last executing test programs: 3.332389309s ago: executing program 3 (id=552): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) 3.099259303s ago: executing program 3 (id=556): mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x801, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@void, @val={0x1, 0x4, 0x0, 0x9, 0x4, 0x8}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x3, 0x6, "826e06", 0x10, 0x21, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e21, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x6, 0x6, "70d606", 0x4, "4591eb"}}}}}}}}}, 0x50) 2.696104929s ago: executing program 4 (id=562): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0xffffffff, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) 2.498156662s ago: executing program 4 (id=566): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0xffffffffffffffff) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001700)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x2880, 0x10, 0x1}, 0x0, 0x18, 0x0, 0x23456}) io_uring_enter(r2, 0x1808, 0x0, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000400)={0x2, &(0x7f0000000100)=[{0x50, 0xfd, 0x0, 0x200004}, {0x6, 0x6, 0x0, 0x1001}]}) write$ppp(r5, &(0x7f0000000440)='f#', 0x2) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000040)=0x9cb3, 0x4) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xffffff6e, 0xa}}}]}]}, 0x8c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f00000001c0)=0xaff6aba) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000080)={{0x2, 0x4e24, @broadcast}, {0x1, @broadcast}, 0x4, {0x2, 0x4e21, @private=0xa010102}, 'rose0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000030429bd6000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000200bbbbbbbbbbbb0000"], 0x2c}}, 0x0) 1.923003751s ago: executing program 4 (id=568): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x844, &(0x7f0000000240)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c005a9871906bdd67d3c5c5e8e0c55a26bbbcc828150f8d8cf72e951acf3616fa7945ca9c905ed79417c6540e4fb424c313f5b3b2e27b84e28f42f888bd7273e027f3950483a3d0d9495a9f18ca37e858742f8afc6f3c3cb4e846de764e2a40d94d72d23415f018f3e15cdd45506ba2e0cf74cdbeefb6255a0afaaf511a9de12d19f5141a967a5c51ee49bc86d764e453d24ecae1744571c9"], 0x1, 0x5ce8, &(0x7f0000005dc0)="$eJzs3U1vHVcZB/Dnvvj6pbSNKlSFiEWaQmkpzXsC5a0pCxawAAllTSLXrQIpoMQgWlnElReIFV8BNt2w6FfgA/QzID4AkWxWXVAGjX1OMh5f5zokvnPt8/tJzswz547vmfw9nns9M/cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/+uHPLvQi4sbv0oITEV+IQUQ/YrGuT0c9cy0/fhgRJ2O7OV6MiMF8RL3+9j/PR1yOiE+fi9jcWluuF188YD+unF+98/mPf/CPP/554+Qv3vn5x+32n37x0id/uhdx4idvfvL5vaez7QAAAFCKqqqqXnqbfyq9v+933SkAYCry8b9K8nK1Wq1Wq9XHr26qxrvXLCJivblO/ZrB6XgAOGLW47Ouu0CH5F+0YUQ803UngJnW67oDHIrNrbXlXsq31zwenN5pz9eC7Mp/vffg/o79ppO0rzGZ1s/XRgzihX36szilPsySnH+/nf+NnfZRetxh5z8t++U/2rn1qTg5/0E7/5bjk39/bP6lyvkPHyv/gfwBAAAAAGCG5b//n+j4/O/8k2/KgTzq/O/pKfUBAAAAAAAAAJ62Jx3/7wHj/wEAAMDMqt+r1/7y3MNl+30WW738ei/i2dbjgcKkm2WWuu4HAAAAAAAAAAAAAJRkuHMN7/VexFxEPLu0VFVV/dXUrh/Xk65/1JW+/VCyrn/JAwDAjk+fa93L34tYiIjr6bP+5paWlqpqYXGpWqoW5/Pr2dH8QrXYeF+bp/Wy+dEBXhAPR1X9zRYa6zVNer88qb39/ernGlWDA3RsOjoMHAAiYudotOmIdMxU1fPR9ascjgb7//Fj/+cguv45BQAAAA5fVVVVL32c96l0zr/fdacAgKnIx//2eQG1Wq1Wq9XHr26qxrvXLCJivblO/ZrBcPwAcMSsx2ddd4EOyb9ow4g42XUngJnW67oDHIrNrbXlXsq31zwepPHd87Ugu/Jf722vl9cfN52kfY3JtH6+NmIQL+zTnxen1IdZkvPvt/O/sdM+So877PynZb/86+080UF/upbzH7Tzbzk++ffH5l+qnP/wsfIfyB8AAAAAAGZY/vv/Ced/8yYDAAAAAAAAwJGzubW2nO97zef/vzzmce7/PJ5y/j35Fynn32/n37ogZ9CYv//2w/z/vbW2/PHqv76UpzOf/9xgVD/3XK8/GKZrfqq5d+NW3I6VOL/n8cNd7Rf2tM/tar84of3SnvZR3b6Y28/Gcvw6bsc7D9rnJ1wYtTChvZrQnvMf2P+LlPMfNr7q/JdSe681rd3/qL9nv29Oxz3Ptb/955W9e9f0bcTgwbY11dt3poP+bP+fPDOK395duXP29zdXV+9ciDTZtfRipMlTlvOfS185/1df3mnPv/eb++v9j0aPnf+s2Ijhvvm/3Jivt/e1KfetCzn/UfrK+ecj0Pj9/yjnv//+/3oH/QEAAAAAAAAAAAAAAIBHqapq+xbRaxFxNd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49f3VSN91aziIi/N9epXzP8Ydw3AwBm2X8j4p9dd4LOyL9g+fP+6ulXuu4MMFV3P/jwlzdv3165c7frngAAAAAAAAAA/688/ufpxvjP29cBtcaN3jX+69tx+siO/9kfDbbHOk8b9FI8evzvM/Ho8b+HE55vbkL7aEL7/IT2hQntY2/0aMj5v5QyzvmfShtW0vivr3bQn67l/M+ksZ5z/l9rPa6Zf/XXo5x/f1f+51bf/825ux98+Mat92++t/Leyq8unL96+dKVy5euXDn37q3bK+d3/u2wx4cr55/HvnYdaFly/jlz+Zcl5//VVMu/LDn/V1It/7Lk/PPrPfmXJeef3/vIvyw5/9dSLf+y5Py/nmr5lyXn/3qq5V+WnP83Ui3/suT830i1/MuS8z+bavmXJed/LtXyL0vOP5/hkn9Zcv75ygb5lyXnfzHV8i9Lzv9SquVflpz/5VTLvyw5/yupln9Zcv5XUy3/suT8v5lq+Zcl5/+tVMu/LDn/N1Mt/7Lk/L+davmXJef/nVTLvyw5/++mWv5lyfl/L9XyL0vO//upln9Zcv5vpVr+ZXn4+f9mzJgxk2e6/s0EAAAAAAAAAAAAALRN43LirrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO/cWI2d53w/83ZO9NgT8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO8up6KyKbQlClKR2gt60TSJ0ihSW4GqSE0lGiE1UnvXXDXiJmqlXPgCKgcllVIFtnpnnufxzOx63jVmYOZ9Pp8I/+ydd2aeeeeZ2f1u9B0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVhs/PvOnQ0VRlP81/lhXFOeXf19T7C7/ubDj/V4hAAAAcK7eavz5dxemL+xewZVajvnXq/79u4uLi4vFF948+fafLy6mCzYUxcjqomhcFv3bL36+2HpM8EwxPjTc8u/hirsfqbh8tOLysYrLV1Vcvrri8vGKy5ecgCXWNH8f07ixaxt/Xdc8pcXFxVjjsmuXudYzQ6uHh+PvchqGGtdZHDtQHCoOFzPF1JLrDDX+VxSvbCzv694i3tdwy32tL4ri1E+f2hfXMBTO8bVF2501tD53b9xdbHjzp0/t+/bc61csNytPw5KVFsXmTeU6ny2K07+uKoaK1emcxHUOt6xz/TLrHGlb51DjeuXfO9d5aoXrjI97PKzzh13WuT587fFriqJYKM54TKdniuFibce9pvM93twR5W2UT+UHi9Gz2icbV7BPyuv85Jr2fdK5J+P53xjOyegZ1tD6dLzx5VVLzvs73Sflo+6HvVre9v3lnY6Pt/5qtW2vlsc8dd2Z98Cyz90yeyDt5ZY9sKlqDwyvGmnsgeHTa97Utgeml1xnuBhq3NfJ67rvgcm5I8cnZ5948pZDR/YenDk4c3R6ase2rdu3bd2+ffLAocMzU80/z+6UDpC1xXDag5vCe03cgzd0HNu6JRe/8e69Dsb75HVQPvbPXF8u6Pzh4gx7vDzm2c3n/jpI3/dbXgejLa+DZd9Tl3kdjK7gdVAec2rzyr5njrb8t9waevVeuK5lD7yf3w/L+3zoxjO/F64P63ruprP9fjiyZA/EhzUUXnvlV9LPe+O3h/OydF9cWV5w3qpifnbmxK2P752bOzFdhPGeuKjluercL2tbHlOxZL8Mn/V+2f23v7z+ymW+vi6cq/Gbuz9X5THbJro/V4139+XPZ9tXtxRhvMve6/O53Hez8nymLNHlfJbHPHvLuf8smHJJy/vfWNX738jYaPP9bySdjbG297+lT81IY2VFceqWlb3/jYX/3uv3v4v75P2vPFcP3dp9D5THPDd5tntgtOv73zVhDoX13BgSw3hL7n+7cflCc5u2PJeV+2Z0dCzsm9F4j+37ZuuS65S3Vt735ql3tm82X9P+XLX93FLDfVOeq7+Y6r5vymNenT7394418a8t7x2rqvbA2Miqcr1jaRM03+8W18Q9cGuxrzhWHC72p+uUz3J5XxNbVrYHVoX/3uv3jsv7ZA+U5+rFLd33QHnMD7a+uz87bQ5fSce0/OzU+fuFM2X+K0dP317naXu3M3+5zk9s6/67ofKY17edbc7ofp5uDl85b5nz1Pn6OdOe3l+8N+fp8rDOw9u7/26qPObiHSvcT7uLonht+rXG77vC73f/Yf4/vtv2e9/lfqf82vRr900+8KOzWT8AAO/c240/F1Y1f9Zs+X+sV/L//wMAAAADIeb+4TAT+R8AAABqI+b+kTAT+R8AAABqI+b+0TCTTPL/I7fvfOmtp4v0aYCLQbw8nob772weFzveC+HfGxZPK7/+sW+NvfSVp1d238NFUfzyvg8te/wjd8Z1NR2P6/xI+9eXuPzqFd3/ww+ePq718xNO7Wzefnw8K90Gsav8yuSWxu1ueGK6MV+9r2jMBxaee6Z5+81/x+NPbm0e/1fhQ0t2Hxhqu/7msJ5rw9wQPlPm/t2nz0M54/VeWn/Vv1z02dP3F683tOmCxsN88Q+btxs/I+qFi5rHx8d9pvX/81e/81J5/OPXLb/+p4eXX//JcLs/CfMXu5rHt57zr7Ss/4/D+uP9xevd+s3vL7v+ly9rHv9y2BdfD7Nz/Xf/2YffWu75ivez+47m9eL9T/3Ptsb14u3F2+9c//jT023no/P2X32zeTu7Hv3ZSOvx8evxfqKH72jf30Ph+W3rkRdF8Z0/KdrOc/HR5vX+qWP98faO37H8+m/uWOfxoasb1z/9eNa1Pa6v/c2WZR9vXM/uv1/X9nheuCecvzcnf1De7skHwn4Ml//vD5u31/lZpi/f0/5+E4//+rrm6zbe3mTH+l/oWP/C1eW5q17/vW821//yXavb1r/7k2E/3ducVes/+NcXtl3/G99uPh8nHps4emx2/tD+lrPa+jpePb5m7Xnnf+CCC8N7aee/9xybe2TmxIapDVNFsWEAPzKw1+v/Zpj/3RwL7/49NP3oZ8199/ynmt+3bvh5898vhK8/HJ7P+P3xa3851rZfO5/3hbua81zXf1NYx0pd9tX/unpFB578/Cvz//hHr3f+XBAfz/FLxhuP78WNlzYuG3q1eXnn+1WV/7yk/XX949GpxvxeOK+L4ZOZN13avL/O24+fTfL8p5uv3/iTXLx+0fF5IutG2h/Hua7/x+HnmO9f3v7+F/fH957u+DTndcVQuYSF8P5QLDQvj0fF8/38qUuXvb/4OTzFwhVns8wzmn1idvLwoaPzj0/OzczOTc4+8eSeI8fmj87taXx26Z4vVl3/9Ot7beP1vX9mx7ai8Wo/1hw99n6v//iD+/bfNnX9/pkDe+cPzD14fObEwX2zs/tm9s9ev/fAgZnHqq5/aP+u6S07t962ZeLgof27bt+5c+vOiUNHj5XLaC6qwo6pL00cPbGncZXZXdt2Tm/fvm1q4six/TO7bpuampivun7je9NEee1HJ07MHN47d+jIzMTsoSdndk3v3LFjS+WnPx45fmB2w+SJ+aOT87MzJyabj2XDXOPL5fe+quuTh9lj4f2uw1D46fxzN+9In49b+taXz3hTzUPafzwt3gifBRW/v1X9O+b+sTCTTPI/AAAA5CDm/vDB/6cvkP8BAACgNmLuXx1mIv8DAABAbcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/bvT/9f8Hef36//r/VOu3/n/M/WuKIsv8DwAAADmIuX9tmIn8DwAAALURc/95YSbyPwAAANRGzP3nh5lkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/B8JMMsn/AAAAkIOY+y8IM5H/AQAAoDZi7r8wzET+BwAAgNqIuX9dmEkm+V//X/9f/1//X/9f/7+X9P/1/7vR/9f/H+T16//r/1Ot3/r/Mff/vzCTTPI/AAAA5CDm/g+Gmcj/AAAAUBsx918UZiL/AwAAQG3E3H9xmEkm+V//X/9f/1//X/9f/7+X9P/1/7vR/9f/H+T16//r/1Ot3/r/MfdfEmaSSf4HAACAHMTcf2mYifwPAAAAtRFz/2VhJvI/AAAA1EbM/ZeHmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc/8VYSaZ5H8AAADIQcz9V4aZyP8AAABQGzH3fyjMRP4HAACA2oi5f32YSSb5X/9f/1//X/9f/1//v5f0//X/u9H/1/8f5PXr/+v/U63f+v8x9384zCST/A8AAAA5iLn/qjAT+R8AAABqI+b+q8NM5H8AAACojZj7N4SZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXr/+v/4/1fqt/x9z/8Ywk0zyPwAAAOQg5v5NYSbyPwAAANRGzP3XhJnI/wAAAFAbMfdfG2aSSf7X/9f/1//X/9f/1//vJf1//f9u9P/1/wd5/fr/+v9U67f+f8z914WZZJL/AQAAIAcx918fZiL/AwAAQG3E3H9DmIn8DwAAALURc//mMJNM8r/+v/6//r/+v/6//n8v6f/r/3ej/6//P8jr1//X/6dav/X/Y+6/Mcwkk/wPAAAAOYi5/6YwE/kfAAAAaiPm/pvDTOR/AAAAqI2Y+yfCTDLJ//r/+v/6//r/+v/6/72k/6//343+v/7/IK9f/1//n2r91v+Puf+WMJNM8j8AAADkIOb+W8NM5H8AAACojZj7J8NM5H8AAACojZj7p8JMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5fzrMJJP8DwAAADmIuX9LmIn8DwAAALURc//WMBP5HwAAAGoj5v5tYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9y/Pcwkk/wPAAAAOYi5f0eYifwPAAAAtRFz/21hJvI/AAAA1EbM/beHmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc//OMJNM8j8AAADkIOb+j4SZyP8AAABQGzH33xFmIv8DAABAbcTc/9Ewk0zyv/6//r/+v/6//r/+fy/p/+v/d6P/r/8/yOvX/9f/p1q/9f9j7t8VZpJJ/gcAAIAcxNx/Z5iJ/A8AAAC1EXP/XWEm8j8AAADURsz9u8NMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/+4wk0zyPwAAAOQg5v6PhZnI/wAAAFAbMfd/PMxE/gcAAIDaiLn/E2EmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fcf0+YSSb5HwAAAHIQc/8nw0zkfwAAAKiNmPv/f5iJ/A8AAAC1EXP/vWEmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fc/ythJpnkfwAAAMhBzP33hZnI/wAAAFAbMfd/KsxE/gcAAIDaiLn/V8NMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/9fCTDLJ/wAAAJCDmPt/PcxE/gcAAIDaiLn/N8JM5H8AAACojZj77w8zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/t8MM8kk/wMAAEAOYu5/IMxE/gcAAIDaiLn/02Em8j8AAADURsz9nwkzyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/gfDTDLJ/wAAAJCDmPs/G2Yi/wMAAEBtxNz/W2Em8j8AAADURsz9vx1mkkn+1//X/9f/1//X/9f/7yX9f/3/bvT/9f8Hef36//r/VOu3/n/M/Z8LM8kk/wMAAEAOYu7/nTAT+R8AAABqI+b+3w0zkf8BAACgNmLufyjMJJP8r/+v/6//r/+v/6//30v6//r/3ej/6/8P8vr1//X/qdZv/f+Y+z8fZpJJ/gcAAIAcxNz/e2Em8j8AAADURsz9e8JM5H8AAACojZj7Hw4zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/r1hJpnkfwAAAMhBzP1fCDOR/wEAAKA2Yu7fF2Yi/wMAAEBtxNy/P8wkk/yv/6//r/+v/6//r//fS/r/+v/d6P/r/w/y+vX/9f+p1m/9/5j7Z8JMMsn/AAAAkIOY+w+Emcj/AAAAUBsx9x8MM5H/AQAAoDZi7n8kzCST/K//r/+v/6//r/+v/99L+v/6/93o/+v/D/L69f/1/6nWb/3/mPsPhZlkkv8BAAAgBzH3fzHMRP4HAACA2oi5/0thJvI/AAAA1EbM/YfDTDLJ//r/+v/6//r/+v/6/72k/6//343+v/7/IK9f/1//n2r91v+Puf9ImEkm+R8AAAByEHP/0TAT+R8AAABqI+b+Y2Em8j8AAADURsz9x8NMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5//fDTDLJ/wAAAJCDmPtPhJnI/wAAAFAbMffPhpnI/wAAAFAbMffPhZlkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/fJhJJvkfAAAAchBz/6NhJvI/AAAA1EbM/Y+Fmcj/AAAAUBsx9z8eZpJJ/tf/1//X/9f/1//X/+8l/X/9/270//X/B3n9+v/6/1Trt/5/zP1PhJlkkv8BAAAgBzH3PxlmIv8DAABAbcTc/wdh/h/79qwF4NKDYfTGf9u2bdu2bRzbVnGaJOU31aw1M9m7SZv2LZ5i/wMAAMAxcvc/J25psv/1//p//b/+X/+v/59J/6//v6L/1//v/L/+X//P2Gr9f+7+58YtTfY/AAAAdJC7/3lxi/0PAAAAx8jd//y4xf4HAACAY+Tuf0Hc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/S+MW5rsfwAAAOggd/+L4hb7HwAAAI6Ru//FcYv9DwAAAMfI3f+SuKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/uftfGrc02f8AAADQQe7+l8Ut9j8AAAAcI3f/y+MW+x8AAACOkbv/FXFLk/2v/9f/6//1//p//f9M+n/9/xX9v/5/5//1//p/xlbr/3P3vzJuabL/AQAAoIPc/a+KW+x/AAAAOEbu/lfHLfY/AAAAHCN3/2vilib7X/+v/9f/6//1//r/mfT/+v8r+n/9/87/6//1/4yt1v/n7n9t3NJk/wMAAEAHuftfF7fY/wAAAHCM3P2vj1vsfwAAADhG7v43xC1N9r/+X/+v/9f/6//1/zPp//X/V/T/+v+d/9f/6/8ZW63/z93/xrilyf4HAACADnL3vylusf8BAADgGLn73xy32P8AAABwjNz9b4lbmux//b/+X/+v/9f/6/9n0v/r/6/o//X/O/+v/9f/M7Za/5+7/61xS5P9DwAAAB3k7n9b3GL/AwAAwDFy9789brH/AQAA4Bi5+98RtzTZ//p//b/+X/+v/9f/z6T/1/9f0f/r/3f+X/+v/2dstf4/d/8745Ym+x8AAAA6yN3/rrjF/gcAAIBj5O5/d9xi/wMAAMAxcve/J25psv/1//p//b/+X/+v/59J/6//v6L/1//v/L/+X//P2Gr9f+7+98YtTfY/AAAAdJC7/31xi/0PAAAAx8jd//64xf4HAACAY+Tu/0Dc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/R+MW5rsfwAAAOggd/+H4hb7HwAAAI6Ru//DcYv9DwAAAMfI3f+RuKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/ufs/Grc02f8AAADQQe7+j8Ut9j8AAAAcI3f/x+MW+x8AAACOkbv/E3FLk/2v/9f/6//1//p//f9M+n/9/xX9v/5/5//1//p/xlbr/3P3fzJuabL/AQAAoIPc/Z+KW+x/AAAAOEbu/k/HLfY/AAAAHCN3/2filib7X/+v/9f/6//1//r/mfT/+v8r+n/9/87/6//1/4yt1v/n7v9s3NJk/wMAAEAHufs/F7fY/wAAAHCM3P2fj1vsfwAAADhG7v4vxC1N9r/+X/+v/9f/6//1/zPp//X/V/T/+v+d/9f/6/8ZW63/z93/xbilyf4HAACADnL3fylusf8BAADgGLn7vxy32P8AAABwjNz9X4lbmux//b/+X/+v/9f/6/9n0v/r/6/o//X/O/+v/9f/M7Za/5+7/6txS5P9DwAAAB3k7v9a3GL/AwAAwDFy9389brH/AQAA4Bi5+78RtzTZ//p//b/+X/+v/9f/z6T/1/9f0f/r/3f+X/+v/2dstf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBj5O7/dtxi/wMAAMAxcvd/J25psv/1//p//b/+X/+v/59J/6//v6L/1//v/L/+X//P2Gr9f+7+78YtTfY/AAAAdJC7/3txi/0PAAAAx8jd//24xf4HAACAY+Tu/0Hc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/T+MW5rsfwAAAOggd/+P4hb7HwAAAI6Ru//HcYv9DwAAAMfI3f+TuKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/uft/Grc02f8AAADQQe7+n8Ut9j8AAAAcI3f/z+MW+x8AAACOkbv/F3FLk/2v/9f/6//1//p//f9M+n/9/xX9v/5/5//1//p/xlbr/3P3/zJuabL/AQAAoIPc/b+KW+x/AAAAOEbu/l/HLfY/AAAAHCN3/2/ilib7X/+v/9f/6//1//r/mfT/+v8r+n/9/87/6//1/4yt1v/n7v9t3NJk/wMAAEAHuft/F7fY/wAAAHCM3P2/j1vsfwAAADhG7v4/xC1N9r/+X/+v/9f/6//1/zPp//X/V/T/+v+d/9f/6/8ZW63/z93/x7ilyf4HAACADnL3/ylusf8BAADgGLn7/xy32P8AAABwjNz9f4lbmux//b/+X/+v/9f/6/9n0v/r/6/o//X/O/+v/9f/M7Za/5+7/69xS5P9DwAAAB3k7v9b3GL/AwAAwDFy9/89brH/AQAA4Bi5+/8RtzTZ//p//b/+X/+v/9f/z6T/1/9f0f/r/3f+X/+v/2dstf4/d/8/45Ym+x8AAAA6yN3/r7jF/gcAAIBj5O7/d9xi/wMAAMAxcvf/J25psv/1//p//b/+X/+v/59J/6//v6L/1//v/L/+X//P2Gr9f+7+/8YtTfY/AAAAdJC7/39xi/0PAAAAx8jd//+4xf4HAACAY+TuvyFuabL/9f/6f/2//l//r/+fSf+v/7+i/9f/7/y//l//z9hq/X/u/hvjlib7HwAAADrI3X9T3GL/AwAAwDFy998ct9j/AAAAcIzc/bfELU32v/5f/6//1//r//X/M+n/9f9X9P/6/53/1//r/xlbrf/P3X9r3NJk/wMAAEAHuftvi1vsfwAAADhG7v7b4xb7HwAAAI6Ru/+OuKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/ufvvjFua7H8AAADoIHf/XXGL/Q8AAADHyN1/d9xi/wMAAMAxcvffE7c02f/6f/2//l//r//X/8+k/9f/X9H/6/93/l//r/9nbLX+P3f/vXFLk/0PAAAAHeTuvy9usf8BAADgGLn7749b7H8AAAA4Ru7+B+KWJvtf/6//1//r//X/+v+Z9P/6/yv6f/3/zv/r//X/jK3W/+fufzBuabL/AQAAoIPc/Q/FLfY/AAAAHCN3/8Nxi/0PAAAAx8jd/0jc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/Y/GLU32PwAAAHSQu/+xuMX+BwAAgGPk7n88brH/AQAA4Bi5+5+IW5rsf/2//l//r//X/+v/Z9L/6/+v6P/1/zv/r//X/zO2Wv+fu//JuKXJ/gcAAIAOcvc/FbfY/wAAAHCM3P1Pxy32PwAAABwjd/8zcUuT/a//1//r//X/+n/9/0z6f/3/Ff2//n/n//X/+n/GVuv/c/c/GwAA//9/h0Q1") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x348, 0x208, 0x160, 0xffffffff, 0x0, 0x160, 0x2b0, 0x2b0, 0xffffffff, 0x2b0, 0x2b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private, @gre_key}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'macvtap0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @broadcast, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast2, @broadcast, @gre_key, @icmp_id}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'veth1_to_hsr\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @dev}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) 1.806394703s ago: executing program 0 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=@delqdisc={0x24, 0x25, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0x1f}, {0xffe0, 0xfff1}, {0x10, 0x4}}}, 0x24}}, 0x440c0) 1.569538306s ago: executing program 0 (id=572): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.421762558s ago: executing program 1 (id=575): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0xad4, &(0x7f0000001540)="$eJzs3U2MW0cBAOCxd73JtilxSkKXNLQJhbb8dNPsLuEngqRKhETUVIhLpQgOUZqWiBAkigRUlUhy4karKkic+BGnXqqCkOgFRT1xqUQjVUg9FQ4ciIKIxAECidHuznjtid1n74+fvf4+aTx+b97zzDw/P7/fmQCMrerS68LCTCWEy2+8cuzvD/9tenHM4eYU9aXXyZahWgihEocns897b2I5vnXjxdOd4kqYW3pNw+Gp68157w4hXAh7w5VQD7svX335rbknT1w8fmnf268eurYxtQcAgPHy1SuHFnb95U/377j52gNHwpY0evHN0v55PY7YFvf7j8Qd/7T/Xw3tw5WW0Goqm24yhup0+3QTHaZrzaeWTTfZJf+pLP9al+m2hPfPf6JlXKd6wyhL63E9VKqzbcPV6uzs8jF5WDqun6rMnj977tnnSyoosO7+9WAIYW9LOHqpfXi14Rtxy7Een9UaDm/AZ64x1HqsZ2MIyjqS4cjg8rrZWFZ6nQcUGttL3gABRPn1wjtcyM8srE3z0yZ7y//6E9XO88M6GPT631f+UyXnH+T/64u2OKyfzbo2pXql39G2OJxfR8jvX+r++8uvdLSPza9H1HosZ7frCKNyfaFbOScGXI7V6lb+fL3YrL4Y47QcvpSlt/5+8u90VL5joLN/5+f/BUEY7hDahmtr+axGydsfYHjl98010vXRKL+vL0/fUpC+tSB9uiD9roL0uwvSYZz99ns/CS9VVo7z82P6fs+Hp/Ns98T4A32WJz8f2W/++X2//Vpr/vn9xDDMfn/q6TOfe+bk1eX7/yvN9f92XN/T4UY9/rauxAnS+cL8vHrz3v96ez7VLtPdm5Xnng7TL73f2T5dZefK54SW7cwd5Zhpn297t+n2tE9Xz6abjmFrVt58/+SubL60/5G2q2l5TWb1rWX1mMrKkbYrO2KclwNWI62P3e7/T+vnTKhVnj177szjcTitp3+cqG1ZHH9gwOUG1q7X539mQvvzP9ua42vV1u3C9pXxleXtwuvx89rHzzXzaR8/H4fT/9w3J6aXxs+e/s65Z9a/+jDWnv/hC986de7cme+W/mZ+OoQhKMYq3nx5OIrRz5t02DIs5Vn1m8WKDEExNuGbkjdMwIbb/6PlnYDHzn771HNnnjtzfv7gwfm5uYOfn1/Yv7Rfv791777VhRJKC6ynlT/9sksCAAAAAAAAAAAA9Or7x49dfefNz767/Pz/yvN/6fn/dOdvev7/x9nz//lz8uk5+PQc4I4O6UvTZA2sTmXT1WL4YFbenVk+u7L5PhTjZj9+8fn/lF3ermsqz33Z+FqXwaw5gTvaS5nK2iDJ+wv8aIwvxfhXAUpUme48OsZF7VundT21T9HSLkVD+8CjI31vaW1I7Zik5787tuvU8mXvGEAZWX+DeJyw7DoCnf1jrNr//udKxUsvi9A9TA42v5+N7zrR6LqX3msPNgDro+z+P9N5zxSf/8NXti6GNNn1J9q3l3n7pdCPP7/TPjzs/U9udP55v32Dzr/s+g+6/89m/3c9b/+yHvPqq8v3Pz+/9m5LtmF3r/nn9U/tQO/sL/+bMf9Um0dCb/k3fpnln18Q6tF/s/zv6jH/O+q/Z3X5/y/mnxbbow/1mn91+ZpZtb0c+XnjdP0vP2+c3Mrqn9r2fJ/8v/ZCp/qvsqPG2zF/GGej0s9sv7L9iOZO++r7/40urG//v83CZpu1/D6Mz8QxaUOc7nPI+zvpt/zp/or0P7Ar+/xKwf+b/n9H2xdiXPR7SP3/3r6xfDmvHv/y0/pZj8syDdc6LNvNuq2BUfXeWF3/W4dwcsPz2Fp6HYc+HBmCMjRDY2IV8zX7iSu5/I1GY2NPaBUoNXNKX/5lHyeUnX/Zy79I3v9vvg+f9/+bp+f9/+bpef+/efp0/Ia6pef9/+bLM+//N0+/L/vcvH/gmYL0Dxek7+6c3jxsv79g/j0F6R8pSN/XTD/cNkVKf6Bg/gcL0u9tT9+Spz9UMP/HCtI/XpD+cEH6oy3prX1Ap/RPFMy/2aXnUca1/jDO8ufz/P5hfKTrP91+/zsL0oHR9dPXDhw9+Zuv15ef/59qng9J1/GOxOFaPH76QRzOr3uHluHFtDfj8F+z9GE/3wHjJG8/I/9/f6QgHRhd6T4vv28YQ5WtnUfHuKjdqm77+YyWT8b4UzH+dIwfi/FsjPfH+ECM5wZUPjbG0dd/d+ilysrx/vYsvdf7yfPngdraiQohzPdYnvz8QL/3s+ft+PVrrfmv8nEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0lSXXhcWZiohXH7jlWNPnzi7f3HM4eYU9aXXyZahWnO+EB6P8USMfxHf3Lrx4unW+HaMK2EuVEKlOT48db2Z090hhAthb7gS6mH35asvvzX35ImLxy/te/vVQ9c2bgkAAADA5vf/AAAA//9LWAnF") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) llistxattr(0x0, 0x0, 0x0) 1.386558209s ago: executing program 0 (id=576): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0xffffffff, 0x4) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) 1.240214061s ago: executing program 0 (id=577): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8002d0029000100079704000300ff0303dc080000000000"], 0x32) 1.179963021s ago: executing program 1 (id=578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="019f07"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.131074462s ago: executing program 4 (id=579): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 1.130634462s ago: executing program 2 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x10}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 1.117919022s ago: executing program 0 (id=581): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={r1, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x88, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x90}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x88}, 0x1, 0x0, 0x0, 0x600}, 0x0) 948.266515ms ago: executing program 0 (id=582): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) 866.333676ms ago: executing program 2 (id=583): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 790.689948ms ago: executing program 1 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=@delqdisc={0x24, 0x25, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0x1f}, {0xffe0, 0xfff1}, {0x10, 0x4}}}, 0x24}}, 0x440c0) 766.854008ms ago: executing program 3 (id=585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000480), 0x0) 761.139378ms ago: executing program 4 (id=586): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 669.74185ms ago: executing program 2 (id=587): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) 668.57742ms ago: executing program 3 (id=588): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0xad4, &(0x7f0000001540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) llistxattr(0x0, 0x0, 0x0) 627.41846ms ago: executing program 4 (id=589): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x800088c) (async) truncate(&(0x7f0000000000)='./file1\x00', 0x800088c) fallocate(r0, 0x3, 0x4000000, 0x8000c62) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x20a00) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x20a00) 614.16ms ago: executing program 1 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500562008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 605.33515ms ago: executing program 2 (id=591): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8002d0029000100079704000300ff0303dc080000000000"], 0x32) 482.759462ms ago: executing program 2 (id=592): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={r1, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x88, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x90}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x88}, 0x1, 0x0, 0x0, 0x600}, 0x0) 359.966584ms ago: executing program 3 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x10}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 211.279946ms ago: executing program 1 (id=594): syz_open_dev$vim2m(&(0x7f00000004c0), 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') read$snddsp(r0, 0x0, 0x0) 146.586547ms ago: executing program 2 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="019f07"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 50.899789ms ago: executing program 1 (id=596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 0s ago: executing program 3 (id=597): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): s going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.033435][ T4312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.037831][ T4322] team0: Port device team_slave_1 added [ 59.043087][ T4314] team0: Port device team_slave_1 added [ 59.045192][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.047070][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.054453][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.076759][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.078748][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.085876][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.108241][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.110185][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.118054][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.121941][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.124151][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.131128][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.195613][ T4313] device hsr_slave_0 entered promiscuous mode [ 59.244024][ T4313] device hsr_slave_1 entered promiscuous mode [ 59.301798][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.303993][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.311055][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.365252][ T4312] device hsr_slave_0 entered promiscuous mode [ 59.414050][ T4312] device hsr_slave_1 entered promiscuous mode [ 59.463845][ T4312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.466539][ T4312] Cannot create hsr debugfs directory [ 59.525326][ T4323] device hsr_slave_0 entered promiscuous mode [ 59.564033][ T4323] device hsr_slave_1 entered promiscuous mode [ 59.624252][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.626414][ T4323] Cannot create hsr debugfs directory [ 59.705314][ T4314] device hsr_slave_0 entered promiscuous mode [ 59.744143][ T4314] device hsr_slave_1 entered promiscuous mode [ 59.783812][ T4314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.785857][ T4314] Cannot create hsr debugfs directory [ 59.905549][ T4322] device hsr_slave_0 entered promiscuous mode [ 59.944153][ T4322] device hsr_slave_1 entered promiscuous mode [ 59.983906][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.986030][ T4322] Cannot create hsr debugfs directory [ 60.127228][ T4312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.145773][ T4312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.188332][ T4312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.227969][ T4312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.264168][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 60.264177][ T4319] Bluetooth: hci2: command 0x0409 tx timeout [ 60.264321][ T4319] Bluetooth: hci3: command 0x0409 tx timeout [ 60.309306][ T4323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.335297][ T4323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.344185][ T4319] Bluetooth: hci4: command 0x0409 tx timeout [ 60.346009][ T4319] Bluetooth: hci1: command 0x0409 tx timeout [ 60.378920][ T4323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.449261][ T4323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.488359][ T4314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.526254][ T4314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.577112][ T4314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.615201][ T4314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.711506][ T4313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.749009][ T4313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.775617][ T4313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.821658][ T4313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.875276][ T4312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.913555][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.984402][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.987535][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.991842][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.036286][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.076455][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.127258][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.132910][ T4312] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.149827][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.152942][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.156403][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.158429][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.162240][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.164984][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.167475][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.177108][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.185934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.188641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.191048][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.192869][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.195598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.198345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.200927][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.202887][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.207212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.218584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.239130][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.242053][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.244878][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.246873][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.249223][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.261341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.265571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.268449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.271310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.275902][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.291744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.294983][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.297729][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.300984][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.305298][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.323935][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.330148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.332928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.337360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.340200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.348860][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.351667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.359864][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.368876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.371513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.378654][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.381355][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.401776][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.410296][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.413243][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.425665][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.430937][ T4314] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.442742][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.452304][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.460393][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.463287][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.465359][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.486012][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.488615][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.491600][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.501472][ T217] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.503486][ T217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.506420][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.508990][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.526500][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.529338][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.531956][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.539661][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.545394][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.562898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.567208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.569331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.579449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.583165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.593173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.597559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.601122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.603938][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.606006][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.608358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.611039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.613549][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.615567][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.627507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.630108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.632678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.641119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.643983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.646656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.649372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.651951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.660055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.662719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.666092][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.668062][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.675957][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.682803][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.702103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.710447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.713028][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.715012][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.717961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.737352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.740218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.742330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.745251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.747964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.750726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.762338][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.782343][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.785719][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.789008][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.791853][ T217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.803262][ T4312] device veth0_vlan entered promiscuous mode [ 61.809785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.812547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.816820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.820160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.828635][ T4312] device veth1_vlan entered promiscuous mode [ 61.836291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.838766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.841567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.845807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.848296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.851020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.862521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.865971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.868547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.871370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.887076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.889689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.891738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.894984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.897792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.900513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.903208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.908352][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.925086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.927794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.941206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.945492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.949334][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.952353][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.973363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.977129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.979979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.983078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.991379][ T4323] device veth0_vlan entered promiscuous mode [ 61.999196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.002504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.007173][ T4312] device veth0_macvtap entered promiscuous mode [ 62.026176][ T4312] device veth1_macvtap entered promiscuous mode [ 62.029011][ T4323] device veth1_vlan entered promiscuous mode [ 62.086433][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.100581][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.103263][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.106862][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.109432][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.112034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.116263][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.119000][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.121666][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.128863][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.134739][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.137402][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.145996][ T4323] device veth0_macvtap entered promiscuous mode [ 62.155313][ T4312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.157854][ T4312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.160286][ T4312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.162741][ T4312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.197891][ T4323] device veth1_macvtap entered promiscuous mode [ 62.237962][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.241045][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.246642][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.254652][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.261257][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.272014][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.274980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.283025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.286611][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.289874][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.292725][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.296938][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.301019][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.304860][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.327649][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.329798][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.337425][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.344703][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 62.346397][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 62.348135][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 62.355895][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.358284][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.360712][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.363032][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.381281][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.385008][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.395080][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.398835][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.401127][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.404725][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.418444][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.421163][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.424207][ T4319] Bluetooth: hci1: command 0x041b tx timeout [ 62.425856][ T4319] Bluetooth: hci4: command 0x041b tx timeout [ 62.442882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.447217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.449859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.452287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.460485][ T4314] device veth0_vlan entered promiscuous mode [ 62.468539][ T4322] device veth0_vlan entered promiscuous mode [ 62.477205][ T4322] device veth1_vlan entered promiscuous mode [ 62.480788][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.485433][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.488121][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.490603][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.493090][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.501131][ T4314] device veth1_vlan entered promiscuous mode [ 62.532664][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.537517][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.539783][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.545577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.548378][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.550687][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.555261][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.558728][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.561500][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.565209][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.615615][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.617879][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.619975][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.623357][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.627046][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.629659][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.632274][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.639399][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.642087][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.646329][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.651004][ T4322] device veth0_macvtap entered promiscuous mode [ 62.659706][ T4314] device veth0_macvtap entered promiscuous mode [ 62.663276][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.666906][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.669870][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.672454][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.683298][ T4313] device veth0_vlan entered promiscuous mode [ 62.700452][ T4322] device veth1_macvtap entered promiscuous mode [ 62.712166][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.728371][ T4313] device veth1_vlan entered promiscuous mode [ 62.745115][ T4314] device veth1_macvtap entered promiscuous mode [ 62.775274][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.778338][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.781037][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.798901][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.807516][ T4425] binder: 4424:4425 tried to acquire reference to desc 0, got 1 instead [ 62.811280][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.819905][ T4425] binder: 4424:4425 got transaction with too large buffer [ 62.822045][ T4425] binder: 4424:4425 transaction async to 4424:0 failed 5/29201/-22, size 112-24 line 3513 [ 62.835099][ T4359] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.839583][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.842312][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.847669][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.850793][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.853499][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.866794][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.869940][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.872847][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.890649][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.913921][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.916689][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.920382][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.923196][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.934459][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.937375][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.941308][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.946582][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.949440][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.952106][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.956091][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.958761][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.961598][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.970401][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.977597][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.982168][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.990707][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.993558][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.999585][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.003066][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.011262][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.016109][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.032440][ T4314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.035585][ T4314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.037831][ T4314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.040205][ T4314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.050020][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.052876][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.060337][ T4313] device veth0_macvtap entered promiscuous mode [ 63.070311][ T4313] device veth1_macvtap entered promiscuous mode [ 63.154826][ T4423] loop0: detected capacity change from 0 to 40427 [ 63.202310][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.206695][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.209451][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.212907][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.217023][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.220166][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.223525][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.227600][ T4423] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.233872][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.237974][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.250660][ T4423] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 63.267385][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.270062][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.272480][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.279317][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.281913][ T4423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.285238][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.287431][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.290487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.311194][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.313481][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.335076][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.342821][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.349251][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.355600][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.358480][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.361656][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.368677][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.371437][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.376804][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.382419][ T4313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.389476][ T4313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.391842][ T4313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.396332][ T4313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.399984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.402691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.410579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.533000][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.533799][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.537675][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.539429][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.543484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.546421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.403347][ T4312] syz-executor: attempt to access beyond end of device [ 64.403347][ T4312] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.423821][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 64.425590][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 64.427200][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 64.504207][ T4319] Bluetooth: hci4: command 0x040f tx timeout [ 64.505570][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.506085][ T4319] Bluetooth: hci1: command 0x040f tx timeout [ 64.507825][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.519373][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.521517][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.551954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.562386][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.566387][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.572846][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.730905][ T4446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7'. [ 64.792494][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.796772][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.908365][ T4451] loop1: detected capacity change from 0 to 2048 [ 65.429758][ T4455] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.625903][ T4458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10'. [ 65.808087][ T4451] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 65.838149][ T4451] overlayfs: './file2' not a directory [ 66.506185][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 66.508016][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 66.509704][ T4326] Bluetooth: hci3: command 0x0419 tx timeout [ 66.593763][ T4319] Bluetooth: hci1: command 0x0419 tx timeout [ 66.593789][ T4326] Bluetooth: hci4: command 0x0419 tx timeout [ 66.649344][ T4470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23'. [ 66.690156][ T4468] loop0: detected capacity change from 0 to 2048 [ 66.756304][ T4472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.761682][ T4468] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 66.775684][ T4468] overlayfs: './file2' not a directory [ 67.465964][ T4477] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 69.139151][ T4497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.153884][ T4497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.287847][ T4482] loop3: detected capacity change from 0 to 32768 [ 69.335691][ T4482] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 69.338414][ T4482] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 69.353324][ T4486] loop4: detected capacity change from 0 to 40427 [ 69.372634][ T4482] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 69.379599][ T4429] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 69.381627][ T4429] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 69.418013][ T4486] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.426509][ T4429] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 69.439733][ T4429] gfs2: fsid=syz:syz.0: jid=0: Done [ 69.450412][ T4482] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 69.454044][ T4486] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 69.479239][ T4486] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.722840][ T22] cfg80211: failed to load regulatory.db [ 70.665000][ T4455] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 70.668341][ T4455] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 70.673683][ T4314] syz-executor: attempt to access beyond end of device [ 70.673683][ T4314] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.681622][ T4455] Remounting filesystem read-only [ 70.820315][ T4313] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 70.851502][ T4507] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24'. [ 71.784025][ T4472] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 71.791283][ T4472] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 71.805034][ T4472] Remounting filesystem read-only [ 71.895297][ T4312] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 71.993382][ T4519] loop4: detected capacity change from 0 to 2048 [ 72.039270][ T4521] binder: tried to use weak ref as strong ref [ 72.041109][ T4521] binder: 4520:4521 Acquire 1 refcount change on invalid ref 0 ret -22 [ 72.053113][ T4522] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.061960][ T4521] binder: 4520:4521 got transaction to invalid handle, 1 [ 72.072022][ T4521] binder: 4521:4520 cannot find target node [ 72.079510][ T4521] binder: 4520:4521 transaction async to 0:0 failed 8/29201/-22, size 112-24 line 3054 [ 72.091797][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.091842][ T4519] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 72.250603][ T4524] loop0: detected capacity change from 0 to 256 [ 72.382255][ T4509] loop2: detected capacity change from 0 to 40427 [ 72.450354][ T4524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.465524][ T4524] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 72.479862][ T4509] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.527186][ T4511] loop1: detected capacity change from 0 to 32768 [ 72.529361][ T4509] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 72.570930][ T4511] [ 72.570930][ T4511] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.570930][ T4511] [ 72.578971][ T4524] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 72.585133][ T4509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.750387][ T4517] loop3: detected capacity change from 0 to 40427 [ 73.791181][ T4323] syz-executor: attempt to access beyond end of device [ 73.791181][ T4323] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.805123][ T4517] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 24) [ 73.807265][ T4517] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.815610][ T4517] F2FS-fs (loop3): build fault injection attr: rate: 7, type: 0x3ffff [ 73.818028][ T4517] F2FS-fs (loop3): Unrecognized mount option " " or missing value [ 73.940013][ T4306] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.242712][ T4313] [ 74.242712][ T4313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 74.242712][ T4313] [ 74.251955][ T4313] [ 74.251955][ T4313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 74.251955][ T4313] [ 75.802419][ T4581] binder: tried to use weak ref as strong ref [ 75.804217][ T4581] binder: 4578:4581 Acquire 1 refcount change on invalid ref 0 ret -22 [ 75.823043][ T4583] loop3: detected capacity change from 0 to 2048 [ 75.834262][ T4581] binder: 4578:4581 got transaction to invalid handle, 1 [ 75.836309][ T4581] binder: 4581:4578 cannot find target node [ 75.837850][ T4581] binder: 4578:4581 transaction async to 0:0 failed 11/29201/-22, size 112-24 line 3054 [ 75.859751][ T4358] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.890051][ T4585] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.941185][ T4583] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 75.987138][ T4590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40'. [ 76.863353][ T4571] loop1: detected capacity change from 0 to 32768 [ 76.957530][ T4571] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.37 (4571) [ 77.031994][ T4571] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 77.064623][ T4599] loop2: detected capacity change from 0 to 256 [ 77.071693][ T4571] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 77.074916][ T4522] NILFS (loop4): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 77.078021][ T4522] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=2) [ 77.089913][ T4522] Remounting filesystem read-only [ 77.092109][ T4571] BTRFS info (device loop1): using free space tree [ 77.151650][ T4314] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 77.177048][ T4599] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 77.180684][ T4599] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 77.234555][ T4619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.28'. [ 77.436491][ T4571] BTRFS info (device loop1): enabling ssd optimizations [ 78.166147][ T4313] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 78.564495][ T4646] loop4: detected capacity change from 0 to 764 [ 78.577087][ T4639] loop2: detected capacity change from 0 to 2048 [ 78.642042][ T4639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.647519][ T4639] EXT4-fs (loop2): unmounting filesystem. [ 78.805718][ T4655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.50'. [ 78.888292][ T4659] binder: 4657:4659 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 78.932917][ T4658] binder: 4657:4658 context manager tried to acquire desc 0 [ 78.935854][ T4658] binder: 4657:4658 ioctl c0306201 200003c0 returned -22 [ 78.938106][ T4658] binder: 4657:4658 got transaction to invalid handle, 1 [ 78.940032][ T4658] binder: 4658:4657 cannot find target node [ 78.941693][ T4658] binder: 4657:4658 transaction async to 0:0 failed 13/29201/-22, size 112-24 line 3054 [ 78.979986][ T4602] loop0: detected capacity change from 0 to 40427 [ 78.991668][ T4602] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 24) [ 78.993880][ T4602] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.001437][ T4602] F2FS-fs (loop0): build fault injection attr: rate: 7, type: 0x3ffff [ 79.003914][ T4602] F2FS-fs (loop0): Unrecognized mount option " " or missing value [ 79.457314][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.678530][ T4434] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.714902][ T4668] loop2: detected capacity change from 0 to 2048 [ 79.754727][ T4671] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.833287][ T4671] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 79.838361][ T4671] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 79.845075][ T4671] Remounting filesystem read-only [ 79.847672][ T4323] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 80.150722][ T4684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.59'. [ 80.321365][ T4687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.58'. [ 80.930796][ T4585] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 81.139106][ T4585] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 81.165588][ T4585] Remounting filesystem read-only [ 81.259462][ T4322] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 81.394856][ T4680] loop4: detected capacity change from 0 to 32768 [ 81.403261][ T4680] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.57 (4680) [ 81.433479][ T4680] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 81.438049][ T4680] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 81.458551][ T4680] BTRFS info (device loop4): using free space tree [ 81.525976][ T4717] binder: 4711:4717 got transaction to invalid handle, 1 [ 81.527910][ T4717] binder: 4717:4711 cannot find target node [ 81.529579][ T4717] binder: 4711:4717 transaction async to 0:0 failed 17/29201/-22, size 112-24 line 3054 [ 81.544240][ T4637] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.572569][ T4716] loop2: detected capacity change from 0 to 2048 [ 81.628823][ T4727] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.703384][ T4680] BTRFS info (device loop4): enabling ssd optimizations [ 81.713536][ T4727] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 81.732777][ T4727] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 81.743073][ T4727] Remounting filesystem read-only [ 81.745370][ T4323] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 81.929957][ T4746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.73'. [ 81.950084][ T4743] loop0: detected capacity change from 0 to 2048 [ 82.070572][ T4743] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.085777][ T4743] EXT4-fs (loop0): unmounting filesystem. [ 82.132430][ T4680] BTRFS error (device loop4: state M): unrecognized mount option 'iocharset=default' [ 82.938825][ T4757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.74'. [ 83.033419][ T4703] loop3: detected capacity change from 0 to 32768 [ 83.191132][ T4314] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 83.954091][ T4768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 83.956633][ T4705] sctp: [Deprecated]: syz.3.41 (pid 4705) Use of int in max_burst socket option deprecated. [ 83.956633][ T4705] Use struct sctp_assoc_value instead [ 84.160557][ T4782] loop2: detected capacity change from 0 to 2048 [ 84.930113][ T4792] binder: 4789:4792 got transaction to invalid handle, 1 [ 84.932184][ T4792] binder: 4792:4789 cannot find target node [ 84.936309][ T4792] binder: 4789:4792 transaction async to 0:0 failed 21/29201/-22, size 112-24 line 3054 [ 84.939412][ T4773] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.945762][ T4791] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.985410][ T4791] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 84.988919][ T4791] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 84.992032][ T4791] Remounting filesystem read-only [ 84.997461][ T4323] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 85.080890][ T4801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.87'. [ 86.020290][ T4804] loop2: detected capacity change from 0 to 4096 [ 86.105377][ T4804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.88'. [ 86.107980][ T4804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.88'. [ 86.231114][ T4822] netlink: 48 bytes leftover after parsing attributes in process `syz.2.88'. [ 86.387984][ T4828] binder: 4827:4828 got transaction to invalid handle, 1 [ 86.389934][ T4828] binder: 4828:4827 cannot find target node [ 86.412035][ T4828] binder: 4827:4828 transaction async to 0:0 failed 25/29201/-22, size 112-24 line 3054 [ 86.422681][ T4772] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.472828][ T4815] loop1: detected capacity change from 0 to 32768 [ 86.475839][ T4815] ======================================================= [ 86.475839][ T4815] WARNING: The mand mount option has been deprecated and [ 86.475839][ T4815] and is ignored by this kernel. Remove the mand [ 86.475839][ T4815] option from the mount to silence this warning. [ 86.475839][ T4815] ======================================================= [ 86.492723][ T4830] loop0: detected capacity change from 0 to 2048 [ 87.251112][ T4837] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.255265][ T4815] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.271824][ T4830] overlayfs: failed to resolve './bus': -2 [ 87.399021][ T4843] loop4: detected capacity change from 0 to 256 [ 87.402369][ T4843] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 87.422944][ T4837] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 87.430817][ T4837] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 87.445822][ T4837] Remounting filesystem read-only [ 87.471060][ T4313] ocfs2: Unmounting device (7,1) on (node local) [ 87.531665][ T4843] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.558010][ T4843] CIFS mount error: No usable UNC path provided in device string! [ 87.558010][ T4843] [ 87.566440][ T4843] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 87.900594][ T4860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.107'. [ 87.927938][ T4862] binder: tried to use weak ref as strong ref [ 87.929643][ T4862] binder: 4861:4862 Acquire 1 refcount change on invalid ref 0 ret -22 [ 87.936659][ T4862] binder: 4861:4862 got transaction to invalid handle, 1 [ 87.938566][ T4862] binder: 4862:4861 cannot find target node [ 87.940110][ T4862] binder: 4861:4862 transaction async to 0:0 failed 28/29201/-22, size 112-24 line 3054 [ 87.959711][ T4773] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.001354][ T4838] loop3: detected capacity change from 0 to 40427 [ 88.011099][ T4838] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 88.031744][ T4838] F2FS-fs (loop3): invalid crc value [ 88.059828][ T4838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.073198][ T4845] loop0: detected capacity change from 0 to 32768 [ 88.091522][ T4845] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.101 (4845) [ 88.111049][ T4845] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.124895][ T4845] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 88.127295][ T4845] BTRFS info (device loop0): setting nodatacow, compression disabled [ 88.129536][ T4845] BTRFS info (device loop0): force clearing of disk cache [ 88.131523][ T4845] BTRFS info (device loop0): enabling ssd optimizations [ 88.131564][ T4838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.142259][ T4845] BTRFS info (device loop0): using spread ssd allocation scheme [ 88.153194][ T4845] BTRFS info (device loop0): doing ref verification [ 88.524551][ T4870] loop1: detected capacity change from 0 to 40427 [ 88.550057][ T4870] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 88.554700][ T4845] BTRFS info (device loop0): turning on sync discard [ 88.559283][ T4845] BTRFS info (device loop0): using free space tree [ 88.601880][ T4870] F2FS-fs (loop1): invalid crc value [ 88.725019][ T4870] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.769415][ T4873] loop4: detected capacity change from 0 to 2048 [ 88.771417][ T4870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.173196][ T4870] process 'syz.1.109' launched './file1' with NULL argv: empty string added [ 89.295926][ T4322] syz-executor: attempt to access beyond end of device [ 89.295926][ T4322] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.302402][ T4883] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.376994][ T4313] syz-executor: attempt to access beyond end of device [ 89.376994][ T4313] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 89.378002][ T4873] overlayfs: failed to resolve './bus': -2 [ 89.394061][ T4858] loop2: detected capacity change from 0 to 32768 [ 89.396824][ T4858] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.106 (4858) [ 89.423786][ T4858] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.426516][ T4858] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 89.452955][ T4858] BTRFS info (device loop2): setting nodatacow, compression disabled [ 89.471718][ T4883] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 89.475302][ T4883] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 89.478321][ T4883] Remounting filesystem read-only [ 89.515476][ T4858] BTRFS info (device loop2): max_inline at 0 [ 89.532427][ T4858] BTRFS info (device loop2): enabling disk space caching [ 89.535434][ T4858] BTRFS info (device loop2): turning off barriers [ 89.537127][ T4858] BTRFS info (device loop2): turning on flush-on-commit [ 89.539176][ T4858] BTRFS info (device loop2): doing ref verification [ 89.540980][ T4858] BTRFS info (device loop2): force clearing of disk cache [ 89.542828][ T4858] BTRFS info (device loop2): enabling ssd optimizations [ 89.545897][ T4858] BTRFS info (device loop2): max_inline at 4096 [ 89.547689][ T4858] BTRFS info (device loop2): disk space caching is enabled [ 89.648285][ T4845] BTRFS info (device loop0): rebuilding free space tree [ 89.744602][ T4912] BTRFS info (device loop0): scrub: started on devid 1 [ 89.755361][ T4912] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 90.410792][ T4858] BTRFS info (device loop2): rebuilding free space tree [ 90.419480][ T4858] BTRFS info (device loop2): disabling free space tree [ 90.434788][ T4858] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.437635][ T4858] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.448735][ T4312] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.990163][ T4323] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.990634][ T4434] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (4434) [ 91.155319][ T4950] binder: tried to use weak ref as strong ref [ 91.157090][ T4950] binder: 4949:4950 Acquire 1 refcount change on invalid ref 0 ret -22 [ 91.184761][ T4950] binder: 4949:4950 got transaction to invalid handle, 1 [ 91.186692][ T4950] binder: 4950:4949 cannot find target node [ 91.188263][ T4950] binder: 4949:4950 transaction async to 0:0 failed 31/29201/-22, size 112-24 line 3054 [ 91.226027][ T4938] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.410954][ T4963] loop4: detected capacity change from 0 to 2048 [ 91.439204][ T4971] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.448247][ T4963] overlayfs: failed to resolve './bus': -2 [ 91.520493][ T4971] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 91.523516][ T4971] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 91.533486][ T4971] Remounting filesystem read-only [ 91.539917][ T4970] loop1: detected capacity change from 0 to 4096 [ 91.542840][ T4970] ntfs: (device loop1): parse_options(): Invalid umask option argument: 01777777777J77777777776 [ 91.562119][ T4888] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop2 scanned by udevd (4888) [ 91.628069][ T4977] tmpfs: Bad value for 'mpol' [ 91.961295][ T4994] FAULT_INJECTION: forcing a failure. [ 91.961295][ T4994] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.968335][ T4994] CPU: 1 PID: 4994 Comm: syz.0.133 Not tainted 6.1.144-syzkaller #0 [ 91.970554][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.973267][ T4994] Call trace: [ 91.974187][ T4994] dump_backtrace+0x1c8/0x1f4 [ 91.975475][ T4994] show_stack+0x2c/0x3c [ 91.976625][ T4994] __dump_stack+0x30/0x40 [ 91.977789][ T4994] dump_stack_lvl+0xf8/0x160 [ 91.979048][ T4994] dump_stack+0x1c/0x5c [ 91.980218][ T4994] should_fail_ex+0x3c4/0x520 [ 91.981510][ T4994] should_fail+0x14/0x24 [ 91.982679][ T4994] should_fail_usercopy+0x20/0x30 [ 91.984051][ T4994] seccomp_notify_ioctl+0x1dc/0x127c [ 91.985550][ T4994] __arm64_sys_ioctl+0x14c/0x1c8 [ 91.986889][ T4994] invoke_syscall+0x98/0x2bc [ 91.988100][ T4994] el0_svc_common+0x138/0x258 [ 91.989394][ T4994] do_el0_svc+0x58/0x13c [ 91.990569][ T4994] el0_svc+0x58/0x138 [ 91.991673][ T4994] el0t_64_sync_handler+0x84/0xf0 [ 91.993053][ T4994] el0t_64_sync+0x18c/0x190 [ 92.151600][ T5001] binder: tried to use weak ref as strong ref [ 92.153917][ T5001] binder: 5000:5001 Acquire 1 refcount change on invalid ref 0 ret -22 [ 92.156882][ T5001] binder: 5000:5001 got transaction to invalid handle, 1 [ 92.159051][ T5001] binder: 5001:5000 cannot find target node [ 92.160653][ T5001] binder: 5000:5001 transaction async to 0:0 failed 34/29201/-22, size 112-24 line 3054 [ 92.169620][ T4763] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.230515][ T5003] loop3: detected capacity change from 0 to 256 [ 92.234389][ T5003] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 92.244414][ T5003] CIFS mount error: No usable UNC path provided in device string! [ 92.244414][ T5003] [ 92.249643][ T5003] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 92.421903][ T5008] loop3: detected capacity change from 0 to 2048 [ 92.439101][ T5009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.472491][ T5008] overlayfs: upper fs does not support tmpfile. [ 92.478576][ T5008] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.485056][ T5008] overlayfs: failed to set xattr on upper [ 92.487876][ T5008] overlayfs: ...falling back to index=off,metacopy=off. [ 92.528529][ T5009] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 92.531721][ T5009] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 92.535317][ T5009] Remounting filesystem read-only [ 92.547044][ T4322] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 92.550401][ T4322] NILFS error (device loop3): nilfs_readdir: bad page in #18 [ 92.556101][ T4322] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 92.639058][ T5011] loop3: detected capacity change from 0 to 164 [ 92.720237][ T5013] loop4: detected capacity change from 0 to 4096 [ 92.741724][ T5013] ntfs3: Unknown parameter 'windows_names' [ 92.796095][ T4306] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.800507][ T5017] loop0: detected capacity change from 0 to 256 [ 92.833261][ T5017] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 92.855254][ T5017] FAULT_INJECTION: forcing a failure. [ 92.855254][ T5017] name failslab, interval 1, probability 0, space 0, times 1 [ 92.858640][ T5017] CPU: 1 PID: 5017 Comm: syz.0.143 Not tainted 6.1.144-syzkaller #0 [ 92.860772][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.863455][ T5017] Call trace: [ 92.864331][ T5017] dump_backtrace+0x1c8/0x1f4 [ 92.865632][ T5017] show_stack+0x2c/0x3c [ 92.866723][ T5017] __dump_stack+0x30/0x40 [ 92.867916][ T5017] dump_stack_lvl+0xf8/0x160 [ 92.869168][ T5017] dump_stack+0x1c/0x5c [ 92.870270][ T5017] should_fail_ex+0x3c4/0x520 [ 92.871599][ T5017] __should_failslab+0xc0/0x120 [ 92.872918][ T5017] should_failslab+0x10/0x28 [ 92.874223][ T5017] __kmem_cache_alloc_node+0x7c/0x320 [ 92.875669][ T5017] __kmalloc+0xd8/0x178 [ 92.876770][ T5017] tomoyo_realpath_from_path+0xc4/0x4d4 [ 92.878312][ T5017] tomoyo_mount_permission+0x358/0x768 [ 92.879737][ T5017] tomoyo_sb_mount+0x48/0x60 [ 92.880965][ T5017] security_sb_mount+0x94/0xd4 [ 92.882284][ T5017] path_mount+0xb8/0xe78 [ 92.883444][ T5017] __arm64_sys_mount+0x49c/0x584 [ 92.884809][ T5017] invoke_syscall+0x98/0x2bc [ 92.886095][ T5017] el0_svc_common+0x138/0x258 [ 92.887419][ T5017] do_el0_svc+0x58/0x13c [ 92.888574][ T5017] el0_svc+0x58/0x138 [ 92.889658][ T5017] el0t_64_sync_handler+0x84/0xf0 [ 92.891000][ T5017] el0t_64_sync+0x18c/0x190 [ 92.933507][ T5017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.043013][ T5025] loop3: detected capacity change from 0 to 8 [ 93.043225][ T5023] binder: 5022:5023 tried to acquire reference to desc 0, got 1 instead [ 93.060686][ T5023] binder_alloc: 5022: binder_alloc_buf, no vma [ 93.062659][ T5023] binder: cannot allocate buffer: vma cleared, target dead or dying [ 93.062694][ T5023] binder: 5022:5023 transaction async to 5022:0 failed 39/29189/-3, size 112-24 line 3239 [ 93.065166][ T5025] cramfs: Unknown parameter 'h}:\-ZoH$@} SĆv:h348d0Yd˼F%2[}\_K5铨RW_^樮Gۓ2' [ 93.106669][ T4938] binder: undelivered TRANSACTION_ERROR: 29189 [ 93.211751][ T5034] loop0: detected capacity change from 0 to 256 [ 93.251427][ T5034] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 93.356000][ T5039] loop3: detected capacity change from 0 to 2048 [ 93.400421][ T5042] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.430011][ T5039] overlayfs: upper fs does not support tmpfile. [ 93.431958][ T5039] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.459764][ T5039] overlayfs: failed to set xattr on upper [ 93.461338][ T5039] overlayfs: ...falling back to index=off,metacopy=off. [ 93.812767][ T4516] udevd[4516]: symlink '../../loop0' '/dev/disk/by-diskseq/131.tmp-b7:0' failed: Read-only file system [ 93.850027][ T4516] udevd[4516]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 93.879963][ T4306] udevd[4306]: symlink '../../loop3' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:3' failed: Read-only file system [ 93.897127][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-diskseq/131.tmp-b7:0' failed: Read-only file system [ 93.916977][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-diskseq/131.tmp-b7:0' failed: Read-only file system [ 93.978876][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-diskseq/131.tmp-b7:0' failed: Read-only file system [ 94.037408][ T4306] udevd[4306]: symlink '../../loop3' '/dev/disk/by-diskseq/130.tmp-b7:3' failed: Read-only file system [ 94.041739][ T4306] udevd[4306]: symlink '../../loop3' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:3' failed: Read-only file system [ 94.070908][ T5042] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 94.074273][ T5042] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 94.090679][ T5042] Remounting filesystem read-only [ 94.106529][ T4322] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 94.109171][ T4322] NILFS error (device loop3): nilfs_readdir: bad page in #18 [ 94.114414][ T4530] udevd[4530]: symlink '../../loop4' '/dev/disk/by-diskseq/126.tmp-b7:4' failed: Read-only file system [ 94.135262][ T5052] loop1: detected capacity change from 0 to 512 [ 94.146945][ T5055] loop4: detected capacity change from 0 to 256 [ 94.149900][ T4322] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 94.155325][ T5056] binder: 5053:5056 tried to acquire reference to desc 0, got 1 instead [ 94.164698][ T5056] binder_alloc: 5053: binder_alloc_buf, no vma [ 94.166416][ T5056] binder: cannot allocate buffer: vma cleared, target dead or dying [ 94.223286][ T4306] udevd[4306]: symlink '../../loop3' '/dev/disk/by-diskseq/132.tmp-b7:3' failed: Read-only file system [ 94.226678][ T5052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.274896][ T5055] FAT-fs (loop4): Directory bread(block 64) failed [ 94.276744][ T5055] FAT-fs (loop4): Directory bread(block 65) failed [ 94.278598][ T5055] FAT-fs (loop4): Directory bread(block 66) failed [ 94.296668][ T5055] FAT-fs (loop4): Directory bread(block 67) failed [ 94.298595][ T5055] FAT-fs (loop4): Directory bread(block 68) failed [ 94.329299][ T5055] FAT-fs (loop4): Directory bread(block 69) failed [ 94.331152][ T5055] FAT-fs (loop4): Directory bread(block 70) failed [ 94.332940][ T5055] FAT-fs (loop4): Directory bread(block 71) failed [ 94.380417][ T5055] FAT-fs (loop4): Directory bread(block 72) failed [ 94.382207][ T5055] FAT-fs (loop4): Directory bread(block 73) failed [ 94.486403][ T4313] EXT4-fs (loop1): unmounting filesystem. [ 95.050704][ T5084] loop0: detected capacity change from 0 to 40427 [ 95.077594][ T5084] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 95.082014][ T5084] F2FS-fs (loop0): invalid crc value [ 95.129844][ T5084] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.181292][ T5084] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.804404][ T4312] syz-executor: attempt to access beyond end of device [ 95.804404][ T4312] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 95.862362][ T5093] binder: 5091:5093 tried to acquire reference to desc 0, got 1 instead [ 95.878316][ T5093] binder_alloc: 5091: binder_alloc_buf, no vma [ 96.248746][ T5118] loop0: detected capacity change from 0 to 16 [ 96.268357][ T5118] erofs: (device loop0): mounted with root inode @ nid 36. [ 97.075455][ T5118] device syzkaller1 entered promiscuous mode [ 97.113131][ T5127] FAULT_INJECTION: forcing a failure. [ 97.113131][ T5127] name failslab, interval 1, probability 0, space 0, times 0 [ 97.154291][ T5127] CPU: 0 PID: 5127 Comm: syz.2.185 Not tainted 6.1.144-syzkaller #0 [ 97.156475][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.159179][ T5127] Call trace: [ 97.160055][ T5127] dump_backtrace+0x1c8/0x1f4 [ 97.161379][ T5127] show_stack+0x2c/0x3c [ 97.162549][ T5127] __dump_stack+0x30/0x40 [ 97.163707][ T5127] dump_stack_lvl+0xf8/0x160 [ 97.164974][ T5127] dump_stack+0x1c/0x5c [ 97.166072][ T5127] should_fail_ex+0x3c4/0x520 [ 97.167323][ T5127] __should_failslab+0xc0/0x120 [ 97.168645][ T5127] should_failslab+0x10/0x28 [ 97.169857][ T5127] kmem_cache_alloc+0x88/0x318 [ 97.171153][ T5127] mas_alloc_nodes+0x274/0x754 [ 97.172483][ T5127] mas_preallocate+0x124/0x2dc [ 97.173889][ T5127] mmap_region+0xc28/0x1860 [ 97.175119][ T5127] do_mmap+0x978/0x10dc [ 97.176280][ T5127] vm_mmap_pgoff+0x184/0x284 [ 97.177551][ T5127] ksys_mmap_pgoff+0xd0/0x5a0 [ 97.178894][ T5127] __arm64_sys_mmap+0xf8/0x110 [ 97.180194][ T5127] invoke_syscall+0x98/0x2bc [ 97.181474][ T5127] el0_svc_common+0x138/0x258 [ 97.182937][ T5127] do_el0_svc+0x58/0x13c [ 97.184102][ T5127] el0_svc+0x58/0x138 [ 97.185212][ T5127] el0t_64_sync_handler+0x84/0xf0 [ 97.186572][ T5127] el0t_64_sync+0x18c/0x190 [ 97.187764][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.459735][ T5139] loop0: detected capacity change from 0 to 256 [ 97.462259][ T5139] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 97.470271][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 97.472605][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 97.540372][ T4306] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.750570][ T5159] loop0: detected capacity change from 0 to 512 [ 97.816788][ T5159] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.981611][ T4312] EXT4-fs (loop0): unmounting filesystem. [ 97.992152][ T5180] binder: tried to use weak ref as strong ref [ 97.994285][ T5180] binder: 5179:5180 Acquire 1 refcount change on invalid ref 0 ret -22 [ 98.001949][ T5180] binder: 5179:5180 got transaction to invalid handle, 1 [ 98.010819][ T5180] binder_debug: 5 callbacks suppressed [ 98.010831][ T5180] binder: 5180:5179 cannot find target node [ 98.014916][ T5180] binder: 5179:5180 transaction async to 0:0 failed 52/29201/-22, size 112-24 line 3054 [ 98.022007][ T4373] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.118622][ T5184] loop0: detected capacity change from 0 to 2048 [ 98.162366][ T5187] team0: Device geneve2 is up. Set it down before adding it as a team port [ 98.188860][ T5193] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.221211][ T5184] overlayfs: upper fs does not support tmpfile. [ 98.223524][ T5184] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.228579][ T5184] overlayfs: failed to set xattr on upper [ 98.230159][ T5184] overlayfs: ...falling back to index=off,metacopy=off. [ 98.240614][ T5192] loop3: detected capacity change from 0 to 8192 [ 98.254248][ T5194] tipc: Started in network mode [ 98.255821][ T5194] tipc: Node identity ac14140f, cluster identity 4711 [ 98.261033][ T5194] tipc: New replicast peer: 255.255.255.255 [ 98.263150][ T5194] tipc: Enabled bearer , priority 10 [ 98.281832][ T5192] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.296029][ T5193] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 98.299241][ T5193] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 98.315654][ T5193] Remounting filesystem read-only [ 98.318320][ T5192] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 98.330923][ T5192] FAT-fs (loop3): Filesystem has been set read-only [ 98.338981][ T4312] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 98.341656][ T4312] NILFS error (device loop0): nilfs_readdir: bad page in #18 [ 98.383046][ T4312] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 98.408874][ T4322] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 98.450847][ T5200] netlink: 'syz.2.217': attribute type 2 has an invalid length. [ 98.453198][ T5200] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 98.459869][ T5200] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.217'. [ 98.591021][ T5212] binder: BINDER_SET_CONTEXT_MGR already set [ 98.592798][ T5212] binder: 5211:5212 ioctl 4018620d 20000040 returned -16 [ 98.599779][ T5212] binder: 5211:5212 got transaction to invalid handle, 1 [ 98.601898][ T5212] binder: 5212:5211 cannot find target node [ 98.603575][ T5212] binder: 5211:5212 transaction async to 0:0 failed 55/29201/-22, size 112-24 line 3054 [ 98.629843][ T4763] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.739199][ T5217] loop2: detected capacity change from 0 to 512 [ 98.741592][ T5217] ext4: Bad value for 'min_batch_time' [ 98.762976][ T5216] loop1: detected capacity change from 0 to 4096 [ 98.780659][ T5216] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 98.820056][ T5222] loop3: detected capacity change from 0 to 2048 [ 98.831251][ T4306] udevd[4306]: symlink '../../loop0' '/dev/disk/by-diskseq/147.tmp-b7:0' failed: Read-only file system [ 98.853542][ T5224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.912632][ T5224] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 98.916748][ T5224] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 98.920980][ T5224] Remounting filesystem read-only [ 98.925867][ T4322] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 98.940922][ T47] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 99.022512][ T4306] udevd[4306]: symlink '../../loop0' '/dev/disk/by-diskseq/147.tmp-b7:0' failed: Read-only file system [ 99.138617][ T4530] udevd[4530]: symlink '../../loop3' '/dev/disk/by-diskseq/148.tmp-b7:3' failed: Read-only file system [ 99.151730][ T4530] udevd[4530]: symlink '../../loop3' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:3' failed: Read-only file system [ 99.158531][ T4306] udevd[4306]: symlink '../../loop4' '/dev/disk/by-diskseq/139.tmp-b7:4' failed: Read-only file system [ 99.297863][ T4530] udevd[4530]: symlink '../../loop4' '/dev/disk/by-diskseq/139.tmp-b7:4' failed: Read-only file system [ 99.329917][ T4306] udevd[4306]: symlink '../../loop3' '/dev/disk/by-diskseq/148.tmp-b7:3' failed: Read-only file system [ 99.355561][ T5249] binder: BINDER_SET_CONTEXT_MGR already set [ 99.364417][ T5249] binder: 5247:5249 ioctl 4018620d 20000040 returned -16 [ 99.370514][ T5249] binder: 5247:5249 got transaction to invalid handle, 1 [ 99.375195][ T4934] tipc: Node number set to 2886997007 [ 99.377293][ T4888] udevd[4888]: symlink '../../loop2' '/dev/disk/by-diskseq/151.tmp-b7:2' failed: Read-only file system [ 99.382348][ T5249] binder: 5249:5247 cannot find target node [ 99.387456][ T5249] binder: 5247:5249 transaction async to 0:0 failed 58/29201/-22, size 112-24 line 3054 [ 99.397825][ T4934] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.409132][ T4530] udevd[4530]: symlink '../../loop4' '/dev/disk/by-diskseq/139.tmp-b7:4' failed: Read-only file system [ 99.425344][ T4306] udevd[4306]: symlink '../../loop3' '/dev/disk/by-diskseq/148.tmp-b7:3' failed: Read-only file system [ 99.441368][ T5213] dccp_close: ABORT with 214 bytes unread [ 99.564579][ T5252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 99.758698][ T5259] Zero length message leads to an empty skb [ 99.882885][ T5248] loop0: detected capacity change from 0 to 32768 [ 99.934509][ T5248] (syz.0.236,5248,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbeat=noneusrquota" or missing value [ 99.938118][ T5248] (syz.0.236,5248,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 100.751985][ T5274] loop3: detected capacity change from 0 to 1024 [ 100.762231][ T5248] loop0: detected capacity change from 0 to 128 [ 100.872502][ T5277] binder: BINDER_SET_CONTEXT_MGR already set [ 100.904013][ T5277] binder: 5276:5277 ioctl 4018620d 20000040 returned -16 [ 100.921792][ T5277] binder: 5276:5277 got transaction to invalid handle, 1 [ 100.931169][ T5277] binder: 5277:5276 cannot find target node [ 100.956551][ T5245] loop4: detected capacity change from 0 to 32768 [ 100.985058][ T9] hfsplus: b-tree write err: -5, ino 4 [ 101.024125][ T5245] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 101.026451][ T5245] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 101.050908][ T5245] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms [ 101.075037][ T4373] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 101.076953][ T4373] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 101.122219][ T27] audit: type=1326 audit(101.090:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.2.250" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d5aba8 code=0x0 [ 101.155882][ T4373] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 101.157975][ T4373] gfs2: fsid=syz:syz.0: jid=0: Done [ 101.159574][ T5245] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 101.173011][ T5245] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 101.173011][ T5245] inode = 0 2341 [ 101.173011][ T5245] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 101.179694][ T5245] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 101.182160][ T5245] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:5245 [syz.4.231] inode_permission+0x1d0/0x3c0 [ 101.190200][ T5245] gfs2: fsid=syz:syz.0: I: n:0/2341 t:4 f:0x00 d:0x00000000 s:0 p:0 [ 101.192362][ T5245] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 101.197023][ T5245] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 101.199856][ T5245] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 101.201694][ T5245] gfs2: fsid=syz:syz.0: File system withdrawn [ 101.203341][ T5245] CPU: 0 PID: 5245 Comm: syz.4.231 Not tainted 6.1.144-syzkaller #0 [ 101.205457][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.208194][ T5245] Call trace: [ 101.209076][ T5245] dump_backtrace+0x1c8/0x1f4 [ 101.210422][ T5245] show_stack+0x2c/0x3c [ 101.211546][ T5245] __dump_stack+0x30/0x40 [ 101.212730][ T5245] dump_stack_lvl+0xf8/0x160 [ 101.213952][ T5245] dump_stack+0x1c/0x5c [ 101.215064][ T5245] gfs2_withdraw+0xf9c/0x13a8 [ 101.216310][ T5245] gfs2_consist_inode_i+0xf0/0x10c [ 101.217695][ T5245] gfs2_inode_refresh+0x920/0xd54 [ 101.219043][ T5245] inode_go_instantiate+0x4c/0x68 [ 101.220387][ T5245] gfs2_instantiate+0x17c/0x2c4 [ 101.221717][ T5245] gfs2_glock_wait+0x1b4/0x298 [ 101.223064][ T5245] gfs2_glock_nq+0x8bc/0x11d4 [ 101.224349][ T5245] gfs2_permission+0x26c/0x438 [ 101.225641][ T5245] inode_permission+0x1d0/0x3c0 [ 101.227026][ T5245] may_open+0x274/0x3b8 [ 101.228151][ T5245] path_openat+0x1e1c/0x2680 [ 101.229405][ T5245] do_filp_open+0x174/0x344 [ 101.230590][ T5245] do_sys_openat2+0x128/0x3d8 [ 101.231834][ T5245] __arm64_sys_openat+0x120/0x154 [ 101.233180][ T5245] invoke_syscall+0x98/0x2bc [ 101.234479][ T5245] el0_svc_common+0x138/0x258 [ 101.235757][ T5245] do_el0_svc+0x58/0x13c [ 101.236927][ T5245] el0_svc+0x58/0x138 [ 101.238032][ T5245] el0t_64_sync_handler+0x84/0xf0 [ 101.239399][ T5245] el0t_64_sync+0x18c/0x190 [ 101.551733][ T5248] loop0: detected capacity change from 0 to 32768 [ 101.628106][ T5279] loop1: detected capacity change from 0 to 32768 [ 101.639574][ T4888] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.798379][ T5281] loop3: detected capacity change from 0 to 32768 [ 101.805283][ T5281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.249 (5281) [ 101.824663][ T5281] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.830910][ T5281] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 101.847104][ T5281] BTRFS info (device loop3): force clearing of disk cache [ 101.859368][ T5281] BTRFS info (device loop3): enabling auto defrag [ 101.866810][ T5281] BTRFS info (device loop3): max_inline at 0 [ 101.871872][ T5281] BTRFS info (device loop3): enabling ssd optimizations [ 101.883221][ T5281] BTRFS info (device loop3): using free space tree [ 102.016079][ T5306] loop4: detected capacity change from 0 to 1024 [ 102.888653][ T5281] BTRFS info (device loop3): rebuilding free space tree [ 103.091546][ T4411] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 103.266746][ T4833] hfsplus: b-tree write err: -5, ino 4 [ 103.357123][ T5344] loop0: detected capacity change from 0 to 128 [ 103.376880][ T5347] binder: 5343:5347 got transaction to invalid handle, 1 [ 103.378868][ T5347] binder_debug: 2 callbacks suppressed [ 103.378877][ T5347] binder: 5347:5343 cannot find target node [ 103.391974][ T5344] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 103.393778][ T5347] binder: 5343:5347 transaction async to 0:0 failed 65/29201/-22, size 112-24 line 3054 [ 103.407875][ T4933] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.417453][ T5344] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.646570][ T5362] loop2: detected capacity change from 0 to 164 [ 103.839078][ T5368] loop2: detected capacity change from 0 to 1024 [ 103.846270][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-diskseq/171.tmp-b7:0' failed: Read-only file system [ 103.854063][ T4306] udevd[4306]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 103.878497][ T4322] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.891065][ T4530] udevd[4530]: symlink '../../loop4' '/dev/disk/by-diskseq/170.tmp-b7:4' failed: Read-only file system [ 104.005858][ T4306] udevd[4306]: symlink '../../loop0' '/dev/disk/by-diskseq/171.tmp-b7:0' failed: Read-only file system [ 104.018736][ T5374] binder: 5373:5374 got transaction to invalid handle, 1 [ 104.020679][ T5374] binder: 5374:5373 cannot find target node [ 104.022290][ T5374] binder: 5373:5374 transaction async to 0:0 failed 69/29201/-22, size 112-24 line 3054 [ 104.036662][ T4933] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.053351][ T4530] udevd[4530]: symlink '../../loop4' '/dev/disk/by-diskseq/170.tmp-b7:4' failed: Read-only file system [ 104.064774][ T4888] udevd[4888]: symlink '../../loop3' '/dev/disk/by-diskseq/168.tmp-b7:3' failed: Read-only file system [ 104.152119][ T4888] udevd[4888]: symlink '../../loop3' '/dev/disk/by-diskseq/168.tmp-b7:3' failed: Read-only file system [ 104.195127][ T4434] udevd[4434]: symlink '../../loop1' '/dev/disk/by-diskseq/166.tmp-b7:1' failed: Read-only file system [ 104.215409][ T4306] udevd[4306]: symlink '../../loop0' '/dev/disk/by-diskseq/171.tmp-b7:0' failed: Read-only file system [ 104.217446][ T5364] loop4: detected capacity change from 0 to 32768 [ 104.222704][ T5379] binder: 5378:5379 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 00000000000000fc != 0000000000000000 [ 104.229817][ T5364] (syz.4.270,5364,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 104.258886][ T5385] loop0: detected capacity change from 0 to 256 [ 104.261370][ T5385] exfat: Unknown parameter 'zero_size_dir' [ 104.306506][ T4306] udevd[4306]: symlink '../../loop0' '/dev/disk/by-diskseq/171.tmp-b7:0' failed: Read-only file system [ 104.408720][ T4833] hfsplus: b-tree write err: -5, ino 4 [ 104.421826][ T5389] loop1: detected capacity change from 0 to 512 [ 104.716926][ T5389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.250314][ T5400] loop3: detected capacity change from 0 to 64 [ 105.269439][ T5389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.802828][ T4313] EXT4-fs (loop1): unmounting filesystem. [ 105.824171][ T5413] binder: 5411:5413 got transaction to invalid handle, 1 [ 105.826354][ T5413] binder: 5413:5411 cannot find target node [ 105.831037][ T5413] binder: 5411:5413 transaction async to 0:0 failed 75/29201/-22, size 112-24 line 3054 [ 105.836393][ T4763] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.841159][ T5403] loop0: detected capacity change from 0 to 32768 [ 106.144582][ T5433] capability: warning: `syz.0.292' uses deprecated v2 capabilities in a way that may be insecure [ 106.340740][ T27] audit: type=1326 audit(106.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8755aba8 code=0x7ffc0000 [ 106.373822][ T27] audit: type=1326 audit(106.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8755aba8 code=0x7ffc0000 [ 106.390216][ T27] audit: type=1326 audit(106.320:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8755aba8 code=0x7ffc0000 [ 106.392263][ T5439] loop1: detected capacity change from 0 to 256 [ 106.422556][ T27] audit: type=1326 audit(106.320:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8755aba8 code=0x7ffc0000 [ 106.429987][ T27] audit: type=1326 audit(106.320:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8755aba8 code=0x7ffc0000 [ 106.440716][ T5439] FAT-fs (loop1): Unrecognized mount option "1Xaq)6hhS [ 106.440716][ T5439] y\/0 YRv~ԉ)ꄂWY^ƬQ[#f΢j current cno (= 3) [ 111.668249][ T5621] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 111.671235][ T5621] Remounting filesystem read-only [ 111.673238][ T4322] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 111.701532][ T5620] loop1: detected capacity change from 0 to 32768 [ 111.718754][ T5620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.350 (5620) [ 111.731080][ T5620] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.734406][ T5620] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 111.736676][ T5620] BTRFS info (device loop1): force clearing of disk cache [ 111.743920][ T5620] BTRFS info (device loop1): enabling auto defrag [ 111.745900][ T5620] BTRFS info (device loop1): max_inline at 0 [ 111.747632][ T5620] BTRFS info (device loop1): enabling ssd optimizations [ 111.753947][ T5620] BTRFS info (device loop1): using free space tree [ 111.838083][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'. [ 111.929876][ T5640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.932464][ T5640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.010501][ T5644] device syzkaller0 entered promiscuous mode [ 112.024324][ T5620] BTRFS info (device loop1): rebuilding free space tree [ 112.091919][ T4833] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 112.250602][ T5644] tipc: Started in network mode [ 112.252016][ T5644] tipc: Node identity 4648409e5b73, cluster identity 4711 [ 112.256446][ T5644] tipc: Enabled bearer , priority 0 [ 112.261021][ T5642] tipc: Resetting bearer [ 112.315531][ T5642] tipc: Disabling bearer [ 112.323337][ T5616] loop4: detected capacity change from 0 to 32768 [ 112.332012][ T5616] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 112.570795][ T5653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.573342][ T5653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.620492][ T4313] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.744159][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 112.786041][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.788899][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.836175][ T4306] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 112.969175][ T5664] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 112.978074][ T4530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 13 /dev/loop1 scanned by udevd (4530) [ 112.996069][ T5664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.174781][ T5664] bond1: (slave vlan2): making interface the new active one [ 113.192566][ T5664] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 113.211936][ T5675] binder: 5674:5675 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 113.215677][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 113.478378][ T5691] loop2: detected capacity change from 0 to 2048 [ 113.542423][ T5695] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.786194][ T4326] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 114.236943][ T5691] overlayfs: missing 'lowerdir' [ 114.290562][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 114.293795][ T4888] udevd[4888]: symlink '../../loop0' '/dev/disk/by-diskseq/206.tmp-b7:0' failed: Read-only file system [ 114.315792][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.318849][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.337026][ T4306] udevd[4306]: symlink '../../loop4' '/dev/disk/by-diskseq/218.tmp-b7:4' failed: Read-only file system [ 114.348193][ T4530] udevd[4530]: symlink '../../loop1' '/dev/disk/by-diskseq/216.tmp-b7:1' failed: Read-only file system [ 114.393403][ T5695] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 114.397040][ T5695] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 114.402046][ T5695] Remounting filesystem read-only [ 114.407314][ T4323] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 114.416226][ T4306] udevd[4306]: symlink '../../loop4' '/dev/disk/by-diskseq/218.tmp-b7:4' failed: Read-only file system [ 114.438501][ T4516] udevd[4516]: symlink '../../loop2' '/dev/disk/by-diskseq/215.tmp-b7:2' failed: Read-only file system [ 114.457901][ T5709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.460474][ T5709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.467944][ T4516] udevd[4516]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system [ 114.485388][ T4530] udevd[4530]: symlink '../../loop1' '/dev/disk/by-diskseq/216.tmp-b7:1' failed: Read-only file system [ 114.493091][ T4888] udevd[4888]: symlink '../../loop3' '/dev/disk/by-diskseq/217.tmp-b7:3' failed: Read-only file system [ 114.560186][ T5716] binder: 5715:5716 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 114.562229][ T4306] udevd[4306]: symlink '../../loop4' '/dev/disk/by-diskseq/219.tmp-b7:4' failed: Read-only file system [ 114.607850][ T4530] udevd[4530]: symlink '../../loop1' '/dev/disk/by-diskseq/220.tmp-b7:1' failed: Read-only file system [ 114.681270][ T5724] loop4: detected capacity change from 0 to 1024 [ 114.689503][ T5724] hfsplus: unable to parse mount options [ 114.722436][ T5726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.384'. [ 114.742003][ T4306] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.098248][ T5746] loop3: detected capacity change from 0 to 2048 [ 115.108781][ T5742] device gretap0 entered promiscuous mode [ 115.141206][ T5750] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.171270][ T5746] overlayfs: missing 'lowerdir' [ 115.222902][ T5750] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 115.229199][ T5750] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 115.243738][ T5750] Remounting filesystem read-only [ 115.245628][ T4322] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 116.513389][ T5784] loop2: detected capacity change from 0 to 2048 [ 116.539081][ T5786] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.557891][ T5784] overlayfs: missing 'workdir' [ 116.656462][ T5786] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 116.660431][ T5786] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 116.670710][ T5786] Remounting filesystem read-only [ 116.674635][ T4323] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 116.697661][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 116.702486][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.704736][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.751955][ T5792] device syzkaller0 entered promiscuous mode [ 117.161727][ T5816] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 117.196320][ T5816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.250576][ T5819] device geneve2 entered promiscuous mode [ 117.325717][ T5808] ptrace attach of "./syz-executor exec"[4312] was attempted by " [ 117.618727][ T5837] device syzkaller0 entered promiscuous mode [ 117.876981][ T5847] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 117.892514][ T5847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.077714][ T5855] device geneve2 entered promiscuous mode [ 118.271790][ T5864] FAULT_INJECTION: forcing a failure. [ 118.271790][ T5864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.281415][ T5864] CPU: 1 PID: 5864 Comm: syz.2.438 Not tainted 6.1.144-syzkaller #0 [ 118.283674][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.286387][ T5864] Call trace: [ 118.287298][ T5864] dump_backtrace+0x1c8/0x1f4 [ 118.288572][ T5864] show_stack+0x2c/0x3c [ 118.289642][ T5864] __dump_stack+0x30/0x40 [ 118.290806][ T5864] dump_stack_lvl+0xf8/0x160 [ 118.292038][ T5864] dump_stack+0x1c/0x5c [ 118.293166][ T5864] should_fail_ex+0x3c4/0x520 [ 118.294487][ T5864] should_fail+0x14/0x24 [ 118.295728][ T5864] should_fail_usercopy+0x20/0x30 [ 118.297091][ T5864] simple_read_from_buffer+0xcc/0x240 [ 118.298558][ T5864] proc_fail_nth_read+0x194/0x230 [ 118.299928][ T5864] vfs_read+0x288/0x7c4 [ 118.301072][ T5864] ksys_read+0x120/0x210 [ 118.302232][ T5864] __arm64_sys_read+0x7c/0x90 [ 118.303544][ T5864] invoke_syscall+0x98/0x2bc [ 118.304773][ T5864] el0_svc_common+0x138/0x258 [ 118.306083][ T5864] do_el0_svc+0x58/0x13c [ 118.307302][ T5864] el0_svc+0x58/0x138 [ 118.308398][ T5864] el0t_64_sync_handler+0x84/0xf0 [ 118.309834][ T5864] el0t_64_sync+0x18c/0x190 [ 118.621545][ T5882] device geneve2 entered promiscuous mode [ 119.183455][ T5921] binder: BINDER_SET_CONTEXT_MGR already set [ 119.185325][ T5921] binder: 5920:5921 ioctl 4018620d 20000040 returned -16 [ 119.188120][ T5921] binder: 5920:5921 got transaction to invalid handle, 1 [ 119.190273][ T5921] binder: 5921:5920 cannot find target node [ 119.192024][ T5921] binder: 5920:5921 transaction async to 0:0 failed 88/29201/-22, size 112-24 line 3054 [ 119.221998][ T4770] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.329332][ T4306] udevd[4306]: symlink '../../loop3' '/dev/disk/by-diskseq/226.tmp-b7:3' failed: Read-only file system [ 119.371716][ T4306] udevd[4306]: symlink '../../loop0' '/dev/disk/by-diskseq/206.tmp-b7:0' failed: Read-only file system [ 119.384917][ T5932] loop0: detected capacity change from 0 to 16 [ 119.431043][ T4530] udevd[4530]: symlink '../../loop1' '/dev/disk/by-diskseq/220.tmp-b7:1' failed: Read-only file system [ 119.440458][ T4306] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.519840][ T4530] udevd[4530]: symlink '../../loop1' '/dev/disk/by-diskseq/220.tmp-b7:1' failed: Read-only file system [ 119.621640][ T4530] udevd[4530]: symlink '../../loop3' '/dev/disk/by-diskseq/226.tmp-b7:3' failed: Read-only file system [ 119.778081][ T4530] udevd[4530]: symlink '../../loop1' '/dev/disk/by-diskseq/220.tmp-b7:1' failed: Read-only file system [ 119.918106][ T4530] udevd[4530]: symlink '../../loop3' '/dev/disk/by-diskseq/226.tmp-b7:3' failed: Read-only file system [ 119.969818][ T5951] loop3: detected capacity change from 0 to 1024 [ 119.972582][ T5951] hfsplus: unable to parse mount options [ 119.987343][ T4306] udevd[4306]: symlink '../../loop0' '/dev/disk/by-diskseq/229.tmp-b7:0' failed: Read-only file system [ 119.991015][ T5953] binder: BINDER_SET_CONTEXT_MGR already set [ 119.999250][ T5953] binder: 5952:5953 ioctl 4018620d 20000040 returned -16 [ 120.002167][ T5953] binder: 5952:5953 got transaction to invalid handle, 1 [ 120.004156][ T5953] binder: 5953:5952 cannot find target node [ 120.009406][ T5953] binder: 5952:5953 transaction async to 0:0 failed 90/29201/-22, size 112-24 line 3054 [ 120.013480][ T4763] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.059284][ T4530] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.088032][ T5957] loop2: detected capacity change from 0 to 256 [ 120.094313][ T5955] loop0: detected capacity change from 0 to 2048 [ 120.097845][ T4306] udevd[4306]: symlink '../../loop0' '/dev/disk/by-diskseq/229.tmp-b7:0' failed: Read-only file system [ 120.124741][ T5959] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.127916][ T4516] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.142081][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.161080][ T4888] udevd[4888]: symlink '../../loop1' '/dev/disk/by-diskseq/220.tmp-b7:1' failed: Read-only file system [ 120.162343][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.164713][ T5955] overlayfs: missing 'lowerdir' [ 120.232868][ T5959] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 120.237211][ T5959] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 120.250649][ T5959] Remounting filesystem read-only [ 120.253973][ T4312] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 120.300315][ T4326] Bluetooth: hci2: link tx timeout [ 120.302216][ T4326] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.417992][ T5973] loop3: detected capacity change from 0 to 16 [ 120.460223][ T4306] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.622726][ T5985] binder: BINDER_SET_CONTEXT_MGR already set [ 120.624763][ T5985] binder: 5984:5985 ioctl 4018620d 20000040 returned -16 [ 120.630768][ T5985] binder: 5984:5985 got transaction to invalid handle, 1 [ 120.632820][ T5985] binder: 5985:5984 cannot find target node [ 120.635424][ T5985] binder: 5984:5985 transaction async to 0:0 failed 92/29201/-22, size 112-24 line 3054 [ 120.639042][ T4763] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.741919][ T5989] device syzkaller0 entered promiscuous mode [ 120.919481][ T4319] Bluetooth: hci4: link tx timeout [ 120.921502][ T4319] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.182786][ T6005] loop2: detected capacity change from 0 to 16 [ 121.329789][ T5996] loop3: detected capacity change from 0 to 32768 [ 121.352715][ T6010] binder: 6009:6010 ioctl c0306201 0 returned -14 [ 121.387377][ T6010] binder: 6009:6010 got transaction to invalid handle, 1 [ 121.389633][ T6010] binder: 6010:6009 cannot find target node [ 121.455354][ T5996] XFS (loop3): Mounting V5 Filesystem [ 121.534753][ T5996] XFS (loop3): Ending clean mount [ 121.563527][ T5996] XFS (loop3): Quotacheck needed: Please wait. [ 121.600021][ T6028] netlink: 'syz.2.504': attribute type 5 has an invalid length. [ 121.602345][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 121.619956][ T5996] XFS (loop3): Quotacheck: Done. [ 121.621632][ T4326] Bluetooth: hci2: link tx timeout [ 121.623155][ T4326] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.693265][ T5996] netlink: 52 bytes leftover after parsing attributes in process `syz.3.493'. [ 121.696409][ T5996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.493'. [ 121.697165][ T6032] device syzkaller0 entered promiscuous mode [ 121.743114][ T6032] tipc: Enabled bearer , priority 0 [ 121.781783][ T6031] tipc: Resetting bearer [ 121.849072][ T6044] loop0: detected capacity change from 0 to 16 [ 121.855609][ T6031] tipc: Disabling bearer [ 122.018101][ T6052] binder: 6051:6052 ioctl c0306201 0 returned -14 [ 122.038038][ T6052] binder: 6051:6052 got transaction to invalid handle, 1 [ 122.116943][ T4322] XFS (loop3): Unmounting Filesystem [ 122.301010][ T4326] Bluetooth: hci1: link tx timeout [ 122.303004][ T4326] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.661842][ T6089] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 122.690434][ T6089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.768986][ T4326] Bluetooth: hci2: link tx timeout [ 122.771331][ T4326] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.871303][ T6103] device geneve2 entered promiscuous mode [ 122.923034][ T6104] loop3: detected capacity change from 0 to 2048 [ 122.978725][ T6111] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.991007][ T6104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.997607][ T6104] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.072068][ T6111] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 123.077624][ T6111] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 123.089863][ T6111] Remounting filesystem read-only [ 123.092062][ T4322] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 123.196626][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 123.350819][ T6129] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 123.427976][ T6129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.486646][ T6108] loop4: detected capacity change from 0 to 32768 [ 123.540525][ T4306] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.578972][ T6142] loop1: detected capacity change from 0 to 2048 [ 123.613746][ T6145] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.636330][ T6142] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.641966][ T6142] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.712118][ T6145] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 123.720406][ T6145] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 123.734340][ T6145] Remounting filesystem read-only [ 123.749773][ T4313] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 123.846603][ T4326] Bluetooth: hci2: link tx timeout [ 123.848055][ T4326] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.938220][ T6156] loop1: detected capacity change from 0 to 8192 [ 123.987602][ T6156] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.991335][ T6156] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 124.006959][ T6156] REISERFS (device loop1): using ordered data mode [ 124.022602][ T6156] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.081023][ T6172] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 124.090181][ T6156] REISERFS (device loop1): checking transaction log (loop1) [ 124.111518][ T6172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.134396][ T6156] REISERFS (device loop1): Using r5 hash to sort names [ 124.137854][ T6156] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 124.159042][ T6156] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 124.303771][ T6156] 9pnet: Unknown protocol version 9p20\++} [ 124.311115][ T6156] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 124.326448][ T6156] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 124.333349][ T6156] overlayfs: upper fs needs to support d_type. [ 124.348701][ T4326] Bluetooth: hci1: command 0x0406 tx timeout [ 124.351820][ T6156] overlayfs: upper fs does not support tmpfile. [ 124.360905][ T6178] loop0: detected capacity change from 0 to 2048 [ 124.362942][ T6156] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 124.380137][ T6156] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.403172][ T6156] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 124.409397][ T6156] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 124.425391][ T6156] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 124.430270][ T6156] overlayfs: failed to set xattr on upper [ 124.431844][ T6156] overlayfs: ...falling back to index=off,metacopy=off. [ 124.440869][ T6183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.444889][ T6181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 124.454551][ T4306] udevd[4306]: symlink '../../loop1' '/dev/disk/by-diskseq/249.tmp-b7:1' failed: Read-only file system [ 124.458316][ T4306] udevd[4306]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 124.490667][ T6178] overlayfs: upper fs does not support tmpfile. [ 124.492656][ T6178] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.513797][ T6178] overlayfs: failed to set xattr on upper [ 124.515346][ T6178] overlayfs: ...falling back to index=off,metacopy=off. [ 124.526540][ T4306] udevd[4306]: symlink '../../loop1' '/dev/disk/by-uuid/12312308-1233-1233-1231-123413412412.tmp-b7:1' failed: Read-only file system [ 124.556269][ T4313] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 124.601089][ T4516] udevd[4516]: symlink '../../loop4' '/dev/disk/by-diskseq/248.tmp-b7:4' failed: Read-only file system [ 124.629788][ T6183] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 124.633288][ T6183] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 124.639874][ T6183] Remounting filesystem read-only [ 124.660458][ T4312] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 124.663124][ T4312] NILFS error (device loop0): nilfs_readdir: bad page in #18 [ 124.689750][ T4312] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 124.790816][ T4319] Bluetooth: hci2: link tx timeout [ 124.792325][ T4319] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.810461][ T6190] loop4: detected capacity change from 0 to 256 [ 124.869412][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 124.889382][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:0' failed: Read-only file system [ 124.893523][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 124.966965][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 125.040954][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 125.072697][ T4516] udevd[4516]: symlink '../../loop4' '/dev/disk/by-diskseq/253.tmp-b7:4' failed: Read-only file system [ 125.132583][ T4530] udevd[4530]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 125.274403][ T6188] loop2: detected capacity change from 0 to 40427 [ 125.279846][ T6188] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 125.281803][ T6188] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.305010][ T6188] F2FS-fs (loop2): invalid crc value [ 125.345026][ T6188] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.420465][ T6188] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 125.422608][ T6188] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.620493][ T4323] syz-executor: attempt to access beyond end of device [ 125.620493][ T4323] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.772600][ T6224] loop1: detected capacity change from 0 to 2048 [ 125.821177][ T6227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.836701][ T6208] loop4: detected capacity change from 0 to 32768 [ 125.843145][ T6224] overlayfs: upper fs does not support tmpfile. [ 125.850097][ T6224] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.851991][ T6224] overlayfs: failed to set xattr on upper [ 125.859548][ T6224] overlayfs: ...falling back to index=off,metacopy=off. [ 125.934233][ T6227] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 125.937418][ T6227] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 125.947740][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.949498][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.953011][ T4319] Bluetooth: hci2: link tx timeout [ 125.953996][ T6227] Remounting filesystem read-only [ 125.954553][ T4319] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.006661][ T6237] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 126.020631][ T6237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.041153][ T4313] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 126.059104][ T4313] NILFS error (device loop1): nilfs_readdir: bad page in #18 [ 126.100021][ T4313] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 126.175387][ T6244] tipc: Enabled bearer , priority 0 [ 126.195460][ T6243] tipc: Disabling bearer [ 126.536288][ T6260] loop3: detected capacity change from 0 to 2048 [ 126.553396][ T4326] Bluetooth: hci4: link tx timeout [ 126.554963][ T4326] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.581101][ T6267] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.628217][ T6260] overlayfs: upper fs does not support tmpfile. [ 126.636986][ T6260] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 126.646810][ T6260] overlayfs: failed to set xattr on upper [ 126.664607][ T6260] overlayfs: ...falling back to index=off,metacopy=off. [ 126.732378][ T6270] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 126.756302][ T6267] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 126.759624][ T6267] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 126.762688][ T6267] Remounting filesystem read-only [ 126.782095][ T4322] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 126.797037][ T4322] NILFS error (device loop3): nilfs_readdir: bad page in #18 [ 126.809278][ T4322] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 126.835486][ T6270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.861511][ T6262] loop4: detected capacity change from 0 to 32768 [ 126.928545][ T6262] JBD2: Ignoring recovery information on journal [ 127.071543][ T6279] tipc: Started in network mode [ 127.073037][ T6279] tipc: Node identity c64381846604, cluster identity 4711 [ 127.076199][ T6279] tipc: Enabled bearer , priority 0 [ 127.078037][ T6262] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 127.088851][ T6278] tipc: Disabling bearer [ 127.110878][ T6282] [ 127.111534][ T6282] ====================================================== [ 127.113487][ T6282] WARNING: possible circular locking dependency detected [ 127.115374][ T6282] 6.1.144-syzkaller #0 Not tainted [ 127.116780][ T6282] ------------------------------------------------------ [ 127.118719][ T6282] syz.4.589/6282 is trying to acquire lock: [ 127.120357][ T6282] ffff0000e216bf60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb4/0x2d8 [ 127.123289][ T6282] [ 127.123289][ T6282] but task is already holding lock: [ 127.125323][ T6282] ffff0000e216bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2d8 [ 127.128305][ T6282] [ 127.128305][ T6282] which lock already depends on the new lock. [ 127.128305][ T6282] [ 127.131184][ T6282] [ 127.131184][ T6282] the existing dependency chain (in reverse order) is: [ 127.133896][ T6282] [ 127.133896][ T6282] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 127.136143][ T6282] down_read+0x64/0x304 [ 127.137543][ T6282] ocfs2_init_acl+0x258/0x5f0 [ 127.138971][ T6282] ocfs2_mknod+0x1168/0x1f18 [ 127.140431][ T6282] ocfs2_create+0x19c/0x4f0 [ 127.141808][ T6282] path_openat+0x112c/0x2680 [ 127.143181][ T6282] do_filp_open+0x174/0x344 [ 127.144533][ T6282] do_sys_openat2+0x128/0x3d8 [ 127.145912][ T6282] __arm64_sys_openat+0x120/0x154 [ 127.147438][ T6282] invoke_syscall+0x98/0x2bc [ 127.148819][ T6282] el0_svc_common+0x138/0x258 [ 127.150225][ T6282] do_el0_svc+0x58/0x13c [ 127.151561][ T6282] el0_svc+0x58/0x138 [ 127.152777][ T6282] el0t_64_sync_handler+0x84/0xf0 [ 127.154292][ T6282] el0t_64_sync+0x18c/0x190 [ 127.155689][ T6282] [ 127.155689][ T6282] -> #3 (jbd2_handle){++++}-{0:0}: [ 127.157748][ T6282] start_this_handle+0xfe0/0x122c [ 127.159316][ T6282] jbd2__journal_start+0x288/0x51c [ 127.160942][ T6282] jbd2_journal_start+0x3c/0x4c [ 127.162388][ T6282] ocfs2_start_trans+0x380/0x6c4 [ 127.163877][ T6282] ocfs2_mknod+0xc7c/0x1f18 [ 127.165257][ T6282] ocfs2_create+0x19c/0x4f0 [ 127.166613][ T6282] path_openat+0x112c/0x2680 [ 127.168049][ T6282] do_filp_open+0x174/0x344 [ 127.169428][ T6282] do_sys_openat2+0x128/0x3d8 [ 127.170809][ T6282] __arm64_sys_openat+0x120/0x154 [ 127.172320][ T6282] invoke_syscall+0x98/0x2bc [ 127.173755][ T6282] el0_svc_common+0x138/0x258 [ 127.175221][ T6282] do_el0_svc+0x58/0x13c [ 127.176561][ T6282] el0_svc+0x58/0x138 [ 127.177778][ T6282] el0t_64_sync_handler+0x84/0xf0 [ 127.179412][ T6282] el0t_64_sync+0x18c/0x190 [ 127.180837][ T6282] [ 127.180837][ T6282] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 127.183146][ T6282] down_read+0x64/0x304 [ 127.184403][ T6282] ocfs2_start_trans+0x374/0x6c4 [ 127.185870][ T6282] ocfs2_mknod+0xc7c/0x1f18 [ 127.187250][ T6282] ocfs2_create+0x19c/0x4f0 [ 127.188641][ T6282] path_openat+0x112c/0x2680 [ 127.190015][ T6282] do_filp_open+0x174/0x344 [ 127.191434][ T6282] do_sys_openat2+0x128/0x3d8 [ 127.192923][ T6282] __arm64_sys_openat+0x120/0x154 [ 127.194414][ T6282] invoke_syscall+0x98/0x2bc [ 127.195795][ T6282] el0_svc_common+0x138/0x258 [ 127.197295][ T6282] do_el0_svc+0x58/0x13c [ 127.198654][ T6282] el0_svc+0x58/0x138 [ 127.199939][ T6282] el0t_64_sync_handler+0x84/0xf0 [ 127.201422][ T6282] el0t_64_sync+0x18c/0x190 [ 127.202834][ T6282] [ 127.202834][ T6282] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 127.204912][ T6282] ocfs2_start_trans+0x20c/0x6c4 [ 127.206468][ T6282] ocfs2_write_begin_nolock+0x1784/0x3ab4 [ 127.208157][ T6282] ocfs2_write_begin+0x1b4/0x30c [ 127.209736][ T6282] generic_perform_write+0x230/0x4b0 [ 127.211342][ T6282] __generic_file_write_iter+0x168/0x37c [ 127.212958][ T6282] ocfs2_file_write_iter+0x1300/0x1bf4 [ 127.214644][ T6282] vfs_write+0x5ac/0x7c4 [ 127.215898][ T6282] ksys_write+0x120/0x210 [ 127.217217][ T6282] __arm64_sys_write+0x7c/0x90 [ 127.218770][ T6282] invoke_syscall+0x98/0x2bc [ 127.220209][ T6282] el0_svc_common+0x138/0x258 [ 127.221652][ T6282] do_el0_svc+0x58/0x13c [ 127.223002][ T6282] el0_svc+0x58/0x138 [ 127.224274][ T6282] el0t_64_sync_handler+0x84/0xf0 [ 127.225751][ T6282] el0t_64_sync+0x18c/0x190 [ 127.227141][ T6282] [ 127.227141][ T6282] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 127.229312][ T6282] __lock_acquire+0x293c/0x6544 [ 127.230800][ T6282] lock_acquire+0x20c/0x644 [ 127.232244][ T6282] down_write+0x5c/0x88 [ 127.233556][ T6282] ocfs2_try_remove_refcount_tree+0xb4/0x2d8 [ 127.235342][ T6282] ocfs2_truncate_file+0xce8/0x149c [ 127.236920][ T6282] ocfs2_setattr+0x1234/0x18d4 [ 127.238439][ T6282] notify_change+0xb0c/0xdcc [ 127.239926][ T6282] do_truncate+0x178/0x1f0 [ 127.241333][ T6282] vfs_truncate+0x23c/0x2b0 [ 127.242735][ T6282] do_sys_truncate+0xe8/0x1b0 [ 127.244122][ T6282] __arm64_sys_truncate+0x5c/0x70 [ 127.245666][ T6282] invoke_syscall+0x98/0x2bc [ 127.247159][ T6282] el0_svc_common+0x138/0x258 [ 127.248649][ T6282] do_el0_svc+0x58/0x13c [ 127.249976][ T6282] el0_svc+0x58/0x138 [ 127.251158][ T6282] el0t_64_sync_handler+0x84/0xf0 [ 127.252728][ T6282] el0t_64_sync+0x18c/0x190 [ 127.254111][ T6282] [ 127.254111][ T6282] other info that might help us debug this: [ 127.254111][ T6282] [ 127.256910][ T6282] Chain exists of: [ 127.256910][ T6282] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 127.256910][ T6282] [ 127.260582][ T6282] Possible unsafe locking scenario: [ 127.260582][ T6282] [ 127.262667][ T6282] CPU0 CPU1 [ 127.264128][ T6282] ---- ---- [ 127.265614][ T6282] lock(&oi->ip_xattr_sem); [ 127.266849][ T6282] lock(jbd2_handle); [ 127.268667][ T6282] lock(&oi->ip_xattr_sem); [ 127.270635][ T6282] lock(&oi->ip_alloc_sem); [ 127.271901][ T6282] [ 127.271901][ T6282] *** DEADLOCK *** [ 127.271901][ T6282] [ 127.274149][ T6282] 3 locks held by syz.4.589/6282: [ 127.275562][ T6282] #0: ffff0000db9b8460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 127.278146][ T6282] #1: ffff0000e216c2c8 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: do_truncate+0x164/0x1f0 [ 127.280934][ T6282] #2: ffff0000e216bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2d8 [ 127.283936][ T6282] [ 127.283936][ T6282] stack backtrace: [ 127.285600][ T6282] CPU: 1 PID: 6282 Comm: syz.4.589 Not tainted 6.1.144-syzkaller #0 [ 127.287826][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.290549][ T6282] Call trace: [ 127.291435][ T6282] dump_backtrace+0x1c8/0x1f4 [ 127.292694][ T6282] show_stack+0x2c/0x3c [ 127.293849][ T6282] __dump_stack+0x30/0x40 [ 127.295016][ T6282] dump_stack_lvl+0xf8/0x160 [ 127.296232][ T6282] dump_stack+0x1c/0x5c [ 127.297388][ T6282] print_circular_bug+0x148/0x1b0 [ 127.298797][ T6282] check_noncircular+0x240/0x2d4 [ 127.300131][ T6282] __lock_acquire+0x293c/0x6544 [ 127.301428][ T6282] lock_acquire+0x20c/0x644 [ 127.302657][ T6282] down_write+0x5c/0x88 [ 127.303760][ T6282] ocfs2_try_remove_refcount_tree+0xb4/0x2d8 [ 127.305399][ T6282] ocfs2_truncate_file+0xce8/0x149c [ 127.306921][ T6282] ocfs2_setattr+0x1234/0x18d4 [ 127.308213][ T6282] notify_change+0xb0c/0xdcc [ 127.309461][ T6282] do_truncate+0x178/0x1f0 [ 127.310759][ T6282] vfs_truncate+0x23c/0x2b0 [ 127.311987][ T6282] do_sys_truncate+0xe8/0x1b0 [ 127.313245][ T6282] __arm64_sys_truncate+0x5c/0x70 [ 127.314661][ T6282] invoke_syscall+0x98/0x2bc [ 127.315887][ T6282] el0_svc_common+0x138/0x258 [ 127.317147][ T6282] do_el0_svc+0x58/0x13c [ 127.318303][ T6282] el0_svc+0x58/0x138 [ 127.319438][ T6282] el0t_64_sync_handler+0x84/0xf0 [ 127.320775][ T6282] el0t_64_sync+0x18c/0x190 [ 127.322044][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.363512][ T4314] ocfs2: Unmounting device (7,4) on (node local)