs3: loop4: ino=1e, "file1" failed to parse mft record [ 524.563476][T12867] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 524.590956][T12867] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 524.703721][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.735443][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.829404][T12879] kernel write not supported for file /8135/clear_refs (pid: 12879 comm: syz-executor.2) [ 524.984909][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 524.985255][T12888] SET target dimension over the limit! [ 525.156415][ T29] audit: type=1326 audit(1718308498.055:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.248459][T12888] kernel write not supported for file /8135/clear_refs (pid: 12888 comm: syz-executor.2) [ 525.257318][ T29] audit: type=1326 audit(1718308498.055:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.321288][T12905] binder: binder_mmap: 12904 20000000-20004000 bad vm_flags failed -1 [ 525.356505][ T29] audit: type=1326 audit(1718308498.065:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.466523][ T29] audit: type=1326 audit(1718308498.065:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.542452][ T29] audit: type=1326 audit(1718308498.065:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.548442][T12911] kernel write not supported for file /8135/clear_refs (pid: 12911 comm: syz-executor.2) [ 525.641626][ T29] audit: type=1326 audit(1718308498.065:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.726917][ T29] audit: type=1326 audit(1718308498.065:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.831643][ T29] audit: type=1326 audit(1718308498.065:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.929751][T12916] loop5: detected capacity change from 0 to 4096 [ 525.932958][ T29] audit: type=1326 audit(1718308498.065:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 525.947066][T12926] loop4: detected capacity change from 0 to 164 [ 526.023747][ T29] audit: type=1326 audit(1718308498.065:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 526.081921][ T29] audit: type=1326 audit(1718308498.065:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7fc00000 [ 526.594747][T12935] loop5: detected capacity change from 0 to 4096 [ 526.660742][T12938] loop3: detected capacity change from 0 to 4096 [ 527.001176][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 527.073388][T12918] kernel write not supported for file /8135/clear_refs (pid: 12918 comm: syz-executor.2) [ 527.667675][T12968] loop2: detected capacity change from 0 to 4096 [ 527.686883][T12976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.719634][T12968] ntfs3: loop2: ino=3, Correct links count -> 2. [ 527.857136][T12987] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 528.252654][T13001] warn_unsupported: 2 callbacks suppressed [ 528.252677][T13001] kernel write not supported for file /8135/clear_refs (pid: 13001 comm: syz-executor.2) [ 528.305178][T12995] loop3: detected capacity change from 0 to 8192 [ 528.463027][T12995] loop3: AHDI p1 p3 p4 [ 528.559838][T12995] loop3: p1 start 458752 is beyond EOD, truncated [ 528.592450][T12995] loop3: p3 start 33587200 is beyond EOD, truncated [ 528.652358][T13020] loop0: detected capacity change from 0 to 512 [ 528.785964][T13015] kernel write not supported for file /8135/clear_refs (pid: 13015 comm: syz-executor.2) [ 528.807045][T13020] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 528.857184][T13020] EXT4-fs (loop0): mount failed [ 529.021086][T13030] kernel write not supported for file /8135/clear_refs (pid: 13030 comm: syz-executor.2) [ 529.208484][T13035] loop1: detected capacity change from 0 to 2048 [ 529.276128][T13035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.313267][T13037] kernel write not supported for file /8135/clear_refs (pid: 13037 comm: syz-executor.2) [ 529.385794][T13043] kernel write not supported for file /8135/clear_refs (pid: 13043 comm: syz-executor.2) [ 532.875816][T13033] loop0: detected capacity change from 0 to 131072 [ 532.919288][T13045] Process accounting paused [ 532.986137][T13033] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(1538) root(3) [ 532.994381][T13033] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 533.020563][T13033] F2FS-fs (loop0): invalid crc value [ 533.051272][T13033] F2FS-fs (loop0): Mismatch valid blocks 1 vs. 33 [ 533.069079][T13033] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 534.172436][ T9158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.531919][T13072] loop1: detected capacity change from 0 to 64 [ 535.552629][T13108] loop0: detected capacity change from 0 to 1024 [ 535.766574][ T53] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 536.543461][T13108] hfsplus: failed to load extents file [ 536.625800][T13119] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 536.734718][T13108] loop0: detected capacity change from 0 to 64 [ 536.860160][T13127] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.988712][T13129] loop3: detected capacity change from 0 to 512 [ 537.056888][T13131] loop1: detected capacity change from 0 to 2048 [ 537.105997][T13129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.164559][T13131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.190919][T13129] ext4 filesystem being mounted at /root/syzkaller-testdir2914191869/syzkaller.DiFxQ0/246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.206158][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 537.206181][ T29] audit: type=1804 audit(1718308510.075:721): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2388017973/syzkaller.ziAgeg/550/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 537.232506][T13131] ext4 filesystem being mounted at /root/syzkaller-testdir432414002/syzkaller.TK5DI9/306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.340487][ T29] audit: type=1800 audit(1718308510.255:722): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 537.361497][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.365630][T13131] fs-verity: sha512 using implementation "sha512-avx2" [ 537.426902][T13129] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 537.508732][T13129] EXT4-fs (loop3): Remounting filesystem read-only [ 537.633319][ T9158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.661668][ T9199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.725278][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.259776][T13167] loop5: detected capacity change from 0 to 1024 [ 538.399587][T13172] loop2: detected capacity change from 0 to 256 [ 539.013719][T13167] loop5: detected capacity change from 0 to 64 [ 539.025877][T13172] FAT-fs (loop2): Directory bread(block 64) failed [ 539.053107][T13172] FAT-fs (loop2): Directory bread(block 65) failed [ 539.077826][T13172] FAT-fs (loop2): Directory bread(block 66) failed [ 539.345396][T13172] FAT-fs (loop2): Directory bread(block 67) failed [ 539.356797][T13172] FAT-fs (loop2): Directory bread(block 68) failed [ 539.363419][T13172] FAT-fs (loop2): Directory bread(block 69) failed [ 539.370932][T13172] FAT-fs (loop2): Directory bread(block 70) failed [ 539.378153][T13172] FAT-fs (loop2): Directory bread(block 71) failed [ 539.389658][T13172] FAT-fs (loop2): Directory bread(block 72) failed [ 539.565798][T13172] FAT-fs (loop2): Directory bread(block 73) failed [ 540.318588][T13172] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.372303][ T5178] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 540.392926][ T5178] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 540.408439][ T5178] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 540.446768][ T5178] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 540.467691][ T5178] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 540.538010][ T5178] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 540.848204][T13210] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 540.883636][T13204] loop4: detected capacity change from 0 to 2048 [ 541.045595][T13217] loop0: detected capacity change from 0 to 1024 [ 541.107455][T13217] hfsplus: failed to load extents file [ 541.213180][T13217] loop0: detected capacity change from 0 to 64 [ 541.652533][ T25] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 541.665580][T13240] loop2: detected capacity change from 0 to 256 [ 541.723357][ T25] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 541.754288][ T25] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 541.775231][ T25] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 541.800968][ T25] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 541.860462][ T25] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 542.085917][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 542.286949][T13264] loop0: detected capacity change from 0 to 164 [ 542.307988][T13207] loop1: detected capacity change from 0 to 40427 [ 542.347973][T13207] F2FS-fs (loop1): invalid crc value [ 542.364198][T13264] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 542.384965][T13207] F2FS-fs (loop1): Found nat_bits in checkpoint [ 542.617333][T13207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 542.641216][T13207] F2FS-fs (loop1): Corrupted max_depth of 3: 4294967295 [ 542.673897][T13282] loop4: detected capacity change from 0 to 256 [ 542.858449][T13289] loop2: detected capacity change from 0 to 256 [ 542.862402][ T5177] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 542.866684][T13289] FAT-fs (loop2): Unrecognized mount option "ÿÿ" or missing value [ 543.691852][ T5177] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 543.701202][ T5177] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 543.708923][ T5177] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 543.726549][ T5177] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 543.749982][ T5177] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 544.115455][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 545.434834][T13321] loop3: detected capacity change from 0 to 256 [ 545.530819][T13321] exfat: Deprecated parameter 'utf8' [ 545.579296][T13321] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 545.745505][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 545.793496][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 545.858467][T13328] loop5: detected capacity change from 0 to 256 [ 545.914577][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 545.980748][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 546.100512][ T25] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 546.129964][ T25] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 546.307335][T13330] loop3: detected capacity change from 0 to 4096 [ 546.326207][T13330] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 546.470302][T13330] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 546.537888][T13346] loop5: detected capacity change from 0 to 512 [ 546.564993][T13346] EXT4-fs: Ignoring removed mblk_io_submit option [ 546.635631][T13351] loop4: detected capacity change from 0 to 1024 [ 546.836264][T13314] loop0: detected capacity change from 0 to 32768 [ 546.882067][ T2431] hfsplus: b-tree write err: -5, ino 4 [ 546.908929][T13358] nbd2: detected capacity change from 0 to 8388607 [ 546.948511][T13358] block nbd2: shutting down sockets [ 547.120607][T13314] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 547.172070][T13314] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 547.249080][T13314] bcachefs (loop0): alloc_read... done [ 547.280971][T13314] bcachefs (loop0): stripes_read... done [ 547.291666][T13314] bcachefs (loop0): snapshots_read... done [ 547.301562][T13314] bcachefs (loop0): journal_replay... done [ 547.317696][T13314] bcachefs (loop0): resume_logged_ops... done [ 547.346930][T13314] bcachefs (loop0): going read-write [ 547.399897][T13314] bcachefs (loop0): done starting filesystem [ 547.502374][T13402] loop4: detected capacity change from 0 to 512 [ 547.532153][T13403] loop3: detected capacity change from 0 to 256 [ 547.543412][T13402] EXT4-fs: Ignoring removed mblk_io_submit option [ 547.556884][T12360] bcachefs (loop0): shutting down [ 547.562673][T12360] bcachefs (loop0): going read-only [ 547.605668][T12360] bcachefs (loop0): finished waiting for writes to stop [ 547.637612][T13402] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 547.663675][T12360] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 547.676888][T13402] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 547.702794][T12360] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 547.735265][T13402] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.748343][T12360] bcachefs (loop0): shutdown complete, journal seq 11 [ 547.795459][T13414] loop5: detected capacity change from 0 to 2048 [ 547.805684][T12360] bcachefs (loop0): marking filesystem clean [ 547.877202][T13402] EXT4-fs error (device loop4) in ext4_resetent:3685: error 2 [ 547.944045][T12360] bcachefs (loop0): shutdown complete [ 548.048928][T12359] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 548.253237][T13434] xt_NFQUEUE: number of total queues is 0 [ 548.279956][T13434] loop2: detected capacity change from 0 to 64 [ 548.307203][T13435] loop4: detected capacity change from 0 to 1024 [ 548.381794][T13435] hfsplus: bad catalog entry type [ 548.505546][ T35] hfsplus: b-tree write err: -5, ino 4 [ 548.671733][T13446] loop1: detected capacity change from 0 to 512 [ 548.710154][T13446] EXT4-fs: Ignoring removed mblk_io_submit option [ 548.769859][T13446] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 548.813770][T13446] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 548.907628][T13446] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.084987][T13446] EXT4-fs error (device loop1) in ext4_resetent:3685: error 2 [ 549.227973][ T9158] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 549.315887][T13428] loop3: detected capacity change from 0 to 32768 [ 549.321787][T13457] loop4: detected capacity change from 0 to 128 [ 549.328840][ T4485] Bluetooth: hci0: command 0x0406 tx timeout [ 549.385547][T13457] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 549.430771][T13457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 549.566790][ T5178] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 549.599201][ T5178] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 549.634595][ T5178] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 549.649823][T13428] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 549.674866][ T5178] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 549.706428][ T5178] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 549.714190][T13428] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 549.734592][ T5178] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 549.861281][T13428] bcachefs (loop3): alloc_read... done [ 549.881638][T13428] bcachefs (loop3): stripes_read... done [ 549.903363][T13428] bcachefs (loop3): snapshots_read... done [ 549.925333][T13428] bcachefs (loop3): journal_replay... done [ 549.968108][T13428] bcachefs (loop3): resume_logged_ops... done [ 549.972207][T13476] loop4: detected capacity change from 0 to 4096 [ 549.974337][T13428] bcachefs (loop3): going read-write [ 550.018794][T13476] ntfs3: Invalid value for dmask. [ 550.055438][T13428] bcachefs (loop3): done starting filesystem [ 550.169750][T13497] loop5: detected capacity change from 0 to 512 [ 550.203123][T13497] EXT4-fs: Ignoring removed mblk_io_submit option [ 550.305352][T13500] loop2: detected capacity change from 0 to 2048 [ 550.369194][T13500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.402218][T13500] ext4 filesystem being mounted at /root/syzkaller-testdir2388017973/syzkaller.ziAgeg/580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.457814][T13500] fs-verity: sha256 using implementation "sha256-ni" [ 550.561899][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.596198][ T9199] bcachefs (loop3): shutting down [ 550.657895][ T9199] bcachefs (loop3): going read-only [ 550.683868][ T9199] bcachefs (loop3): finished waiting for writes to stop [ 550.713343][ T29] audit: type=1800 audit(1718308523.625:723): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1953 res=0 errno=0 [ 550.758816][ T9199] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 550.801802][ T9199] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 550.852268][ T9199] bcachefs (loop3): shutdown complete, journal seq 15 [ 550.860461][ T9199] bcachefs (loop3): marking filesystem clean [ 550.942280][ T9199] bcachefs (loop3): shutdown complete [ 551.218977][T13521] loop5: detected capacity change from 0 to 4096 [ 551.370735][T13521] overlayfs: overlapping lowerdir path [ 551.601804][T13537] loop2: detected capacity change from 0 to 2048 [ 551.635976][T13537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.679659][T13537] ext4 filesystem being mounted at /root/syzkaller-testdir2388017973/syzkaller.ziAgeg/584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.911707][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.254939][T13548] loop1: detected capacity change from 0 to 4096 [ 552.272526][T13548] ntfs3: Invalid value for dmask. [ 552.400468][T13559] loop2: detected capacity change from 0 to 64 [ 552.775627][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 552.790665][T13570] loop0: detected capacity change from 0 to 256 [ 552.880826][T13570] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 553.048109][ T29] audit: type=1804 audit(1718308525.945:724): pid=13570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1823876479/syzkaller.zr0yi7/43/file2/bus" dev="loop0" ino=1048747 res=1 errno=0 [ 553.059763][T13580] loop2: detected capacity change from 0 to 512 [ 553.145957][T13580] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 553.166809][ T29] audit: type=1804 audit(1718308526.015:725): pid=13570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1823876479/syzkaller.zr0yi7/43/file2/bus" dev="loop0" ino=1048747 res=1 errno=0 [ 553.218274][T13580] EXT4-fs (loop2): 1 truncate cleaned up [ 553.232009][T13580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.261967][ T29] audit: type=1800 audit(1718308526.025:726): pid=13562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1971 res=0 errno=0 [ 553.288227][T13580] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: overlapping e_value [ 553.302802][ T29] audit: type=1804 audit(1718308526.195:727): pid=13570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1823876479/syzkaller.zr0yi7/43/file2/bus" dev="loop0" ino=1048747 res=1 errno=0 [ 553.329010][ T29] audit: type=1804 audit(1718308526.195:728): pid=13570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1823876479/syzkaller.zr0yi7/43/file2/bus" dev="loop0" ino=1048747 res=1 errno=0 [ 553.494216][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.531818][T13587] loop3: detected capacity change from 0 to 4096 [ 553.585965][T13587] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 553.657638][T13587] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 554.072451][T13587] overlayfs: refusing to follow metacopy origin for (/file0) [ 554.084600][T13618] loop0: detected capacity change from 0 to 512 [ 554.150333][T13618] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 554.248596][T13627] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 554.277026][T13626] Bluetooth: MGMT ver 1.22 [ 554.282165][T13618] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.326831][T13626] Bluetooth: hci3: unsupported parameter 64512 [ 554.341495][T13626] Bluetooth: hci3: invalid len left 4, exp >= 101 [ 554.736497][ T35] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 554.850033][T13620] loop1: detected capacity change from 0 to 4096 [ 555.120445][T13646] kAFS: unparsable volume name [ 555.268554][ T3583] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.436178][T13652] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 555.753657][ T3583] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.785670][T13612] ntfs3: loop1: failed to convert "0080" to ascii [ 555.793540][T13612] ntfs3: loop1: failed to convert name for inode 1e. [ 555.966372][ T29] audit: type=1400 audit(1718308528.865:729): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13661 comm="syz-executor.0" [ 556.082451][ T3583] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.167295][T13671] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 556.222759][T13636] loop2: detected capacity change from 0 to 32768 [ 556.258397][T13636] XFS: attr2 mount option is deprecated. [ 556.277616][T13636] XFS: ikeep mount option is deprecated. [ 556.306871][T13636] XFS: noikeep mount option is deprecated. [ 556.378963][T13636] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 556.523590][ T3583] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.574648][T13636] XFS (loop2): Ending clean mount [ 556.612708][T13636] XFS (loop2): Quotacheck needed: Please wait. [ 556.760208][T13693] loop0: detected capacity change from 0 to 64 [ 556.992231][T13636] XFS (loop2): Quotacheck: Done. [ 557.019330][T13697] loop5: detected capacity change from 0 to 164 [ 557.105060][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.121541][ T3583] bridge_slave_1: left allmulticast mode [ 557.135399][ T3583] bridge_slave_1: left promiscuous mode [ 557.148193][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.161046][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.178461][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.210828][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.210841][T13697] 9 [ 557.219630][ T5835] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 557.256757][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 557.276612][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.286825][T13697] 1A [ 557.354285][ T3583] bridge_slave_0: left allmulticast mode [ 557.378610][ T3583] bridge_slave_0: left promiscuous mode [ 557.401918][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.778705][T13714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.792571][ T29] audit: type=1400 audit(1718308530.705:730): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13711 comm="syz-executor.0" [ 557.963242][T13719] input: syz1 as /devices/virtual/input/input34 [ 558.564572][ T3583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.585721][ T3583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.598397][ T3583] bond0 (unregistering): Released all slaves [ 559.131834][T13734] loop1: detected capacity change from 0 to 1024 [ 559.234097][T13734] hfsplus: unable to find HFS+ superblock [ 559.253519][T13740] loop2: detected capacity change from 0 to 2048 [ 559.277941][T13740] udf: Unknown parameter 'ÿ' [ 559.344935][ T53] Bluetooth: hci5: command tx timeout [ 560.038553][T13753] kAFS: unparsable volume name [ 560.345202][T13763] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.392918][T13742] loop5: detected capacity change from 0 to 4096 [ 561.182903][ T3583] hsr_slave_0: left promiscuous mode [ 561.214587][ T3583] hsr_slave_1: left promiscuous mode [ 561.235771][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.283031][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.318854][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.341949][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.406834][ T53] Bluetooth: hci5: command tx timeout [ 561.498251][T13789] loop2: detected capacity change from 0 to 1024 [ 561.519772][T13789] hfsplus: unable to find HFS+ superblock [ 561.628492][ T3583] veth1_macvtap: left promiscuous mode [ 561.649578][ T3583] veth0_macvtap: left promiscuous mode [ 561.657766][ T3583] veth1_vlan: left promiscuous mode [ 561.663270][ T3583] veth0_vlan: left promiscuous mode [ 561.750818][T13793] kAFS: unparsable volume name [ 562.623350][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.632580][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.746779][T13797] loop0: detected capacity change from 0 to 32768 [ 563.165695][ T29] audit: type=1326 audit(1718308536.045:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99c7cea9 code=0x7ffc0000 [ 563.465964][ T29] audit: type=1326 audit(1718308536.045:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99c7cea9 code=0x7ffc0000 [ 563.675917][ T53] Bluetooth: hci5: command tx timeout [ 563.746379][ T29] audit: type=1326 audit(1718308536.045:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f8a99c7cea9 code=0x7ffc0000 [ 563.833311][ T29] audit: type=1326 audit(1718308536.055:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99c7cea9 code=0x7ffc0000 [ 563.863017][ T29] audit: type=1326 audit(1718308536.055:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99c7cea9 code=0x7ffc0000 [ 563.881189][T13797] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 563.913745][ T29] audit: type=1326 audit(1718308536.055:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f8a99c7cea9 code=0x7ffc0000 [ 563.941823][T13797] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 563.968891][ T29] audit: type=1326 audit(1718308536.065:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99c7cea9 code=0x7ffc0000 [ 564.047386][T13797] bcachefs (loop0): alloc_read... done [ 564.063358][T13797] bcachefs (loop0): stripes_read... done [ 564.070353][ T29] audit: type=1326 audit(1718308536.065:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99c7cea9 code=0x7ffc0000 [ 564.095171][T13797] bcachefs (loop0): snapshots_read... done [ 564.118841][T13797] bcachefs (loop0): journal_replay... done [ 564.124828][T13797] bcachefs (loop0): resume_logged_ops... done [ 564.160215][T13797] bcachefs (loop0): going read-write [ 564.237558][T13797] bcachefs (loop0): done starting filesystem [ 564.357986][ T29] audit: type=1800 audit(1718308537.275:739): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4100 res=0 errno=0 [ 564.528233][ T3583] team0 (unregistering): Port device team_slave_1 removed [ 564.722899][ T3583] team0 (unregistering): Port device team_slave_0 removed [ 564.830681][T12360] bcachefs (loop0): shutting down [ 564.836031][T12360] bcachefs (loop0): going read-only [ 564.841879][T12360] bcachefs (loop0): finished waiting for writes to stop [ 564.853230][T12360] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 564.881880][T12360] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 564.904002][T12360] bcachefs (loop0): shutdown complete, journal seq 12 [ 564.912075][T12360] bcachefs (loop0): marking filesystem clean [ 565.001928][T12360] bcachefs (loop0): shutdown complete [ 565.745572][ T4485] Bluetooth: hci5: command tx timeout [ 566.076112][T13823] loop0: detected capacity change from 0 to 8 [ 566.333623][T13789] Process accounting resumed [ 566.338718][T13789] kernel write not supported for file /8135/clear_refs (pid: 13789 comm: syz-executor.2) [ 566.575810][T13698] chnl_net:caif_netlink_parms(): no params data found [ 566.750945][T13837] loop1: detected capacity change from 0 to 256 [ 566.782949][T13833] kernel write not supported for file /8135/clear_refs (pid: 13833 comm: syz-executor.2) [ 566.902410][T13837] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 567.431378][T13845] loop0: detected capacity change from 0 to 40427 [ 567.491890][T13845] F2FS-fs (loop0): invalid crc value [ 567.506908][T13847] kernel write not supported for file /8135/clear_refs (pid: 13847 comm: syz-executor.2) [ 567.526740][T13845] F2FS-fs (loop0): Found nat_bits in checkpoint [ 567.577815][T13839] loop4: detected capacity change from 0 to 4096 [ 567.610552][T13845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 567.640506][T13839] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 567.687502][T13839] ntfs3: loop4: Failed to load $MFT. [ 567.809179][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.896558][T13698] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.901838][T13856] kernel write not supported for file /8135/clear_refs (pid: 13856 comm: syz-executor.2) [ 567.920673][T13854] loop1: detected capacity change from 0 to 1764 [ 567.939791][T13698] bridge_slave_0: entered allmulticast mode [ 567.961293][T13698] bridge_slave_0: entered promiscuous mode [ 568.231604][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.438453][T13698] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.499884][ T5175] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 568.612831][T13698] bridge_slave_1: entered allmulticast mode [ 568.706539][ T29] audit: type=1326 audit(1718308541.585:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aeb07cea9 code=0x7ffc0000 [ 568.709272][T13698] bridge_slave_1: entered promiscuous mode [ 568.748464][T13859] kernel write not supported for file /8135/clear_refs (pid: 13859 comm: syz-executor.2) [ 568.813489][ T29] audit: type=1326 audit(1718308541.655:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aeb07cea9 code=0x7ffc0000 [ 568.920930][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.937307][ T5175] usb 1-1: device descriptor read/64, error -71 [ 568.944658][ T29] audit: type=1326 audit(1718308541.705:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aeb07cea9 code=0x7ffc0000 [ 569.004846][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.056564][ T29] audit: type=1326 audit(1718308541.705:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aeb07cea9 code=0x7ffc0000 [ 569.081722][T13867] loop2: detected capacity change from 0 to 1024 [ 569.090953][T13867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.107257][ T29] audit: type=1326 audit(1718308541.705:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aeb07a627 code=0x7ffc0000 [ 569.133612][ T29] audit: type=1326 audit(1718308541.705:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aeb040309 code=0x7ffc0000 [ 569.165684][ T29] audit: type=1326 audit(1718308541.705:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f2aeb07cea9 code=0x7ffc0000 [ 569.202575][ T29] audit: type=1326 audit(1718308541.715:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aeb07a627 code=0x7ffc0000 [ 569.208482][T13867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.225997][ T29] audit: type=1326 audit(1718308541.715:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aeb040309 code=0x7ffc0000 [ 569.265746][ T29] audit: type=1326 audit(1718308541.715:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aeb07cea9 code=0x7ffc0000 [ 569.297439][ T5175] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 569.415532][T13867] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 569.454713][T13698] team0: Port device team_slave_0 added [ 569.464039][T13867] kernel write not supported for file /8135/clear_refs (pid: 13867 comm: syz-executor.2) [ 569.506587][ T5175] usb 1-1: device descriptor read/64, error -71 [ 569.522634][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.540722][T13879] loop5: detected capacity change from 0 to 8 [ 569.541005][T13698] team0: Port device team_slave_1 added [ 569.627278][ T5175] usb usb1-port1: attempt power cycle [ 569.713124][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 569.725395][T13698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.765134][T13885] kernel write not supported for file /8135/clear_refs (pid: 13885 comm: syz-executor.2) [ 569.766673][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.839942][T13698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.923236][T13892] loop1: detected capacity change from 0 to 64 [ 570.038262][T13894] loop2: detected capacity change from 0 to 164 [ 570.046580][T13894] iso9660: Unknown parameter '000000000000000000000008' [ 570.137377][T13698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.165166][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.308302][T13698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.510449][T13894] loop2: detected capacity change from 0 to 40427 [ 570.512215][T13902] loop4: detected capacity change from 0 to 2 [ 570.526671][T13894] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 570.535587][T13894] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 570.547679][T13894] F2FS-fs (loop2): invalid crc value [ 570.568077][T13902] jffs2: rp_size unrepresentable [ 570.590768][T13894] F2FS-fs (loop2): Found nat_bits in checkpoint [ 570.669718][T13894] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 570.677110][T13894] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 570.695721][T13698] hsr_slave_0: entered promiscuous mode [ 570.727583][T13698] hsr_slave_1: entered promiscuous mode [ 570.829357][T13698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.887469][T13698] Cannot create hsr debugfs directory [ 571.575622][T13915] loop5: detected capacity change from 0 to 4096 [ 571.847808][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.877067][T13928] loop1: detected capacity change from 0 to 164 [ 571.965831][T13928] Unable to read rock-ridge attributes [ 572.037623][T13928] Unable to read rock-ridge attributes [ 572.175144][T13934] Unable to read rock-ridge attributes [ 572.216805][T13917] ubi0: attaching mtd0 [ 572.231627][T13917] ubi0: scanning is finished [ 572.236386][T13917] ubi0: empty MTD device detected [ 572.646466][T13937] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 573.360021][T13917] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 573.388010][T13934] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 573.410233][T13917] kernel write not supported for file /8135/clear_refs (pid: 13917 comm: syz-executor.2) [ 573.435308][T13936] Unable to read rock-ridge attributes [ 573.441790][T13939] Unable to read rock-ridge attributes [ 573.447493][T13939] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 573.562119][ T5835] syz-executor.2: attempt to access beyond end of device [ 573.562119][ T5835] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 573.586812][ T5835] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 574.100625][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 574.100650][ T29] audit: type=1804 audit(1718308547.015:759): pid=13957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir432414002/syzkaller.TK5DI9/350/file0" dev="sda1" ino=1964 res=1 errno=0 [ 574.620760][T13973] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 574.726209][T13976] loop4: detected capacity change from 0 to 2048 [ 574.848341][T13978] loop1: detected capacity change from 0 to 1024 [ 574.886740][T13976] loop4: p1 p2 < > p3 p4 < p5 > [ 574.891814][T13976] loop4: partition table partially beyond EOD, truncated [ 574.906662][T13978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 574.917450][T13698] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 574.927233][T13976] loop4: p1 start 2305 is beyond EOD, truncated [ 574.968329][T13976] loop4: p2 start 4294902784 is beyond EOD, truncated [ 574.977586][T13698] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 575.006651][T13976] loop4: p3 start 4278191616 is beyond EOD, truncated [ 575.020927][T13980] loop5: detected capacity change from 0 to 1764 [ 575.047269][T13698] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 575.047987][T13978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.081379][T13698] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 575.093540][T13976] loop4: p5 start 2305 is beyond EOD, truncated [ 575.184899][ T29] audit: type=1800 audit(1718308548.095:760): pid=13978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 575.225001][T13978] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 575.258715][ T29] audit: type=1800 audit(1718308548.125:761): pid=13978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 575.331170][T13984] kernel write not supported for file /8135/clear_refs (pid: 13984 comm: syz-executor.2) [ 575.364356][ T9158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.470879][T13986] kernel write not supported for file /8135/clear_refs (pid: 13986 comm: syz-executor.2) [ 575.695821][T13698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.767963][ T29] audit: type=1804 audit(1718308548.685:762): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1984482283/syzkaller.JjiWHe/93/file0" dev="sda1" ino=1969 res=1 errno=0 [ 575.832005][T13698] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.868343][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.875664][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.952007][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.959463][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.118822][T13970] loop0: detected capacity change from 0 to 32768 [ 576.179741][T13993] kernel write not supported for file /8135/clear_refs (pid: 13993 comm: syz-executor.2) [ 576.245426][T13970] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 576.347953][T13970] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 576.406060][T14007] kernel write not supported for file /8135/clear_refs (pid: 14007 comm: syz-executor.2) [ 576.525120][T13970] XFS (loop0): Ending clean mount [ 576.536126][T13970] XFS (loop0): Quotacheck needed: Please wait. [ 576.740797][T14020] kernel write not supported for file /8135/clear_refs (pid: 14020 comm: syz-executor.2) [ 576.810890][T13970] XFS (loop0): Quotacheck: Done. [ 576.877027][ T29] audit: type=1800 audit(1718308549.785:763): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 576.927119][T13698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.089442][ T29] audit: type=1800 audit(1718308549.995:764): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.4" name="/root/syzkaller-testdir1984482283/syzkaller.JjiWHe/95/bus" dev="sda1" ino=1967 res=0 errno=0 [ 577.122653][T14026] kernel write not supported for file /8135/clear_refs (pid: 14026 comm: syz-executor.2) [ 577.163512][T12360] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 577.224798][T13698] veth0_vlan: entered promiscuous mode [ 577.264064][T14028] loop5: detected capacity change from 0 to 4096 [ 577.332979][T13698] veth1_vlan: entered promiscuous mode [ 577.564049][T14030] kernel write not supported for file /8135/clear_refs (pid: 14030 comm: syz-executor.2) [ 577.674317][T13698] veth0_macvtap: entered promiscuous mode [ 577.748527][T13698] veth1_macvtap: entered promiscuous mode [ 577.821449][T14035] kernel write not supported for file /8135/clear_refs (pid: 14035 comm: syz-executor.2) [ 577.919325][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.011757][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.050689][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.101938][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.142049][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.181903][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.213851][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.243591][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.253384][T14049] loop0: detected capacity change from 0 to 1024 [ 578.267768][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.288816][T14049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 578.303259][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.321827][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.347424][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.361574][T13698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.380652][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.393250][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.399121][T14049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.404329][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.428988][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.439245][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.452348][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.461196][ T5178] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 578.462569][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.479501][T14044] kernel write not supported for file /8135/clear_refs (pid: 14044 comm: syz-executor.2) [ 578.480835][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.506527][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.518341][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.529452][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.546853][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.580656][T13698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.592763][ T29] audit: type=1800 audit(1718308551.515:765): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 578.621851][T13698] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.636143][T13698] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.659179][T14049] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 578.678195][T13698] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.704616][ T29] audit: type=1800 audit(1718308551.565:766): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 578.728238][T13698] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.735706][ T5178] usb 5-1: Using ep0 maxpacket: 32 [ 578.747370][ T5178] usb 5-1: device descriptor read/all, error -71 [ 578.826742][ T29] audit: type=1804 audit(1718308551.605:767): pid=14053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1781018377/syzkaller.07PKwk/192/bus" dev="sda1" ino=1956 res=1 errno=0 [ 578.879520][T12360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.887449][T14054] kernel write not supported for file /8135/clear_refs (pid: 14054 comm: syz-executor.2) [ 578.896877][ T29] audit: type=1804 audit(1718308551.605:768): pid=14053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1781018377/syzkaller.07PKwk/192/bus" dev="sda1" ino=1956 res=1 errno=0 [ 579.201533][ T2445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.248416][ T2445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.372447][ T2445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.413592][ T2445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.431824][T14063] kernel write not supported for file /8135/clear_refs (pid: 14063 comm: syz-executor.2) [ 579.688877][T14072] kernel write not supported for file /8135/clear_refs (pid: 14072 comm: syz-executor.2) [ 579.940408][T14071] loop0: detected capacity change from 0 to 1764 [ 580.103918][T14089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.284633][T14091] loop1: detected capacity change from 0 to 1024 [ 580.324469][T14081] kernel write not supported for file /8135/clear_refs (pid: 14081 comm: syz-executor.2) [ 580.348716][T14091] EXT4-fs: Ignoring removed orlov option [ 580.369030][T14091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.439128][T14091] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 580.648902][T14094] loop2: detected capacity change from 0 to 1764 [ 580.724339][ T3583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.829149][T14096] loop1: detected capacity change from 0 to 1024 [ 580.850035][T14093] kernel write not supported for file /8135/clear_refs (pid: 14093 comm: syz-executor.2) [ 580.899300][T14100] loop3: detected capacity change from 0 to 2048 [ 580.915729][T14096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.948640][T14100] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 580.956755][ T5835] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 581.128905][T14068] loop5: detected capacity change from 0 to 32768 [ 581.170363][ T3583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.173061][T14068] XFS: ikeep mount option is deprecated. [ 581.193311][ T9158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.198857][T14068] XFS: ikeep mount option is deprecated. [ 581.295415][ T5835] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 581.338488][T14109] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.405212][ T3583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.485665][T14108] netem: unknown loss type 5 [ 581.506489][T14108] netem: change failed [ 581.636193][T14115] kernel write not supported for file /8135/clear_refs (pid: 14115 comm: syz-executor.2) [ 581.789472][ T3583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.859942][T14117] kernel write not supported for file /8135/clear_refs (pid: 14117 comm: syz-executor.2) [ 581.872258][T14121] loop3: detected capacity change from 0 to 1024 [ 581.946038][T14121] EXT4-fs: Ignoring removed orlov option [ 581.977867][T14121] EXT4-fs (loop3): Test dummy encryption mode enabled [ 582.006252][T14121] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 582.091497][T14130] loop5: detected capacity change from 0 to 512 [ 582.128289][T14123] loop0: detected capacity change from 0 to 1764 [ 582.147492][T14121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.165661][T14125] loop2: detected capacity change from 0 to 1024 [ 582.184303][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 582.219817][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 582.237661][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 582.247617][T14125] EXT4-fs: Ignoring removed orlov option [ 582.253763][T14125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 582.262182][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 582.270230][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 582.280772][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.350284][T14125] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 582.550627][T14121] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 582.597136][T14124] kernel write not supported for file /8135/clear_refs (pid: 14124 comm: syz-executor.2) [ 582.769576][ T3583] bridge_slave_1: left allmulticast mode [ 582.775384][ T3583] bridge_slave_1: left promiscuous mode [ 582.819923][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.884031][T14136] kernel write not supported for file /8135/clear_refs (pid: 14136 comm: syz-executor.2) [ 582.958715][T13698] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 583.053116][ T3583] bridge_slave_0: left allmulticast mode [ 583.068625][T13698] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 583.087896][ T3583] bridge_slave_0: left promiscuous mode [ 583.094602][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.104010][T14143] binder: 14142:14143 ioctl c0306201 20000380 returned -14 [ 583.292303][ T29] audit: type=1804 audit(1718308556.205:769): pid=14149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1823876479/syzkaller.zr0yi7/85/bus" dev="sda1" ino=1941 res=1 errno=0 [ 583.389628][ T29] audit: type=1804 audit(1718308556.255:770): pid=14149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1823876479/syzkaller.zr0yi7/85/bus" dev="sda1" ino=1941 res=1 errno=0 [ 583.952560][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.973542][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.993537][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 584.003577][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 584.031673][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 584.055064][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 584.120315][T14156] ucma_write: process 198 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. [ 584.323314][ T3583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.338658][ T3583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.363129][ T3583] bond0 (unregistering): Released all slaves [ 584.366731][ T4485] Bluetooth: hci2: command tx timeout [ 584.564310][T14171] loop0: detected capacity change from 0 to 1024 [ 584.577346][T14171] EXT4-fs: Ignoring removed orlov option [ 584.584103][T14171] EXT4-fs (loop0): Test dummy encryption mode enabled [ 584.619277][T14151] netem: unknown loss type 5 [ 584.624853][T14151] netem: change failed [ 584.632382][T14171] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 584.682400][T14174] loop5: detected capacity change from 0 to 512 [ 584.705738][T13698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.730189][T14151] warn_unsupported: 2 callbacks suppressed [ 584.730206][T14151] kernel write not supported for file /8135/clear_refs (pid: 14151 comm: syz-executor.2) [ 584.768006][T14171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.869814][T14177] kernel write not supported for file /8135/clear_refs (pid: 14177 comm: syz-executor.2) [ 584.941889][T14179] kernel write not supported for file /8135/clear_refs (pid: 14179 comm: syz-executor.2) [ 585.052911][T14171] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 585.153555][T14182] kernel write not supported for file /8135/clear_refs (pid: 14182 comm: syz-executor.2) [ 585.299616][T12360] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 585.412066][T12360] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 585.723905][T14185] kernel write not supported for file /8135/clear_refs (pid: 14185 comm: syz-executor.2) [ 585.811695][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 585.851700][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 585.877578][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 585.897021][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 585.928277][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 585.936108][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.956245][T14197] loop2: detected capacity change from 0 to 256 [ 586.156512][ T4485] Bluetooth: hci4: command tx timeout [ 586.174433][T12360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.243421][T14196] kernel write not supported for file /8135/clear_refs (pid: 14196 comm: syz-executor.2) [ 586.253925][ T3583] hsr_slave_0: left promiscuous mode [ 586.282220][ T3583] hsr_slave_1: left promiscuous mode [ 586.307182][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.314735][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.347911][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.355476][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.446775][ T4485] Bluetooth: hci2: command tx timeout [ 586.467146][ T3583] veth1_macvtap: left promiscuous mode [ 586.472146][T14203] binder: 14202:14203 ioctl c0306201 20000380 returned -14 [ 586.472893][ T3583] veth0_macvtap: left promiscuous mode [ 586.486137][ T3583] veth1_vlan: left promiscuous mode [ 586.493350][ T3583] veth0_vlan: left promiscuous mode [ 586.552560][T14202] kernel write not supported for file /8135/clear_refs (pid: 14202 comm: syz-executor.2) [ 586.621670][T14206] kernel write not supported for file /8135/clear_refs (pid: 14206 comm: syz-executor.2) [ 586.790122][T14209] loop2: detected capacity change from 0 to 256 [ 586.873445][T14209] kernel write not supported for file /8135/clear_refs (pid: 14209 comm: syz-executor.2) [ 587.064160][T14211] kernel write not supported for file /8135/clear_refs (pid: 14211 comm: syz-executor.2) [ 587.195894][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 587.210729][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 587.221112][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 587.235030][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 587.257021][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 587.264494][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.933699][ T3583] team0 (unregistering): Port device team_slave_1 removed [ 588.007379][ T3583] team0 (unregistering): Port device team_slave_0 removed [ 588.131856][ T4485] Bluetooth: hci3: command tx timeout [ 588.220223][ T4485] Bluetooth: hci4: command tx timeout [ 588.525858][T14226] loop2: detected capacity change from 0 to 256 [ 588.533943][ T4485] Bluetooth: hci2: command tx timeout [ 588.544365][T14226] exfat: Deprecated parameter 'utf8' [ 588.554322][T14226] exfat: Bad value for 'errors' [ 589.335372][ T4485] Bluetooth: hci5: command tx timeout [ 589.455760][T14201] netem: unknown loss type 5 [ 589.462029][T14201] netem: change failed [ 589.514529][T14128] chnl_net:caif_netlink_parms(): no params data found [ 590.206531][ T4485] Bluetooth: hci3: command tx timeout [ 590.288815][ T4485] Bluetooth: hci4: command tx timeout [ 590.381891][T14227] warn_unsupported: 5 callbacks suppressed [ 590.381917][T14227] kernel write not supported for file /8135/clear_refs (pid: 14227 comm: syz-executor.2) [ 590.586718][T14128] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.593983][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.606216][T14128] bridge_slave_0: entered allmulticast mode [ 590.613445][ T4485] Bluetooth: hci2: command tx timeout [ 590.641418][T14128] bridge_slave_0: entered promiscuous mode [ 590.661861][T14128] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.670888][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.676926][T14245] kernel write not supported for file /8135/clear_refs (pid: 14245 comm: syz-executor.2) [ 590.678480][T14128] bridge_slave_1: entered allmulticast mode [ 590.701489][T14128] bridge_slave_1: entered promiscuous mode [ 590.977467][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.066636][T14157] chnl_net:caif_netlink_parms(): no params data found [ 591.116482][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.408570][ T4485] Bluetooth: hci5: command tx timeout [ 591.416141][T14128] team0: Port device team_slave_0 added [ 591.500440][T14128] team0: Port device team_slave_1 added [ 591.647571][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.687091][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.773452][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.814380][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.842130][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.872824][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.999463][ T3583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.020565][T14261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.298658][ T4485] Bluetooth: hci3: command tx timeout [ 592.366956][ T4485] Bluetooth: hci4: command tx timeout [ 592.380825][ T3583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.442660][T14194] chnl_net:caif_netlink_parms(): no params data found [ 592.671727][T14270] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 592.768616][ T3583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.856769][T14157] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.864000][T14157] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.872891][T14157] bridge_slave_0: entered allmulticast mode [ 592.882947][T14157] bridge_slave_0: entered promiscuous mode [ 592.907936][T14157] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.915574][T14157] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.933638][T14157] bridge_slave_1: entered allmulticast mode [ 592.948238][T14157] bridge_slave_1: entered promiscuous mode [ 592.972970][T14128] hsr_slave_0: entered promiscuous mode [ 592.995496][T14128] hsr_slave_1: entered promiscuous mode [ 593.014273][T14128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.030471][T14128] Cannot create hsr debugfs directory [ 593.486766][ T4485] Bluetooth: hci5: command tx timeout [ 593.959027][ T3583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.352576][T14280] loop5: detected capacity change from 0 to 1024 [ 594.366442][ T4485] Bluetooth: hci3: command tx timeout [ 594.384675][T14157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.415614][T14157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.646649][ T4485] Bluetooth: hci5: command tx timeout [ 597.860740][T14250] Process accounting paused [ 597.932323][T14286] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 598.000972][T14157] team0: Port device team_slave_0 added [ 598.025012][T14157] team0: Port device team_slave_1 added [ 598.081824][T14194] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.108064][T14194] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.128626][T14194] bridge_slave_0: entered allmulticast mode [ 598.140343][T14194] bridge_slave_0: entered promiscuous mode [ 598.150406][T14194] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.157765][T14194] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.165007][T14194] bridge_slave_1: entered allmulticast mode [ 598.172843][T14194] bridge_slave_1: entered promiscuous mode [ 598.217152][T14293] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.5'. [ 598.371323][T14157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.380157][T14157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.409468][T14157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.541046][T14194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.562430][T14157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.590006][T14157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.616797][T14157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.685449][T14194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.879676][ T3583] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.904917][T14306] netem: unknown loss type 5 [ 598.910825][T14306] netem: change failed [ 598.945237][T14194] team0: Port device team_slave_0 added [ 598.982030][T14194] team0: Port device team_slave_1 added [ 599.035897][T14157] hsr_slave_0: entered promiscuous mode [ 599.046010][T14157] hsr_slave_1: entered promiscuous mode [ 599.055841][T14157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.076414][T14157] Cannot create hsr debugfs directory [ 599.302458][ T3583] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.378883][T14214] chnl_net:caif_netlink_parms(): no params data found [ 599.561600][T14319] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 599.599207][ T3583] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.738860][T14194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.770302][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.843739][T14194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.889635][T14194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.897006][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.929454][T14194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.021498][ T3583] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.400618][T14334] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.5'. [ 600.606822][ T4485] Bluetooth: hci5: command tx timeout [ 600.748020][T14194] hsr_slave_0: entered promiscuous mode [ 600.777441][T14194] hsr_slave_1: entered promiscuous mode [ 600.805941][T14194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.824342][T14194] Cannot create hsr debugfs directory [ 601.018714][T14214] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.026784][T14214] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.034213][T14214] bridge_slave_0: entered allmulticast mode [ 601.056608][T14214] bridge_slave_0: entered promiscuous mode [ 601.146490][T14339] netem: unknown loss type 5 [ 601.151954][T14339] netem: change failed [ 601.250977][T14214] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.267092][T14214] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.276590][T14214] bridge_slave_1: entered allmulticast mode [ 601.308403][T14214] bridge_slave_1: entered promiscuous mode [ 601.364182][T14343] loop2: detected capacity change from 0 to 128 [ 601.514609][ T3583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.703801][ T29] audit: type=1326 audit(1718308574.625:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 601.753788][ T29] audit: type=1326 audit(1718308574.625:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 601.838808][ T29] audit: type=1326 audit(1718308574.645:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 601.873563][T14355] loop2: detected capacity change from 0 to 256 [ 601.888898][ T3583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.926009][ T29] audit: type=1326 audit(1718308574.645:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 601.974969][T14214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.984715][ T29] audit: type=1326 audit(1718308574.645:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 602.026561][ T29] audit: type=1326 audit(1718308574.645:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa606c7cea9 code=0x7ffc0000 [ 602.079849][ T29] audit: type=1326 audit(1718308574.645:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa606c7a627 code=0x7ffc0000 [ 602.126760][ T29] audit: type=1326 audit(1718308574.645:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa606c40309 code=0x7ffc0000 [ 602.172130][ T29] audit: type=1326 audit(1718308574.645:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa606c7a627 code=0x7ffc0000 [ 602.226380][ T29] audit: type=1326 audit(1718308574.645:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa606c40309 code=0x7ffc0000 [ 602.254248][ T3583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.284676][T14365] loop2: detected capacity change from 0 to 256 [ 602.301639][T14365] exFAT-fs (loop2): failed to read sector(0x800000078) [ 602.310729][T14365] exFAT-fs (loop2): failed to load upcase table [ 602.317313][T14365] exFAT-fs (loop2): failed to recognize exfat type [ 602.330442][T14214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.440571][T14368] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 602.493510][ T3583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.564654][T14214] team0: Port device team_slave_0 added [ 602.635284][T14128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 602.686178][T14214] team0: Port device team_slave_1 added [ 602.807722][T14128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 602.872388][T14128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 602.910120][T14128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 602.944730][T14383] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 603.000366][T14214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.016517][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.065903][T14214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.090586][T14383] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 603.108958][T14214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.140514][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.192314][T14214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.468251][T14381] loop5: detected capacity change from 0 to 32768 [ 603.511717][T14214] hsr_slave_0: entered promiscuous mode [ 603.519873][T14214] hsr_slave_1: entered promiscuous mode [ 603.528311][T14214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.541417][T14214] Cannot create hsr debugfs directory [ 603.557316][ T3583] bridge_slave_1: left allmulticast mode [ 603.563839][ T3583] bridge_slave_1: left promiscuous mode [ 603.588264][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.612000][ T3583] bridge_slave_0: left allmulticast mode [ 603.619736][ T3583] bridge_slave_0: left promiscuous mode [ 603.631180][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.658757][ T3583] bridge_slave_1: left allmulticast mode [ 603.664602][ T3583] bridge_slave_1: left promiscuous mode [ 603.670840][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.696062][ T3583] bridge_slave_0: left allmulticast mode [ 603.702157][ T3583] bridge_slave_0: left promiscuous mode [ 603.708944][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.724018][ T3583] bridge_slave_1: left allmulticast mode [ 603.730375][ T3583] bridge_slave_1: left promiscuous mode [ 603.736220][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.755820][ T3583] bridge_slave_0: left allmulticast mode [ 603.762648][ T3583] bridge_slave_0: left promiscuous mode [ 603.769389][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.629490][ T3583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.642406][ T3583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.658821][ T3583] bond0 (unregistering): Released all slaves [ 606.191226][ T3583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.205849][ T3583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.218741][ T3583] bond0 (unregistering): Released all slaves [ 606.443870][ T3583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.466516][ T3583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.479635][ T3583] bond0 (unregistering): Released all slaves [ 606.530543][T14391] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.656253][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 711.663351][ C0] rcu: 1-...!: (0 ticks this GP) idle=dcdc/1/0x4000000000000000 softirq=50009/50009 fqs=0 [ 711.677459][ C0] rcu: (detected by 0, t=10502 jiffies, g=72953, q=282 ncpus=2) [ 711.685214][ C0] Sending NMI from CPU 0 to CPUs 1: [ 711.690649][ C1] NMI backtrace for cpu 1 [ 711.690661][ C1] CPU: 1 PID: 14408 Comm: syz-executor.2 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 711.690685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 711.690698][ C1] RIP: 0010:do_raw_spin_lock+0x55/0x370 [ 711.690739][ C1] Code: 24 80 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 c7 44 24 40 b3 8a b5 41 48 c7 44 24 48 bf f9 b4 8d 48 c7 44 24 50 b0 c8 73 81 <48> 8d 74 24 40 48 c1 ee 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 f1 [ 711.690758][ C1] RSP: 0018:ffffc90000a18ba0 EFLAGS: 00000086 [ 711.690778][ C1] RAX: c2eb70fa4f3bbe00 RBX: ffff88805d250036 RCX: 0000000000000001 [ 711.690794][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffff8880271392e8 [ 711.690811][ C1] RBP: ffffc90000a18c80 R08: ffffffff92fab747 R09: 1ffffffff25f56e8 [ 711.690828][ C1] R10: dffffc0000000000 R11: fffffbfff25f56e9 R12: ffff8880271392e8 [ 711.690844][ C1] R13: ffffffff89900ef0 R14: ffff888027139340 R15: ffff8880206d0ac8 [ 711.690866][ C1] FS: 00007fa607a756c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 711.690885][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 711.690901][ C1] CR2: 0000000020004000 CR3: 000000004e29c000 CR4: 0000000000350ef0 [ 711.690918][ C1] Call Trace: [ 711.690929][ C1] [ 711.690940][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 711.690976][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 711.691003][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 711.691035][ C1] ? nmi_handle+0x2a/0x5a0 [ 711.691084][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 711.691111][ C1] ? nmi_handle+0x151/0x5a0 [ 711.691145][ C1] ? nmi_handle+0x2a/0x5a0 [ 711.691181][ C1] ? do_raw_spin_lock+0x55/0x370 [ 711.691214][ C1] ? default_do_nmi+0x63/0x160 [ 711.691248][ C1] ? exc_nmi+0x123/0x1f0 [ 711.691280][ C1] ? end_repeat_nmi+0xf/0x53 [ 711.691316][ C1] ? __pfx_advance_sched+0x10/0x10 [ 711.691354][ C1] ? do_raw_spin_lock+0x55/0x370 [ 711.691388][ C1] ? do_raw_spin_lock+0x55/0x370 [ 711.691424][ C1] ? do_raw_spin_lock+0x55/0x370 [ 711.691457][ C1] [ 711.691465][ C1] [ 711.691473][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 711.691509][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 711.691542][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 711.691582][ C1] ? __pfx_advance_sched+0x10/0x10 [ 711.691610][ C1] ? __pfx_advance_sched+0x10/0x10 [ 711.691639][ C1] advance_sched+0xab/0xca0 [ 711.691670][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.691700][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 711.691732][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 711.691771][ C1] ? __pfx_advance_sched+0x10/0x10 [ 711.691800][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 711.691833][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 711.691874][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 711.691907][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.691938][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 711.691970][ C1] hrtimer_interrupt+0x396/0x990 [ 711.692021][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 711.692060][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 711.692085][ C1] [ 711.692092][ C1] [ 711.692101][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 711.692131][ C1] RIP: 0010:stack_trace_consume_entry+0x4/0x280 [ 711.692155][ C1] Code: 6a ff ff ff e8 ad b6 04 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb 48 ba 00 00 00 [ 711.692173][ C1] RSP: 0018:ffffc900034ce898 EFLAGS: 00000286 [ 711.692191][ C1] RAX: 0000000000000002 RBX: ffffffff8ba00130 RCX: ffff8880206d0000 [ 711.692207][ C1] RDX: ffffc900164b1000 RSI: ffffffff8ba00130 RDI: ffffc900034ce980 [ 711.692224][ C1] RBP: ffffc900034ce930 R08: ffffffff81377022 R09: ffffffff8141095f [ 711.692240][ C1] R10: 0000000000000003 R11: ffffffff8181e050 R12: ffff8880206d0000 [ 711.692256][ C1] R13: ffffffff8181e050 R14: ffffc900034ce980 R15: ffffc900034ce8a0 [ 711.692274][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 711.692306][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.692333][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 711.692356][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 711.692387][ C1] ? arch_stack_walk+0x132/0x1b0 [ 711.692423][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.692455][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 711.692476][ C1] arch_stack_walk+0x145/0x1b0 [ 711.692517][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.692550][ C1] stack_trace_save+0x118/0x1d0 [ 711.692574][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 711.692599][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.692639][ C1] kasan_save_track+0x3f/0x80 [ 711.692665][ C1] ? kasan_save_track+0x3f/0x80 [ 711.692688][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 711.692714][ C1] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 711.692735][ C1] ? copy_verifier_state+0xab8/0x1020 [ 711.692757][ C1] ? do_check+0x433e/0x10980 [ 711.692788][ C1] ? do_check_common+0x14bd/0x1dd0 [ 711.692821][ C1] ? bpf_check+0x14222/0x192f0 [ 711.692848][ C1] ? bpf_prog_load+0x1667/0x20f0 [ 711.692868][ C1] ? __sys_bpf+0x4ee/0x810 [ 711.692887][ C1] ? __x64_sys_bpf+0x7c/0x90 [ 711.692918][ C1] ? do_syscall_64+0xf3/0x230 [ 711.692981][ C1] __kasan_kmalloc+0x98/0xb0 [ 711.693008][ C1] ? copy_verifier_state+0xab8/0x1020 [ 711.693031][ C1] kmalloc_trace_noprof+0x19c/0x2c0 [ 711.693057][ C1] copy_verifier_state+0xab8/0x1020 [ 711.693082][ C1] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 711.693108][ C1] do_check+0x433e/0x10980 [ 711.693195][ C1] ? __pfx_do_check+0x10/0x10 [ 711.693227][ C1] ? mark_reg_not_init+0xd4/0x4b0 [ 711.693261][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693297][ C1] ? __asan_memcpy+0x40/0x70 [ 711.693320][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693350][ C1] ? mark_reg_not_init+0xd4/0x4b0 [ 711.693389][ C1] do_check_common+0x14bd/0x1dd0 [ 711.693435][ C1] bpf_check+0x14222/0x192f0 [ 711.693491][ C1] ? __pfx_validate_chain+0x10/0x10 [ 711.693533][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693564][ C1] ? validate_chain+0x11e/0x5900 [ 711.693598][ C1] ? __pfx_validate_chain+0x10/0x10 [ 711.693630][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693661][ C1] ? validate_chain+0x11e/0x5900 [ 711.693692][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693723][ C1] ? validate_chain+0x11e/0x5900 [ 711.693750][ C1] ? mark_lock+0x9a/0x350 [ 711.693777][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693807][ C1] ? validate_chain+0x11e/0x5900 [ 711.693836][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693872][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693904][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693935][ C1] ? validate_chain+0x11e/0x5900 [ 711.693968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.693999][ C1] ? validate_chain+0x11e/0x5900 [ 711.694032][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694072][ C1] ? __pfx_bpf_check+0x10/0x10 [ 711.694099][ C1] ? validate_chain+0x11e/0x5900 [ 711.694127][ C1] ? __pfx_validate_chain+0x10/0x10 [ 711.694156][ C1] ? __pfx_validate_chain+0x10/0x10 [ 711.694183][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694221][ C1] ? __pfx_validate_chain+0x10/0x10 [ 711.694251][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694287][ C1] ? __pfx_validate_chain+0x10/0x10 [ 711.694318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694350][ C1] ? __pfx_validate_chain+0x10/0x10 [ 711.694380][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694411][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 711.694437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694467][ C1] ? mark_lock+0x9a/0x350 [ 711.694497][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694528][ C1] ? mark_lock+0x9a/0x350 [ 711.694557][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694587][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 711.694630][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694665][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 711.694690][ C1] ? timekeeping_get_ns+0x5c/0x420 [ 711.694711][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694742][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 711.694768][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 711.694797][ C1] ? timekeeping_get_ns+0x5c/0x420 [ 711.694816][ C1] ? seqcount_lockdep_reader_access+0x157/0x220 [ 711.694838][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694868][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 711.694893][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.694924][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 711.694946][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 711.694969][ C1] ? ktime_get_with_offset+0x83/0x150 [ 711.694990][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695021][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 711.695046][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695076][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 711.695099][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 711.695125][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695156][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695186][ C1] ? timekeeping_get_ns+0x2c0/0x420 [ 711.695210][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695242][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695273][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695339][ C1] ? security_bpf_prog_load+0x87/0xb0 [ 711.695369][ C1] bpf_prog_load+0x1667/0x20f0 [ 711.695404][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 711.695426][ C1] ? __pfx___might_resched+0x10/0x10 [ 711.695470][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695500][ C1] ? __might_fault+0xc6/0x120 [ 711.695535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695566][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695596][ C1] ? security_bpf+0x87/0xb0 [ 711.695622][ C1] __sys_bpf+0x4ee/0x810 [ 711.695645][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 711.695664][ C1] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 711.695703][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 711.695730][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 711.695755][ C1] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 711.695799][ C1] __x64_sys_bpf+0x7c/0x90 [ 711.695832][ C1] do_syscall_64+0xf3/0x230 [ 711.695858][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 711.695893][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.695920][ C1] RIP: 0033:0x7fa606c7cea9 [ 711.695940][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 711.695958][ C1] RSP: 002b:00007fa607a750c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 711.695979][ C1] RAX: ffffffffffffffda RBX: 00007fa606db3f80 RCX: 00007fa606c7cea9 [ 711.695995][ C1] RDX: 000000000000002e RSI: 0000000020000080 RDI: 0000000000000005 [ 711.696009][ C1] RBP: 00007fa606cebff4 R08: 0000000000000000 R09: 0000000000000000 [ 711.696024][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.696037][ C1] R13: 000000000000000b R14: 00007fa606db3f80 R15: 00007fff5c687fe8 [ 711.696066][ C1] [ 711.696642][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g72953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 712.806955][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=38906 [ 712.814883][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g72953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 712.826308][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 712.836299][ C0] rcu: RCU grace-period kthread stack dump: [ 712.842209][ C0] task:rcu_preempt state:I stack:24560 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 712.852400][ C0] Call Trace: [ 712.855687][ C0] [ 712.858632][ C0] __schedule+0x17e8/0x4a20 [ 712.863195][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.868874][ C0] ? __pfx___schedule+0x10/0x10 [ 712.873763][ C0] ? __pfx_lock_release+0x10/0x10 [ 712.878804][ C0] ? __asan_memset+0x23/0x50 [ 712.883417][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 712.889367][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 712.895828][ C0] ? schedule+0x90/0x320 [ 712.900107][ C0] schedule+0x14b/0x320 [ 712.904305][ C0] schedule_timeout+0x1be/0x310 [ 712.909210][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 712.914624][ C0] ? __pfx_process_timeout+0x10/0x10 [ 712.919982][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.925650][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 712.931224][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 712.936107][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 712.941084][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 712.947606][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 712.952904][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 712.958859][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.964534][ C0] ? finish_swait+0xd4/0x1e0 [ 712.969144][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 712.973758][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 712.978966][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 712.984889][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.990551][ C0] ? __kthread_parkme+0x169/0x1d0 [ 712.995720][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 713.000944][ C0] kthread+0x2f2/0x390 [ 713.005042][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 713.010255][ C0] ? __pfx_kthread+0x10/0x10 [ 713.014864][ C0] ret_from_fork+0x4d/0x80 [ 713.019303][ C0] ? __pfx_kthread+0x10/0x10 [ 713.023916][ C0] ret_from_fork_asm+0x1a/0x30 [ 713.028723][ C0]