last executing test programs: 21m31.412429467s ago: executing program 0 (id=57): r0 = io_uring_setup(0x21e9, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x383}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0xfd, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0xc0, &(0x7f0000000040)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600070000000000000000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x3ff, 0x5, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x64, 0x0, 0xc, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x6, 0x2}, @timestamp_addr={0x44, 0x24, 0x38, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x4}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000f39067696143650000000000000000", @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x2, 0xffffffffffffff34, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21m29.026017363s ago: executing program 0 (id=62): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000ffe00180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 21m27.312469212s ago: executing program 0 (id=66): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x200000000000000, 0x0, 0x8811}, 0x0) 21m26.154487712s ago: executing program 0 (id=69): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x124f400, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = getpid() r2 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000001000)=@ethtool_stats={0x11, 0x3, [0x1, 0x200, 0x200000000]}}) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) 21m23.109575888s ago: executing program 0 (id=80): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xf7, 0x4, 0x56}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3df13, 0x75a2b}, [@IFLA_LINKINFO={0x11, 0x12, 0x0, 0x1, @macsec={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x0, 0xa, 0xe}, @IFLA_MACSEC_SCB={0x0, 0xb, 0xdb}, @IFLA_MACSEC_SCI={0x0, 0x1, 0x7fff}, @IFLA_MACSEC_ENCRYPT={0x0, 0x7, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x0, 0xc, 0x1}, @IFLA_MACSEC_SCB={0x0, 0xb, 0x40}, @IFLA_MACSEC_SCB={0x0, 0xb, 0xb0}, @IFLA_MACSEC_ENCRYPT={0x0, 0x7, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c001}, 0x20040040) (async, rerun: 32) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="11000000", @ANYBLOB="c8"], 0x14) (async, rerun: 32) close_range(r0, r0, 0x0) (async, rerun: 32) unshare(0x62030100) (async) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x18}, 0x8890) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0xff, 0x0, 0xfffff038}]}, 0x10) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40000, 0x41) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000440)={0x1, @empty, 0x4e22, 0x0, 'none\x00', 0x20, 0x7, 0x5d}, 0x2c) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="c3aa00fe0700448cbd3f1c13000071000000001f000000000000000000008c7db005e18b"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe9}, 0x94) 21m18.671965328s ago: executing program 0 (id=92): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8003, &(0x7f0000000ac0)={[{@journal_async_commit}, {@oldalloc}, {@discard}, {@lazytime}, {@nojournal_checksum}]}, 0x0, 0x62c, &(0x7f00000000c0)="$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") 21m17.573717393s ago: executing program 32 (id=92): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8003, &(0x7f0000000ac0)={[{@journal_async_commit}, {@oldalloc}, {@discard}, {@lazytime}, {@nojournal_checksum}]}, 0x0, 0x62c, &(0x7f00000000c0)="$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") 18m20.665904478s ago: executing program 2 (id=530): r0 = syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x80a050, &(0x7f00000001c0)=ANY=[], 0x1, 0x9a, &(0x7f0000000000)="$eJzs18+tQXEQBeDz7nsvWNCAHtSgFbFkZ0UkKtKKEiRKsBOJ/ORyJf5UgO9LZiaTs53NbI7rfnpJWSXlyWy+mIym155uHgzDJ6iStJK0k/zf7cmunC5XkGz3y/Gt6uTnUJoEAAB4J1UG9fh9Tf6SdJqvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7nQMAAP//fCQwzw==") r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x400000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], 0x3, 0x1, 0x1, 0x1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000180)=0x2) sendfile(r0, r2, 0x0, 0x6) 18m19.793293957s ago: executing program 2 (id=536): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0xa, 0x4e1f, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000dfffff2800000034000000ff7f000000200000"], 0x18}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6100dd02ce941f0f33cc2285b798f453b2fdeb42d4d4410b67242c30875357347d5f6500fc010000000000000000000000000002fe", @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r2, &(0x7f0000000040)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00", 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00007bf000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00003b5000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000020b000/0x1000)=nil, &(0x7f00001a9000/0x2000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ada000/0x2000)=nil, &(0x7f00007d1000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x4) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_mount_image$xfs(&(0x7f0000009680), &(0x7f00000096c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x973a, &(0x7f0000009700)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x42, 0x17b) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000480)={0x8, 0x5, 0x2, 0x6}) sched_setscheduler(r1, 0x3, &(0x7f0000000180)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18m17.194053826s ago: executing program 2 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400000000000000000000fffd", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 18m15.254865092s ago: executing program 2 (id=545): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d48900000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000c34700000400"/240, @ANYRES16=r2, @ANYRES32=r4], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff0001000000000101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="9fcf6e667c57056b35f07723730c166d0ccb3f07bc43aa1b6ab995b68dcf7e820ea1d031ffa816700418eb043b1eede14be69d1578b4b4bb46d8e134ca838e62ba55f25cbcd90ff83e9a3de1fad54355de79a3f1ea7d9ac27f542a5c44bc87492ee0e97a8410310a6a151ed2848e674dc474d705d9e3c69a757bc3ac0cf5b7fe13b2ae95c3f257", @ANYRES32=0x0, @ANYRES16=r5], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x1, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) 18m11.973145453s ago: executing program 2 (id=552): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000540)={{0x80, 0xfd}, 'port0\x00', 0x72, 0x8, 0x1000, 0x8000008, 0x1000006, 0xb, 0xa, 0x0, 0x7cce8c743ee810df}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 18m8.196946143s ago: executing program 2 (id=563): socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x40000) recvmsg$kcm(r0, &(0x7f0000002c00)={&(0x7f0000000780)=@phonet, 0x80, 0x0, 0x0, &(0x7f0000002bc0)=""/4, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x20, 0x7, 0xe48, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x66, 0x0, 0x4, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0xa7, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@empty, 0x9}, {@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x6}, {@remote, 0xd5fa}, {@local, 0xffffffff}]}, @timestamp={0x44, 0x1c, 0xe4, 0x0, 0xa, [0x6, 0x800, 0x3, 0x5, 0x1, 0xe]}]}}}}}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bind$packet(r4, &(0x7f00000002c0)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newnexthop={0x58, 0x68, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2b}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP_TYPE={0x6}, @NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}]}, 0x58}}, 0x8000) 18m7.471110971s ago: executing program 33 (id=563): socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x40000) recvmsg$kcm(r0, &(0x7f0000002c00)={&(0x7f0000000780)=@phonet, 0x80, 0x0, 0x0, &(0x7f0000002bc0)=""/4, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x20, 0x7, 0xe48, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x66, 0x0, 0x4, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0xa7, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@empty, 0x9}, {@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x6}, {@remote, 0xd5fa}, {@local, 0xffffffff}]}, @timestamp={0x44, 0x1c, 0xe4, 0x0, 0xa, [0x6, 0x800, 0x3, 0x5, 0x1, 0xe]}]}}}}}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bind$packet(r4, &(0x7f00000002c0)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newnexthop={0x58, 0x68, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2b}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP_TYPE={0x6}, @NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}]}, 0x58}}, 0x8000) 15m48.207735975s ago: executing program 3 (id=875): listns(&(0x7f0000000680)={0x20, 0x0, 0x1, 0x4000000, 0x0, 0x3}, &(0x7f00000006c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x404, &(0x7f0000000340)={[{@resgid}, {@usrquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(0x0, 0x2fffffd) sendfile(r0, r0, 0x0, 0x7fffffff) arch_prctl$ARCH_SET_GS(0x1001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="83a7f8c85fa74fe15227b603685f20a5383da3c4c760f4fadb825083d85674bb8a3b562948c542749466e6ec62c2d7bba51c07c1e6f494992169e83f4a6e5558e6e6d5641b533a62ad9684a50d9a1db4afee8154f4fc8456d74dbcc533512bba04e0c1", 0x63}, {0x0}], 0x2, 0x0, 0xc8}}], 0x1, 0x10044840) fsmount(0xffffffffffffffff, 0x1, 0x3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000003000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900"], 0xc8}}, 0x0) 15m44.075770536s ago: executing program 3 (id=883): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000980)='./file0/file0\x00', 0x381948a, &(0x7f0000000780)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d64656661756c742c696f636861727365743d69736f383835392d392c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c757466383d312c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466383d302c636865636b3d7374726963742c757466383d302c73686f72746e616d653d6c6f7765722c726f6469722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c00de9556cf190dac51f5a953340d75699378457f182a0b46e19de3f7f0000c76e7b74a8fd5bbad1ab9b778ebcf575f4fe644"], 0x3e, 0x376, &(0x7f0000002040)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000009c0)=@newtaction={0x11c, 0x30, 0x216822a75a8bdd29, 0x70bd2c, 0x0, {}, [{0x108, 0x1, [@m_sample={0x104, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x80000000, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff801}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xf0000000, 0x2, 0x4, 0x1}}]}, {0x9f, 0x6, "59e40d269e828f42568878e6a2140604f62198dc786a802c70dfd6567257ff9d75a80261bc766c97e4f005de7ebaaadb1a97c4412cdbb4edf5e521e2c86320afd1e9b03cd57342f9f8fb277fdec6148b7d9c15ee6701792a249bdf4425d16b67c37de1021e32e1a4aef015cc0936441910c1c9bf81cc3de4820d5546807b9e7ed75b48936212757c987fba3a904e0f52665055c45b70fbbbc77f48"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x6ff7, 0x5dd8, 0xffffffffffffffff, 0x0, 0x8a46, 0x0, 0x9, 0x1}, &(0x7f00000000c0)={0x1000, 0x100000000, 0xa9, 0xbf9, 0x1, 0x8, 0xffffffffffff0001, 0x1}, &(0x7f0000000100)={0x10001, 0xa, 0xfffffffffffffffd, 0x8, 0x9, 0xd2, 0x2, 0x5cb}, &(0x7f0000000180)={r2, r3+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) r5 = syz_io_uring_setup(0x6af1, &(0x7f0000000400)={0x0, 0x595f, 0x2, 0xfffffff9, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x18, 0x0, @fd=r5, 0xf4, 0x0, 0x7ff, 0x1, 0x0, {0x0, r9}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./bus/../file0\x00', 0x280000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r10, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x6, 0x0, '\x00', @auto=[0x28, 0x37, 0x3f, 0x1e, 0x34, 0x38]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/37, 0x25}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/132, 0x84}, {&(0x7f0000000e00)=""/17, 0x11}, {&(0x7f0000000e40)=""/31, 0x1f}, {&(0x7f0000000e80)=""/24, 0x18}], 0x8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') open$dir(&(0x7f00000008c0)='./file0\x00', 0xa8202, 0x86) getdents64(r0, &(0x7f0000001f80)=""/88, 0x66) mkdirat(0xffffffffffffff9c, 0x0, 0x61c28c7771d1cf6b) chdir(&(0x7f0000000000)='./cgroup\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r10, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) move_mount(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', r0, &(0x7f0000000200)='./bus/../file0\x00', 0x22) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000f40)={0x73622a85, 0x110b, 0x2}) 15m39.409891356s ago: executing program 3 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x1, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffec0, 0x2, {{0x80, 0x2, 0x8, 0x8, 0x3, 0xafb8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x31c6d6e942e24b9a) 15m37.785317769s ago: executing program 3 (id=898): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) setregid(0xffffffffffffffff, r1) getpid() r2 = open(&(0x7f0000000000)='./file0/../file0\x00', 0x44002, 0x1e0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r3, r3) r4 = getegid() setgid(r4) move_mount(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x206) 15m37.361513384s ago: executing program 3 (id=900): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x446c3}) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x12, 0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x808, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) close(r0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x446c3}) (async) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x12, 0xffffffffffffffff, 0x0) (async) landlock_create_ruleset(&(0x7f00000001c0)={0x808, 0x2}, 0x18, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) (async) close(r0) (async) 15m35.973859824s ago: executing program 3 (id=904): r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0xfffd, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa00, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in6=@loopback, 0x6, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000029000000340000000400"], 0x18}, 0x48814) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15m34.780321059s ago: executing program 34 (id=904): r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0xfffd, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa00, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in6=@loopback, 0x6, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000029000000340000000400"], 0x18}, 0x48814) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 14m2.338110201s ago: executing program 4 (id=1031): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={"0000bd04", 0x0, 0x6, 0x2, 0xc0, 0x8, "3377f877c734c40400", "00000400", '\x00', "04ffffbf", ["c386aff708000040fb800072", "0080000000000004001000", "000000000000000000c40800", "0000000000000100"]}) 14m1.04811995s ago: executing program 4 (id=1033): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010004000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x42, 0x400, 0x70bd27, 0x25dfdbff, {0x12}, [@typed={0x4, 0x26}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) 14m0.661798628s ago: executing program 4 (id=1034): listns(&(0x7f0000000680)={0x20, 0x0, 0x1, 0x4000000, 0x0, 0x3}, &(0x7f00000006c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x404, &(0x7f0000000340)={[{@resgid}, {@usrquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(0x0, 0x2fffffd) sendfile(r0, r0, 0x0, 0x7fffffff) arch_prctl$ARCH_SET_GS(0x1001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="83a7f8c85fa74fe15227b603685f20a5383da3c4c760f4fadb825083d85674bb8a3b562948c542749466e6ec62c2d7bba51c07c1e6f494992169e83f4a6e5558e6e6d5641b533a62ad9684a50d9a1db4afee8154f4fc8456d74dbcc533512bba04e0c1", 0x63}, {0x0}], 0x2, 0x0, 0xc8}}], 0x1, 0x10044840) fsmount(0xffffffffffffffff, 0x1, 0x3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a00000000000000000000000080ff000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900"], 0xc8}}, 0x0) 13m56.745182525s ago: executing program 4 (id=1036): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)={[{@adinicb}, {@nostrict}, {@utf8}, {@uid}, {}, {@adinicb}, {}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@mode={'mode', 0x3d, 0x8}}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid={'gid', 0x3d, 0xee00}}, {@uid_forget}]}, 0x1, 0xc5b, &(0x7f0000001bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) close(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6c733d63703934392c747970653d98acdea62c706172743d3078303030303030303030303030303030392c706172743d3078303000003030303030303030303030392c00"], 0x1, 0x5f1, &(0x7f0000000680)="$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") write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 13m53.93396124s ago: executing program 4 (id=1038): futex_waitv(&(0x7f0000001500)=[{0x1, 0x0, 0x104}, {0x8000, 0x0, 0x2}], 0x2, 0x0, 0x0, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x50cdd9a4, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) accept4(r0, 0x0, 0x0, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x2000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8b, 0x42405}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xdd}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) 13m48.843033462s ago: executing program 4 (id=1041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0x240a, 0xfff, 0xa5, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @broadcast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000040000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 13m32.235914577s ago: executing program 35 (id=1041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0x240a, 0xfff, 0xa5, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @broadcast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000040000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 13m24.570855494s ago: executing program 1 (id=1052): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socket(0x11, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 13m23.310992237s ago: executing program 1 (id=1053): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@intr}, {@intr}, {@coherency_buffered}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@coherency_full}, {@localflocks}, {@cluster_stack}, {@commit={'commit', 0x3d, 0x60262b80}}]}, 0x1, 0x4435, &(0x7f0000004480)="$eJzs3c9PHG0dAPDvDGihvm+F1/fwmpi4iW+iUUOgJ5UmUkpLocWaqo3xsl1g26IL28BiPPTQ3pp4MvFgPDSaeOPUcPBo/RO8eKznJnrwYmLSiNndWWCG3UAJCy/N55PA7Dy/4Tvz8MxheNJM49HKRmllo1RZK9WXHmxcLv2yXttcrUZ6Ss66f3Iu9PrF9yNO79pmhMvipNy5duNH9y5H/HX57292dnZ2omkwuprY9/k//36ytP/YkRbqNNvt3tpJ+VlEfHxgXE0DEfHTP0ckEXE1S5vOjsMRcSnaefee/Pp+6YRG8/J19Ur57cLz7clP57debPf+2ZOI39e+/O2Hq//82sDkP755Qt0DAAAAAAAAAAAAAAAAAHDOzd6985Mfjk/EqyQGt5KD7+vOZsde78funJiv9v+HBQAAAAAAAAAAAAAAAAAAgM+ovff/S8lHXd7/n8mOUz3q73y//2Okf+Z+cGfm+vhEtv97ciD/O1nSv64OxGhh3/dnxf3fX+3ts97Rff/3g/0cV2d8nX5HIknHcudpOjYW8cds4/dPkotprb7R+NaD+uba8okN49zKx7+9e38uOtmG/t3iH132/58utN///f+/dOBqap7fP+wS+1wfh3SO5OM/0LPcn54lR4r/tUK904g/x5eP/2ArbXh/gan2BNCM/28GD4//TKH9fsX/UkSUkuZYS7kZoLmGaab3Wq+Ql49/e1LcP3Vm03/P+/+/hfhfL7R/VvP/0+IfIrrKx//zrbShXIm9+380Pfz+v1Fo/yzi3xz/05NbYr7X8vG/0E4czBVp/SaPOv/PFtrvQ/w7/zCuPc5LSe4K2Era4+/1/+rIy8d/6ED+3vNfeqT1381C/dN6/uv023n+60z/30jaz390l4//cM9yR73/5wr1+j3/T7XWfxxXPv4XW2n5tfNI6/tR4z9faL9f8W+tSoY68W9NAs1HgvjfhXb6H6z/jiQf/y+0E9P9JZ62vrfWf8nh6/9bhfbPbP2f9rfX90U+/h/0LNeM/9+O8Pf/dqFe/+MfMW6tf2z5+H/Ys1zr/h86PP4Lex//EqcQ/6/3s3EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAc2A6O45Eko7lztN0bCziWnb+SVxMFivL5cVafekXGxEzWXopPkoe1uqLlVp5Za2+XC1XarX6UsT1LP/jGEo2avVGebXy+MZuW8PJo2plvbFYrTQiYjZL/0p82GlrcaWxWnkcETd3876Y1tcfP6qslZdX1r83Pj4+HnO7YxhNqr9qVNca7d7buRHzu3VHkn2Da2Xf2h3LB8nP65vra5VaLr1Zp1ZfqtT21VnI8n4bo0ljfXNtqdKolmv1h53+ztJUdpyZu/vju7cnDuTfT9rH6dMdFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADv6NXkd38XEYPtszQiSkn2Icm+cl6+rl4pv114vj356fzWi+033coAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi79ozQQRHEAfjMWWnoMq2W3s11RRAtXBE+gx/AwehQv4R0sUqRNEQLJLIT9A9sk1fc1D+bHzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWO7xrXt/rZuIFFfby4jfz7//4/y51O+76fsXZ5iR03l66e4f6qb8exrlt+Vo1eZ9ull/fcRE7f0M9mS4TwfjPkNz+zY3X9/3OlKuIqIt+U3KuaqWvQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI4dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBfAQAA//9wByjD") 13m22.941843233s ago: executing program 1 (id=1054): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xea801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x80141) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000700)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0}, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$inet6(0xa, 0x3, 0x5) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37021c00", 0x42, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r2, r7, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb1}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10d5fb, 0x1, 0x1, 0x31b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x20, 0x1, 0x283, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x8000, 0x1, 0x900c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x80, 0x2, 0x40021a, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0xc0ffff, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 13m21.443965491s ago: executing program 1 (id=1055): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f00000001c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@utf8}, {@fat=@errors_remount}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x3e, 0x370, &(0x7f0000000400)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb0024000) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}}, 0x20008000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 13m19.174977568s ago: executing program 1 (id=1056): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 13m10.740612223s ago: executing program 1 (id=1057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040faff00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000010180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 13m10.305225462s ago: executing program 36 (id=1057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040faff00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000010180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 6m3.7984359s ago: executing program 7 (id=1530): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000079302000000000021d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007a03000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 6m3.402042328s ago: executing program 7 (id=1532): r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc010000000000003fff000000000000000000001300000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001200330002", @ANYRES8=r0], 0xa0}}, 0x4048080) 6m2.683747158s ago: executing program 7 (id=1533): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x14a1c, &(0x7f0000000080)=ANY=[], 0xa, 0x388, &(0x7f00000007c0)="$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") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000000}) truncate(&(0x7f0000000940)='./file1\x00', 0x519a) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)={[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='&\x00', &(0x7f0000000140)='vfat\x00']}, &(0x7f0000000340)={[&(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='#-,\x00', &(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)=']\x00']}) 6m1.67630668s ago: executing program 7 (id=1534): mount$fuse(0x0, 0x0, 0x0, 0x120c001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x3, &(0x7f0000000000)={0x16, "90f5000000f3c9f1bd0d00"}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x3}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x9}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$eJzs28tvG8UfAPDvrpP219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSoUIbVwMlp7N7Ed23nUiaH+fKRtZ3bXnfl6drwzO90A+tZI9kcSsTcifo2IoVq28YSR2l+3lxam/lpamEqiUnnjj6R63q2lhani1OJze4rMQET6SRKHW5Q7d+XqhclyeeZynh+bv/ju2NyVq8+cvzh5bubczKWJ06dPnhh/7tTEs12JM4vr1qEPZo8cfOWt669Nnbn+9o9fJ0X8TXF0yUing49XKl0urrf21aWTgR5WhA0p1bppDFb7/1CUYqXxhuLlj3taOWBLVSqVyn3tDy9WgLtYEr2uAdAbxY0+m//mW3Hr34bRR+/dfKE2Acpiv51vtSMDkebnDDbNb7tpJCLOLP79RbbFRp9DpFtUKQDgrvZtNv55umH8l48/0qh/LvT/fA1lOCLuiYj9EXEqIg5ExL0R1XPvj4gHWhWStC+/eZFk9fgnvbHp4NYhG/89n69tNY7/lgdXw6U8t68a/2By9nx55nj+nRyLwZ1ZfrxDGd+99Mtn7Y7Vj/+yLSu/GAvm9bgxsLPxM9OT85N3EnO9mx9FHBpoFX+yvBKQNd/BiDi0yTLOP/nVkSJ9uNR4bO34O+jCOlPly4gnau2/GE3xF5LO65Nj/4vyzPGx4qpY7aefr73ervw7ir8Lsvbf3fL6X45/OKlfr53beBnXfvu07Zxms9f/juTNhn3vT87PXx6P2JG8Wqt0/f6JpvMmVs7P4j92tHX/3x8r38Th7PpPIx6MiIci4uG87o9ExKMRcbRD/D+8+Ng7HeP/s138Ozv8q92RxT/d0P7FD1+79l9J7IjmPa0TpQvff9NQ6HBT/Gu2/8lq6li+Zz2/f+up1+auZgAAAPjvySb7eyNJR5fTaTo6Wvs//Adid1qenZt/6uzse5ema+8IDMdgWjzpGqp7HjqeT+uL/ERT/kT+3Pjz0q5qfnRqtjzd6+Chz+1p0/8zv5d6XTtgy3lfC/qX/g99q/49AKDPuP9D/2rR/3f1oh7A9mt1//+wB/UAtl9T/7fsB33E/B/6l/4P/Uv/h740tyvWfkleQmJVItJ/RTUktijR618mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vgnAAD//wW66qg=") 5m59.202806313s ago: executing program 7 (id=1536): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='unhide,iocharset=cp949\x00\x00\x00\x00=forget,session=00000000000000004072,noadinicb,anchor=00000000000000000000,uidOforget,\x00'], 0xfe, 0xc24, &(0x7f0000001480)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12e1013, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) brk(0xdc0000000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1}) rename(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000480)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03"], 0x68}}, 0x0) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r2, &(0x7f0000000100)={0x78}, 0xfeb1) write$UHID_INPUT(r2, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0xffffff05) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x6c489, &(0x7f00000004c0)=ANY=[@ANYRES32=r1]) 5m57.214338047s ago: executing program 7 (id=1537): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r4 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$binder(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000680), 0x8001, &(0x7f0000000700)={[{@stats}]}) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (rerun: 32) sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x7ff) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r7, 0x0, 0x2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1322, 0x30797}, [@IFLA_ADDRESS={0xa}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x100000, 0x8) (async, rerun: 64) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, 0x0) (async, rerun: 64) write$binfmt_register(r4, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000002) (async, rerun: 32) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) 5m57.032484576s ago: executing program 37 (id=1537): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r4 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$binder(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000680), 0x8001, &(0x7f0000000700)={[{@stats}]}) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (rerun: 32) sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x7ff) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r7, 0x0, 0x2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1322, 0x30797}, [@IFLA_ADDRESS={0xa}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x100000, 0x8) (async, rerun: 64) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, 0x0) (async, rerun: 64) write$binfmt_register(r4, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000002) (async, rerun: 32) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) 30.091858969s ago: executing program 8 (id=1792): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x7}, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 25.421384015s ago: executing program 8 (id=1793): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28010000170af10300000000000000000200000008000740000000000c0003800800024068f822b80900020073797a30000000000800074000000002090002"], 0x128}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000009185060008001b000000000044002b80080003"], 0x6c}, 0x1, 0x0, 0x0, 0x604c840}, 0x4000804) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000009185060008001b000000000044002b80080003"], 0x6c}, 0x1, 0x0, 0x0, 0x604c840}, 0x4000804) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 20.8736822s ago: executing program 8 (id=1794): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 14.73809908s ago: executing program 8 (id=1795): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x140003}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) 2.760359088s ago: executing program 8 (id=1796): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f03feff000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 0s ago: executing program 8 (id=1797): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) kernel console output (not intermixed with test programs): tory bread(block 72) failed [ 1125.218206][T14064] FAT-fs (loop8): Directory bread(block 73) failed [ 1125.735850][T13755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1125.779375][T13755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1125.794322][T13755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1125.825538][T13755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1125.866067][T13755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1126.284250][T13755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1126.412492][T13755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1126.492736][T13755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1127.074412][ T5273] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1127.236883][T13720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.012014][T13798] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1128.090243][T13798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1128.165400][T13798] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1128.221217][T13798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.380123][T13798] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1128.460840][T13798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1128.478646][T13798] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1128.548527][T13798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1128.991380][T13757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.216221][T13757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.279239][T13755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.332156][T13275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.333428][T13275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.497858][ T5273] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1129.698280][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.698544][T13302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.012525][ T5745] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1130.091714][T13722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1130.202488][T13722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1130.203296][ T5745] usb 9-1: too many configurations: 168, using maximum allowed: 8 [ 1130.225531][T13722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1130.225752][ T5745] usb 9-1: config index 0 descriptor too short (expected 65016, got 133) [ 1130.225781][ T5745] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.229842][ T5745] usb 9-1: config index 1 descriptor too short (expected 65016, got 133) [ 1130.229874][ T5745] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.230391][T13722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1130.231347][T13722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1130.231435][ T5745] usb 9-1: config index 2 descriptor too short (expected 65016, got 133) [ 1130.231463][ T5745] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.342072][ T5745] usb 9-1: config index 3 descriptor too short (expected 65016, got 133) [ 1130.342103][ T5745] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.384262][ T5745] usb 9-1: config index 4 descriptor too short (expected 65016, got 133) [ 1130.384302][ T5745] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.421286][ T5745] usb 9-1: config index 5 descriptor too short (expected 65016, got 133) [ 1130.421319][ T5745] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.457243][ T5745] usb 9-1: config index 6 descriptor too short (expected 65016, got 133) [ 1130.457277][ T5745] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.491460][ T5745] usb 9-1: config index 7 descriptor too short (expected 65016, got 133) [ 1130.491494][ T5745] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.540788][ T5745] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1130.540825][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.540848][ T5745] usb 9-1: Product: syz [ 1130.540866][ T5745] usb 9-1: Manufacturer: syz [ 1130.540883][ T5745] usb 9-1: SerialNumber: syz [ 1130.689858][ T5745] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1131.078221][T13755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.098455][ T5893] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1131.424446][T13279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.424759][T13279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.459412][ T5893] usb 9-1: Service connection timeout for: 256 [ 1132.459458][ T5893] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1132.532060][ T5344] usb 9-1: USB disconnect, device number 20 [ 1132.571227][ C1] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 1132.649476][T13297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.649708][T13297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.666267][T11092] Bluetooth: hci1: command tx timeout [ 1132.702069][ T5893] ath9k_htc: Failed to initialize the device [ 1132.744459][ T5344] usb 9-1: ath9k_htc: USB layer deinitialized [ 1133.081512][T14141] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1591'. [ 1133.143244][T13798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.321774][T14146] loop8: detected capacity change from 0 to 1024 [ 1133.393478][T14146] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1134.298124][T14161] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1593'. [ 1134.676978][T13798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.727645][T11092] Bluetooth: hci1: command tx timeout [ 1135.069096][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.070299][T13302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.267410][T14164] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1594'. [ 1135.267438][T14164] nbd: must specify at least one socket [ 1135.614715][T14185] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1595'. [ 1135.614986][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1595'. [ 1136.771522][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.771806][T13301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.805198][T11092] Bluetooth: hci1: command tx timeout [ 1138.307494][T14208] loop8: detected capacity change from 0 to 512 [ 1138.388632][T14208] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1138.420409][T14208] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1596: inode has both inline data and extents flags [ 1138.420448][T14208] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1138.422136][T14208] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1596: couldn't read orphan inode 15 (err -117) [ 1138.422291][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1138.422309][ C1] EXT4-fs (loop8): initial error at time 1780253694: ext4_orphan_get:1397: inode 15 [ 1138.422342][ C1] EXT4-fs (loop8): last error at time 1780253694: ext4_orphan_get:1397: inode 15 [ 1138.465382][T14208] loop8: lost filesystem error report for type 5 error -117 [ 1138.559683][T14208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.883294][ T5614] Bluetooth: hci1: command tx timeout [ 1138.938623][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1138.957593][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1139.156689][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1139.186534][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1139.230621][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1139.252719][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1139.262899][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1139.291740][T11092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1139.304289][T11092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1139.360673][T11092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1139.704520][T14208] sctp: [Deprecated]: syz.8.1596 (pid 14208) Use of int in max_burst socket option. [ 1139.704520][T14208] Use struct sctp_assoc_value instead [ 1140.006698][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.526160][T13722] Bluetooth: hci0: command tx timeout [ 1142.013683][T13722] Bluetooth: hci3: command tx timeout [ 1142.120194][T14126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.120629][T14126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.121166][T14126] bridge_slave_0: entered allmulticast mode [ 1142.155574][T14126] bridge_slave_0: entered promiscuous mode [ 1142.180849][T14126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.181189][T14126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.181707][T14126] bridge_slave_1: entered allmulticast mode [ 1142.226192][T14126] bridge_slave_1: entered promiscuous mode [ 1142.309724][T14119] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1142.487520][T14119] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1142.487622][T14119] usb 9-1: too many configurations: 65, using maximum allowed: 8 [ 1142.488802][T14119] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 1142.488830][T14119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.488854][T14119] usb 9-1: config 0 has no interface number 0 [ 1142.488891][T14119] usb 9-1: config 0 interface 59 has no altsetting 0 [ 1142.490050][T14119] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 1142.490078][T14119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.490102][T14119] usb 9-1: config 0 has no interface number 0 [ 1142.490137][T14119] usb 9-1: config 0 interface 59 has no altsetting 0 [ 1142.491274][T14119] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 1142.491302][T14119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.491325][T14119] usb 9-1: config 0 has no interface number 0 [ 1142.491360][T14119] usb 9-1: config 0 interface 59 has no altsetting 0 [ 1142.558643][T14119] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 1142.558736][T14119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.558792][T14119] usb 9-1: config 0 has no interface number 0 [ 1142.558892][T14119] usb 9-1: config 0 interface 59 has no altsetting 0 [ 1142.655226][T14119] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 1142.655271][T14119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.655296][T14119] usb 9-1: config 0 has no interface number 0 [ 1142.655333][T14119] usb 9-1: config 0 interface 59 has no altsetting 0 [ 1142.660342][T14119] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 1142.660378][T14119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.660402][T14119] usb 9-1: config 0 has no interface number 0 [ 1142.660440][T14119] usb 9-1: config 0 interface 59 has no altsetting 0 [ 1142.662070][T14119] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 1142.662099][T14119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.662122][T14119] usb 9-1: config 0 has no interface number 0 [ 1142.662365][T14119] usb 9-1: config 0 interface 59 has no altsetting 0 [ 1142.854721][T14119] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 1142.854755][T14119] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.854777][T14119] usb 9-1: config 0 has no interface number 0 [ 1142.854813][T14119] usb 9-1: config 0 interface 59 has no altsetting 0 [ 1142.994086][T14119] usb 9-1: language id specifier not provided by device, defaulting to English [ 1142.996315][T14119] usb 9-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 1142.996348][T14119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.996371][T14119] usb 9-1: Product: syz [ 1142.996388][T14119] usb 9-1: Manufacturer: syz [ 1142.996405][T14119] usb 9-1: SerialNumber: syz [ 1143.127315][T11092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1143.169934][T14119] usb 9-1: config 0 descriptor?? [ 1143.198575][T11092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1143.212862][T11092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1143.236264][T11092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1143.237584][T11092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1143.612375][T13722] Bluetooth: hci0: command tx timeout [ 1143.732867][ T9213] bridge_slave_1: left allmulticast mode [ 1143.732910][ T9213] bridge_slave_1: left promiscuous mode [ 1143.733230][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.895663][ T9213] bridge_slave_0: left allmulticast mode [ 1143.895719][ T9213] bridge_slave_0: left promiscuous mode [ 1143.896040][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.082667][T13722] Bluetooth: hci3: command tx timeout [ 1144.994958][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.064179][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.106599][ T9213] bond0 (unregistering): Released all slaves [ 1145.170814][T14126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.366215][T13722] Bluetooth: hci2: command tx timeout [ 1145.538449][T14119] rndis_host 9-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1145.576176][T14119] usb 9-1: USB disconnect, device number 21 [ 1145.620870][T14126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.693478][T13722] Bluetooth: hci0: command tx timeout [ 1146.043924][T14303] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1600'. [ 1146.176331][T14126] team0: Port device team_slave_0 added [ 1146.179228][T13722] Bluetooth: hci3: command tx timeout [ 1146.288793][T14126] team0: Port device team_slave_1 added [ 1147.889874][T13722] Bluetooth: hci2: command tx timeout [ 1147.889906][T11092] Bluetooth: hci0: command tx timeout [ 1148.374930][T13722] Bluetooth: hci3: command tx timeout [ 1148.532444][ T9213] hsr_slave_0: left promiscuous mode [ 1148.573830][ T9213] hsr_slave_1: left promiscuous mode [ 1148.575137][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.613546][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.594483][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1149.653156][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1149.923884][T13722] Bluetooth: hci2: command tx timeout [ 1150.257394][T14126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.257417][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.257449][T14126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.378915][T14126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.378934][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.378960][T14126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.893085][T14126] hsr_slave_0: entered promiscuous mode [ 1150.896223][T14126] hsr_slave_1: entered promiscuous mode [ 1151.600295][T14368] netlink: 204 bytes leftover after parsing attributes in process `syz.8.1605'. [ 1151.601136][T14368] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1605'. [ 1152.002896][T13722] Bluetooth: hci2: command tx timeout [ 1153.956299][T14427] loop8: detected capacity change from 0 to 512 [ 1154.065858][T14427] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.066005][T14427] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.176318][ T38] audit: type=1800 audit(1780253710.230:298): pid=14427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1610" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1154.317799][T14213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.318320][T14213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.319158][T14213] bridge_slave_0: entered allmulticast mode [ 1154.359959][T14213] bridge_slave_0: entered promiscuous mode [ 1154.532598][T14213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.532939][T14213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.533303][T14213] bridge_slave_1: entered allmulticast mode [ 1154.558759][T14213] bridge_slave_1: entered promiscuous mode [ 1154.879372][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.912473][T14210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.912837][T14210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.913133][T14210] bridge_slave_0: entered allmulticast mode [ 1154.918645][T14210] bridge_slave_0: entered promiscuous mode [ 1155.462793][T14119] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1155.482596][T14213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.483836][T14210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.484152][T14210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.484461][T14210] bridge_slave_1: entered allmulticast mode [ 1155.487513][T14210] bridge_slave_1: entered promiscuous mode [ 1155.527987][T14213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.645443][T14119] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1155.645472][T14119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.645487][T14119] usb 9-1: Product: syz [ 1155.645499][T14119] usb 9-1: Manufacturer: syz [ 1155.645510][T14119] usb 9-1: SerialNumber: syz [ 1155.651773][T14119] usb 9-1: config 0 descriptor?? [ 1155.704857][T14119] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 1155.954440][ T5893] usb 9-1: USB disconnect, device number 22 [ 1156.237305][T14210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.376920][T14213] team0: Port device team_slave_0 added [ 1156.403761][T14210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.963687][T14213] team0: Port device team_slave_1 added [ 1157.387804][T14449] loop8: detected capacity change from 0 to 32768 [ 1157.416059][T14449] OCFS2: ERROR (device loop8): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = INODE01 [ 1157.416107][T14449] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1157.416123][T14449] OCFS2: File system is now read-only. [ 1157.416137][T14449] (syz.8.1615,14449,0):ocfs2_read_locked_inode:633 ERROR: status = -30 [ 1157.416327][T14449] (syz.8.1615,14449,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30 [ 1157.416357][T14449] (syz.8.1615,14449,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 1157.416384][T14449] (syz.8.1615,14449,0):ocfs2_initialize_super:2195 ERROR: status = -30 [ 1157.416509][T14449] (syz.8.1615,14449,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 1157.733484][T14210] team0: Port device team_slave_0 added [ 1157.780268][T14456] loop8: detected capacity change from 0 to 64 [ 1157.797303][T14456] bfs: Unknown parameter 'bfs' [ 1157.886749][T14213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.886773][T14213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.886805][T14213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.998357][T14210] team0: Port device team_slave_1 added [ 1158.038124][T14213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.038145][T14213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.038180][T14213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.057984][T14284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.076122][T14284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.077298][T14284] bridge_slave_0: entered allmulticast mode [ 1158.109891][T14284] bridge_slave_0: entered promiscuous mode [ 1158.249371][T14284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.249723][T14284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.250040][T14284] bridge_slave_1: entered allmulticast mode [ 1158.271842][T14284] bridge_slave_1: entered promiscuous mode [ 1158.307686][T14460] loop8: detected capacity change from 0 to 2048 [ 1158.324903][T14460] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1158.387505][T14460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1158.556483][T14210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.556502][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.556535][T14210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.673518][T14210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.673538][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.673571][T14210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.906963][T14284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.105588][T14284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.127646][T14213] hsr_slave_0: entered promiscuous mode [ 1159.130141][T14213] hsr_slave_1: entered promiscuous mode [ 1159.145336][T14213] debugfs: 'hsr0' already exists in 'hsr' [ 1159.145365][T14213] Cannot create hsr debugfs directory [ 1159.548038][T14284] team0: Port device team_slave_0 added [ 1159.626159][T14210] hsr_slave_0: entered promiscuous mode [ 1159.628967][T14210] hsr_slave_1: entered promiscuous mode [ 1159.631439][T14210] debugfs: 'hsr0' already exists in 'hsr' [ 1159.631468][T14210] Cannot create hsr debugfs directory [ 1159.667387][T14284] team0: Port device team_slave_1 added [ 1160.092621][ T5344] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1160.161960][T14284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.161974][T14284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.161995][T14284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.282395][ T5344] usb 9-1: Using ep0 maxpacket: 8 [ 1160.284660][ T5344] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1160.284722][ T5344] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1160.284755][ T5344] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1160.284789][ T5344] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1160.284823][ T5344] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1160.284876][ T5344] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1160.284908][ T5344] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.535225][T14284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.535239][T14284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.535265][T14284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.592401][ T5344] usb 9-1: usb_control_msg returned -32 [ 1160.592457][ T5344] usbtmc 9-1:16.0: can't read capabilities [ 1161.033079][T14476] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1161.088597][ T5344] usb 9-1: USB disconnect, device number 23 [ 1161.538127][T14126] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1161.577773][T14126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1161.595418][T14284] hsr_slave_0: entered promiscuous mode [ 1161.619861][T14284] hsr_slave_1: entered promiscuous mode [ 1161.621865][T14284] debugfs: 'hsr0' already exists in 'hsr' [ 1161.621889][T14284] Cannot create hsr debugfs directory [ 1162.063080][T14481] loop8: detected capacity change from 0 to 32768 [ 1162.257352][T14126] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1162.302499][T14126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.411058][T14126] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1162.449030][T14126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.719648][T14126] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1162.873073][T14486] loop8: detected capacity change from 0 to 128 [ 1163.052347][T14486] EXT4-fs: Mount option(s) incompatible with ext3 [ 1163.685538][T14126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1164.378362][T14497] loop8: detected capacity change from 0 to 64 [ 1164.404205][T14497] hfs: unable to locate alternate MDB [ 1164.404220][T14497] hfs: continuing without an alternate MDB [ 1164.419620][T14497] hfs: get root inode failed [ 1164.687389][T14500] loop8: detected capacity change from 0 to 8 [ 1165.355026][T14507] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1632'. [ 1165.449397][T14509] loop8: detected capacity change from 0 to 164 [ 1165.515222][T14509] rock: directory entry would overflow storage [ 1165.515238][T14509] rock: sig=0x5252, size=5, remaining=3 [ 1165.932958][T14516] loop8: detected capacity change from 0 to 1 [ 1165.938731][T14516] Dev loop8: unable to read RDB block 1 [ 1165.938866][T14516] loop8: unable to read partition table [ 1165.939112][T14516] loop8: partition table beyond EOD, truncated [ 1165.939148][T14516] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1168.373984][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1168.534816][T14539] loop8: detected capacity change from 0 to 40427 [ 1168.555236][T14539] F2FS-fs (loop8): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 1168.555294][T14539] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 1168.555319][T14539] F2FS-fs (loop8): build fault injection rate: 19 [ 1168.555334][T14539] F2FS-fs (loop8): build fault injection type: 0x3b4c63 [ 1168.567549][T14539] F2FS-fs (loop8): invalid crc value [ 1168.607496][T14539] F2FS-fs (loop8): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4a58/0x78c0 [ 1168.607556][T14539] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-12) [ 1168.904657][T14546] FAULT_INJECTION: forcing a failure. [ 1168.904657][T14546] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.904696][T14546] CPU: 1 UID: 0 PID: 14546 Comm: syz.8.1639 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1168.904724][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1168.904740][T14546] Call Trace: [ 1168.904749][T14546] [ 1168.904759][T14546] dump_stack_lvl+0xe8/0x150 [ 1168.904798][T14546] should_fail_ex+0x46b/0x600 [ 1168.904832][T14546] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 1168.904859][T14546] should_failslab+0xa8/0x100 [ 1168.904903][T14546] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 1168.904929][T14546] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 1168.904962][T14546] ? jfs_alloc_inode+0x28/0x70 [ 1168.904993][T14546] ? __pfx_jfs_alloc_inode+0x10/0x10 [ 1168.905020][T14546] jfs_alloc_inode+0x28/0x70 [ 1168.905046][T14546] alloc_inode+0x6a/0x1b0 [ 1168.905077][T14546] new_inode+0x22/0x170 [ 1168.905106][T14546] ? sb_set_blocksize+0x11b/0x210 [ 1168.905134][T14546] jfs_fill_super+0x570/0xd70 [ 1168.905170][T14546] get_tree_bdev_flags+0x431/0x4f0 [ 1168.905195][T14546] ? __pfx_jfs_fill_super+0x10/0x10 [ 1168.905222][T14546] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1168.905271][T14546] vfs_get_tree+0x92/0x2a0 [ 1168.905297][T14546] do_new_mount+0x341/0xd30 [ 1168.905325][T14546] ? apparmor_capable+0x126/0x170 [ 1168.905369][T14546] ? __pfx_do_new_mount+0x10/0x10 [ 1168.905400][T14546] ? ns_capable+0x89/0xe0 [ 1168.905428][T14546] ? user_path_at+0xd4/0x160 [ 1168.905465][T14546] ? user_path_at+0xd4/0x160 [ 1168.905501][T14546] __se_sys_mount+0x31d/0x420 [ 1168.905538][T14546] ? __pfx___se_sys_mount+0x10/0x10 [ 1168.905576][T14546] ? __x64_sys_mount+0x20/0xc0 [ 1168.905604][T14546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.905630][T14546] do_syscall_64+0x174/0x580 [ 1168.905653][T14546] ? trace_irq_disable+0x3b/0x140 [ 1168.905682][T14546] ? clear_bhb_loop+0x40/0x90 [ 1168.905710][T14546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.905734][T14546] RIP: 0033:0x7f38d4aace59 [ 1168.905756][T14546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.905777][T14546] RSP: 002b:00007f38d2cfe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.905802][T14546] RAX: ffffffffffffffda RBX: 00007f38d4d25fa0 RCX: 00007f38d4aace59 [ 1168.905820][T14546] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 00002000000000c0 [ 1168.905837][T14546] RBP: 00007f38d2cfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.905852][T14546] R10: 0000000000208008 R11: 0000000000000246 R12: 0000000000000002 [ 1168.905867][T14546] R13: 00007f38d4d26038 R14: 00007f38d4d25fa0 R15: 00007ffe640e19f8 [ 1168.905911][T14546] [ 1169.488549][T14550] gretap0: entered promiscuous mode [ 1169.494534][T14550] vlan3: entered promiscuous mode [ 1169.933149][ T9213] bridge_slave_1: left allmulticast mode [ 1169.933188][ T9213] bridge_slave_1: left promiscuous mode [ 1169.933492][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.006430][T14560] loop8: detected capacity change from 0 to 1024 [ 1170.008429][T14560] EXT4-fs: Ignoring removed mblk_io_submit option [ 1170.008459][T14560] EXT4-fs: Ignoring removed oldalloc option [ 1170.050273][T14560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 1170.060205][T14560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.060592][T14560] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.124173][ T9213] bridge_slave_0: left allmulticast mode [ 1170.124213][ T9213] bridge_slave_0: left promiscuous mode [ 1170.124511][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.283331][T13275] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 112: padding at end of block bitmap is not set [ 1170.284149][T13275] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 1170.284174][T13275] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1170.284174][T13275] [ 1170.284186][T13275] EXT4-fs (loop8): Total free blocks count 0 [ 1170.284197][T13275] EXT4-fs (loop8): Free/Dirty block details [ 1170.284209][T13275] EXT4-fs (loop8): free_blocks=0 [ 1170.284220][T13275] EXT4-fs (loop8): dirty_blocks=208 [ 1170.284231][T13275] EXT4-fs (loop8): Block reservation details [ 1170.284240][T13275] EXT4-fs (loop8): i_reserved_data_blocks=13 [ 1170.288761][T11088] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1170.291934][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1170.502801][ T9213] bridge_slave_1: left allmulticast mode [ 1170.502835][ T9213] bridge_slave_1: left promiscuous mode [ 1170.503086][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.578851][T14566] loop8: detected capacity change from 0 to 1024 [ 1170.580134][T14566] EXT4-fs: Ignoring removed mblk_io_submit option [ 1170.580169][T14566] EXT4-fs: Ignoring removed oldalloc option [ 1170.615126][T14566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 1170.618756][T14566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.618934][T14566] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.686118][ T9213] bridge_slave_0: left allmulticast mode [ 1170.686162][ T9213] bridge_slave_0: left promiscuous mode [ 1170.686496][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.003977][T13301] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:49: bg 0: block 112: padding at end of block bitmap is not set [ 1172.044262][T13301] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 1172.044296][T13301] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1172.044296][T13301] [ 1172.044310][T13301] EXT4-fs (loop8): Total free blocks count 0 [ 1172.044322][T13301] EXT4-fs (loop8): Free/Dirty block details [ 1172.044335][T13301] EXT4-fs (loop8): free_blocks=0 [ 1172.044348][T13301] EXT4-fs (loop8): dirty_blocks=208 [ 1172.044360][T13301] EXT4-fs (loop8): Block reservation details [ 1172.044370][T13301] EXT4-fs (loop8): i_reserved_data_blocks=13 [ 1172.050426][T11088] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1172.061935][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1172.066381][ T9213] bridge_slave_1: left allmulticast mode [ 1172.066421][ T9213] bridge_slave_1: left promiscuous mode [ 1172.066699][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.324148][ T9213] bridge_slave_0: left allmulticast mode [ 1172.324189][ T9213] bridge_slave_0: left promiscuous mode [ 1172.324509][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.513570][T14574] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1174.195655][T14585] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1646'. [ 1174.744123][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.803202][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.846573][ T9213] bond0 (unregistering): Released all slaves [ 1175.553094][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.620780][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.675075][ T9213] bond0 (unregistering): Released all slaves [ 1176.463348][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.525276][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.565200][ T9213] bond0 (unregistering): Released all slaves [ 1177.609345][T14126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.633042][T14587] loop8: detected capacity change from 0 to 32768 [ 1177.823359][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.823478][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.932075][T14587] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1178.045745][T14587] XFS (loop8): Ending clean mount [ 1178.154052][T11088] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1178.434308][ T9213] hsr_slave_0: left promiscuous mode [ 1178.472697][ T9213] hsr_slave_1: left promiscuous mode [ 1178.473886][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.550537][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.885486][ T9213] hsr_slave_0: left promiscuous mode [ 1178.926915][ T9213] hsr_slave_1: left promiscuous mode [ 1178.928155][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.013412][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.252302][ T9213] hsr_slave_0: left promiscuous mode [ 1179.292821][ T9213] hsr_slave_1: left promiscuous mode [ 1179.293976][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.334003][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.992496][ T5719] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1180.083578][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1180.133140][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1180.160145][ T5719] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1180.160183][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.160200][ T5719] usb 9-1: Product: syz [ 1180.160211][ T5719] usb 9-1: Manufacturer: syz [ 1180.160222][ T5719] usb 9-1: SerialNumber: syz [ 1180.208082][ T5719] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1180.208110][ T5719] r8152-cfgselector 9-1: config 0 descriptor?? [ 1180.623202][T14617] binder: 14616:14617 ioctl c018620c 200000000000 returned -22 [ 1180.623364][T14618] binder: 14616:14618 ioctl c018620c 200000000000 returned -22 [ 1180.857676][T14119] r8152-cfgselector 9-1: USB disconnect, device number 24 [ 1181.033332][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1181.108622][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1181.673106][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1181.735049][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1182.099624][T14126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.138678][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1182.153613][T14632] tipc: Resetting bearer [ 1182.154145][T14632] team0: entered promiscuous mode [ 1182.154160][T14632] team_slave_0: entered promiscuous mode [ 1182.154346][T14632] team_slave_1: entered promiscuous mode [ 1182.519876][T13283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.520072][T13283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.545753][T13283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.545945][T13283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.712703][ T5719] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1182.932401][ T5719] usb 9-1: Using ep0 maxpacket: 16 [ 1182.934914][ T5719] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.934950][ T5719] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1182.934986][ T5719] usb 9-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1182.935011][ T5719] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.986790][ T5719] usb 9-1: config 0 descriptor?? [ 1183.436954][ T5719] hid_parser_main: 2 callbacks suppressed [ 1183.436982][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437019][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437049][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437091][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437120][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437150][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437181][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437212][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437242][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437271][ T5719] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 1183.437320][ T5719] glorious 0003:22D4:1503.000B: item fetching failed at offset 12/40 [ 1183.548801][ T5719] glorious 0003:22D4:1503.000B: probe with driver glorious failed with error -22 [ 1184.585532][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1185.469903][T14120] usb 9-1: USB disconnect, device number 25 [ 1186.042914][T14126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.261853][T14689] netlink: 136 bytes leftover after parsing attributes in process `syz.8.1656'. [ 1187.261884][T14689] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1187.666416][T14695] Mount JFS Failure: -22 [ 1188.723781][T14126] veth0_vlan: entered promiscuous mode [ 1188.738902][T14126] veth1_vlan: entered promiscuous mode [ 1188.964512][T14126] veth0_macvtap: entered promiscuous mode [ 1188.981634][T14126] veth1_macvtap: entered promiscuous mode [ 1189.108412][T14126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.131903][T14721] loop8: detected capacity change from 0 to 512 [ 1189.148148][T14721] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1189.158962][T14126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.187419][T14721] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1189.213680][T14721] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 1189.225430][T14721] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.463907][T13275] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.466261][T13302] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.547415][T13302] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.605088][T13275] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.806150][T14721] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 1189.806836][T14721] EXT4-fs error (device loop8): __ext4_add_entry:2412: inode #2: comm syz.8.1658: Directory hole found for htree leaf block 0 [ 1191.332457][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.227404][T11092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1192.269931][T11092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1192.280256][T11092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1192.340337][T11092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1192.350087][T11092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1192.924883][T14728] FAULT_INJECTION: forcing a failure. [ 1192.924883][T14728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.924922][T14728] CPU: 1 UID: 0 PID: 14728 Comm: syz.8.1659 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1192.924949][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1192.924964][T14728] Call Trace: [ 1192.924973][T14728] [ 1192.924984][T14728] dump_stack_lvl+0xe8/0x150 [ 1192.925019][T14728] should_fail_ex+0x46b/0x600 [ 1192.925055][T14728] _copy_to_user+0x31/0xb0 [ 1192.925094][T14728] simple_read_from_buffer+0xe1/0x170 [ 1192.925134][T14728] proc_fail_nth_read+0x1be/0x230 [ 1192.925171][T14728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1192.925206][T14728] ? rw_verify_area+0x2ac/0x4e0 [ 1192.925240][T14728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1192.925272][T14728] vfs_read+0x212/0xa80 [ 1192.925322][T14728] ? __pfx_vfs_read+0x10/0x10 [ 1192.925359][T14728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1192.925397][T14728] ? lockdep_hardirqs_on+0x7a/0x110 [ 1192.925419][T14728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1192.925455][T14728] ? mutex_lock_nested+0x152/0x1d0 [ 1192.925483][T14728] ? fdget_pos+0x252/0x320 [ 1192.925524][T14728] ksys_read+0x156/0x270 [ 1192.925562][T14728] ? __pfx_ksys_read+0x10/0x10 [ 1192.925597][T14728] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 1192.925630][T14728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.925656][T14728] do_syscall_64+0x174/0x580 [ 1192.925678][T14728] ? trace_irq_disable+0x3b/0x140 [ 1192.925707][T14728] ? clear_bhb_loop+0x40/0x90 [ 1192.925737][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.925761][T14728] RIP: 0033:0x7f38d4a6d68e [ 1192.925782][T14728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1192.925804][T14728] RSP: 002b:00007f38d2cfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1192.925830][T14728] RAX: ffffffffffffffda RBX: 00007f38d2cfe6c0 RCX: 00007f38d4a6d68e [ 1192.925848][T14728] RDX: 000000000000000f RSI: 00007f38d2cfe0a0 RDI: 0000000000000004 [ 1192.925863][T14728] RBP: 00007f38d2cfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.925879][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.925893][T14728] R13: 00007f38d4d26038 R14: 00007f38d4d25fa0 R15: 00007ffe640e19f8 [ 1192.925931][T14728] [ 1193.607719][T14744] loop8: detected capacity change from 0 to 2048 [ 1193.629451][T14744] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1193.679336][T14744] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=5) [ 1193.700827][T14744] Remounting filesystem read-only [ 1193.701669][T14744] NILFS (loop8): error -5 while loading super root [ 1193.977837][T14213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1194.045951][T14213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1194.595215][ T9213] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.685622][T14213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1194.732409][T14213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1194.776137][T14213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1194.818241][T11092] Bluetooth: hci4: command tx timeout [ 1195.086154][T14213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1195.119697][T14213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1195.170242][T14213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1195.419585][ T9213] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.822382][T14772] loop8: detected capacity change from 0 to 64 [ 1196.440087][T14772] syz.8.1664: attempt to access beyond end of device [ 1196.440087][T14772] loop8: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1196.440365][T14772] Buffer I/O error on dev loop8, logical block 512, async page read [ 1196.490225][T14772] syz.8.1664: attempt to access beyond end of device [ 1196.490225][T14772] loop8: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1196.490267][T14772] Buffer I/O error on dev loop8, logical block 56576, async page read [ 1196.932507][T11092] Bluetooth: hci4: command tx timeout [ 1197.090811][ T9213] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.525779][ T9213] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.699161][T14210] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1197.751302][T14210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1197.775987][T14210] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1197.811398][T14210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1197.839959][T14210] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1197.904616][T14210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1197.936045][T14210] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1197.969558][T14210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1198.096478][T14808] loop8: detected capacity change from 0 to 256 [ 1198.116391][T14808] vfat: Unknown parameter '2' [ 1198.962411][T11092] Bluetooth: hci4: command tx timeout [ 1199.377312][T14284] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1199.458247][T14284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1199.723139][T14284] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1199.770254][T14284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1199.839712][T14284] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1199.877808][T14284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1199.910057][T14284] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1199.936985][T14284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1200.107814][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1668'. [ 1200.142800][ T9213] bridge_slave_1: left allmulticast mode [ 1200.142839][ T9213] bridge_slave_1: left promiscuous mode [ 1200.143146][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.301871][T13722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1200.381030][T13722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1200.413302][T13722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1200.442103][T13722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1200.458865][T13722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1200.528022][T13722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1200.648569][T13722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1200.762543][T13722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1200.787690][T13722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1200.788509][T13722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1201.057126][T13722] Bluetooth: hci4: command tx timeout [ 1201.246217][ T9213] bridge_slave_0: left allmulticast mode [ 1201.246258][ T9213] bridge_slave_0: left promiscuous mode [ 1201.246573][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.233355][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.333518][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.356138][ T9213] bond0 (unregistering): Released all slaves [ 1202.413663][T14284] kthread_run failed with err -4 [ 1202.484470][ T61] Bluetooth: hci1: command tx timeout [ 1203.257915][T14729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.258222][T14729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.258597][T14729] bridge_slave_0: entered allmulticast mode [ 1203.283698][T14729] bridge_slave_0: entered promiscuous mode [ 1203.341295][ T61] Bluetooth: hci3: command tx timeout [ 1203.643098][ T9213] hsr_slave_0: left promiscuous mode [ 1203.682700][ T9213] hsr_slave_1: left promiscuous mode [ 1203.683861][ T9213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.683898][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.724017][ T9213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.724053][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.017236][T14848] loop8: detected capacity change from 0 to 1024 [ 1204.019096][ T9213] veth1_macvtap: left promiscuous mode [ 1204.019209][ T9213] veth0_macvtap: left promiscuous mode [ 1204.019526][ T9213] veth1_vlan: left promiscuous mode [ 1204.019736][ T9213] veth0_vlan: left promiscuous mode [ 1204.050487][T14848] EXT4-fs: Ignoring removed mblk_io_submit option [ 1204.050582][T14848] EXT4-fs: Ignoring removed oldalloc option [ 1204.091169][T14848] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 1204.104565][T14848] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.105145][T14848] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.797230][ T61] Bluetooth: hci1: command tx timeout [ 1205.139023][T11092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1205.235937][T11092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1205.241458][T11092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1205.310813][T11092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1205.311785][T11092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1205.445918][T11092] Bluetooth: hci3: command tx timeout [ 1205.558453][T13302] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:50: bg 0: block 112: padding at end of block bitmap is not set [ 1205.598974][T13302] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 1205.599011][T13302] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1205.599011][T13302] [ 1205.599028][T13302] EXT4-fs (loop8): Total free blocks count 0 [ 1205.599044][T13302] EXT4-fs (loop8): Free/Dirty block details [ 1205.599060][T13302] EXT4-fs (loop8): free_blocks=0 [ 1205.599076][T13302] EXT4-fs (loop8): dirty_blocks=208 [ 1205.599091][T13302] EXT4-fs (loop8): Block reservation details [ 1205.599106][T13302] EXT4-fs (loop8): i_reserved_data_blocks=13 [ 1205.713937][T11088] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1205.718427][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1206.219485][T14863] loop8: detected capacity change from 0 to 256 [ 1206.298245][T14863] FAT-fs (loop8): Directory bread(block 64) failed [ 1206.298292][T14863] FAT-fs (loop8): Directory bread(block 65) failed [ 1206.298365][T14863] FAT-fs (loop8): Directory bread(block 66) failed [ 1206.298383][T14863] FAT-fs (loop8): Directory bread(block 67) failed [ 1206.298459][T14863] FAT-fs (loop8): Directory bread(block 68) failed [ 1206.298477][T14863] FAT-fs (loop8): Directory bread(block 69) failed [ 1206.298545][T14863] FAT-fs (loop8): Directory bread(block 70) failed [ 1206.298564][T14863] FAT-fs (loop8): Directory bread(block 71) failed [ 1206.298632][T14863] FAT-fs (loop8): Directory bread(block 72) failed [ 1206.298649][T14863] FAT-fs (loop8): Directory bread(block 73) failed [ 1206.773182][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1206.823277][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1206.883222][ T61] Bluetooth: hci1: command tx timeout [ 1206.982460][T14119] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1207.064987][T14729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.065537][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.065950][T14729] bridge_slave_1: entered allmulticast mode [ 1207.069297][T14729] bridge_slave_1: entered promiscuous mode [ 1207.142300][T14119] usb 9-1: Using ep0 maxpacket: 16 [ 1207.168247][T14119] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.168323][T14119] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1207.168365][T14119] usb 9-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1207.168403][T14119] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.211715][T14119] usb 9-1: config 0 descriptor?? [ 1207.384415][ T61] Bluetooth: hci0: command tx timeout [ 1207.529794][ T61] Bluetooth: hci3: command tx timeout [ 1207.648268][T14119] hid_parser_main: 2 callbacks suppressed [ 1207.648293][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648327][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648359][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648388][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648418][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648447][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648477][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648507][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648537][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648566][T14119] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 1207.648617][T14119] glorious 0003:22D4:1503.000C: item fetching failed at offset 12/40 [ 1207.649452][T14119] glorious 0003:22D4:1503.000C: probe with driver glorious failed with error -22 [ 1208.058278][T14729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.185482][T14729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.499883][T14729] team0: Port device team_slave_0 added [ 1208.631074][T14729] team0: Port device team_slave_1 added [ 1208.988756][ T61] Bluetooth: hci1: command tx timeout [ 1209.060065][T14729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.060087][T14729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.060121][T14729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.229927][T14729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.229950][T14729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.229986][T14729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.442508][ T61] Bluetooth: hci0: command tx timeout [ 1209.631965][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1209.633674][ T61] Bluetooth: hci3: command tx timeout [ 1209.689957][ T5628] usb 9-1: USB disconnect, device number 26 [ 1209.900525][T14902] loop8: detected capacity change from 0 to 1024 [ 1209.910039][T14902] EXT4-fs: Ignoring removed mblk_io_submit option [ 1209.910070][T14902] EXT4-fs: Ignoring removed oldalloc option [ 1209.995539][T14902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 1210.016872][T14902] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.017020][T14902] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.346761][T14729] hsr_slave_0: entered promiscuous mode [ 1210.361791][T14729] hsr_slave_1: entered promiscuous mode [ 1211.522424][ T61] Bluetooth: hci0: command tx timeout [ 1211.523371][T13283] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:23: bg 0: block 112: padding at end of block bitmap is not set [ 1211.524253][T13283] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 1211.524284][T13283] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1211.524284][T13283] [ 1211.524302][T13283] EXT4-fs (loop8): Total free blocks count 0 [ 1211.524318][T13283] EXT4-fs (loop8): Free/Dirty block details [ 1211.524334][T13283] EXT4-fs (loop8): free_blocks=0 [ 1211.524351][T13283] EXT4-fs (loop8): dirty_blocks=208 [ 1211.524366][T13283] EXT4-fs (loop8): Block reservation details [ 1211.524380][T13283] EXT4-fs (loop8): i_reserved_data_blocks=13 [ 1211.538278][T11088] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1211.659111][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1212.218606][T14918] loop8: detected capacity change from 0 to 1024 [ 1212.219776][T14918] EXT4-fs: Ignoring removed mblk_io_submit option [ 1212.219806][T14918] EXT4-fs: Ignoring removed oldalloc option [ 1212.258176][T14918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 1212.277780][T14918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.277917][T14918] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.603159][ T61] Bluetooth: hci0: command tx timeout [ 1213.632940][T13280] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 112: padding at end of block bitmap is not set [ 1213.633746][T13280] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 1213.633773][T13280] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1213.633773][T13280] [ 1213.633785][T13280] EXT4-fs (loop8): Total free blocks count 0 [ 1213.633796][T13280] EXT4-fs (loop8): Free/Dirty block details [ 1213.633807][T13280] EXT4-fs (loop8): free_blocks=0 [ 1213.633818][T13280] EXT4-fs (loop8): dirty_blocks=208 [ 1213.633829][T13280] EXT4-fs (loop8): Block reservation details [ 1213.633838][T13280] EXT4-fs (loop8): i_reserved_data_blocks=13 [ 1213.638316][T11088] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1213.641438][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1214.039444][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1678'. [ 1214.171588][T14926] vlan3: entered promiscuous mode [ 1214.602056][T14943] loop5: detected capacity change from 0 to 127 [ 1214.641978][T14943] loop5: unable to read partition table [ 1214.657222][T14943] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5) [ 1215.159356][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1215.334787][T14946] loop8: detected capacity change from 0 to 32768 [ 1215.389903][T14946] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1215.447977][T14946] XFS (loop8): Ending clean mount [ 1215.575326][T11088] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1216.680952][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.681474][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.681821][T14825] bridge_slave_0: entered allmulticast mode [ 1216.743217][T14825] bridge_slave_0: entered promiscuous mode [ 1216.783779][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.784035][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.784414][T14825] bridge_slave_1: entered allmulticast mode [ 1216.787092][T14825] bridge_slave_1: entered promiscuous mode [ 1217.079391][T14829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.079639][T14829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.079910][T14829] bridge_slave_0: entered allmulticast mode [ 1217.095027][T14829] bridge_slave_0: entered promiscuous mode [ 1217.224433][T14829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.224695][T14829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.224911][T14829] bridge_slave_1: entered allmulticast mode [ 1217.228367][T14829] bridge_slave_1: entered promiscuous mode [ 1217.332666][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.427825][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.516039][T14829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.736438][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1683'. [ 1218.151207][T14829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.553581][T14825] team0: Port device team_slave_0 added [ 1218.859510][T14825] team0: Port device team_slave_1 added [ 1218.901259][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.901655][T14852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.937219][T14852] bridge_slave_0: entered allmulticast mode [ 1218.957578][T14852] bridge_slave_0: entered promiscuous mode [ 1219.385348][T14979] binder: Bad value for 'stats' [ 1220.206659][T14978] 9p: Could not find request transport: rqŒaMport=0x0000000000004e23 [ 1220.590174][T14829] team0: Port device team_slave_0 added [ 1220.590645][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.591100][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.591414][T14852] bridge_slave_1: entered allmulticast mode [ 1220.622561][T14852] bridge_slave_1: entered promiscuous mode [ 1220.837383][T14829] team0: Port device team_slave_1 added [ 1220.871940][T14825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.871959][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.871985][T14825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.976578][T14825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.976598][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.976631][T14825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.224363][T14852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.248209][T14829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.248230][T14829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.248260][T14829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.321456][T14852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.335530][T14829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.335550][T14829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.335583][T14829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.381994][T14989] loop8: detected capacity change from 0 to 1024 [ 1221.418798][T14989] EXT4-fs error (device loop8): __ext4_fill_super:5596: comm syz.8.1688: inode #2: comm syz.8.1688: iget: illegal inode # [ 1221.418838][T14989] loop8: lost filesystem error report for type 5 error -117 [ 1221.420898][T14989] EXT4-fs (loop8): get root inode failed [ 1221.420921][T14989] EXT4-fs (loop8): mount failed [ 1221.422280][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1221.422304][ C0] EXT4-fs (loop8): initial error at time 1780253777: __ext4_fill_super:5596 [ 1221.422331][ C0] EXT4-fs (loop8): last error at time 1780253777: __ext4_fill_super:5596 [ 1221.911439][T14993] loop8: detected capacity change from 0 to 256 [ 1221.983309][T14993] FAT-fs (loop8): Directory bread(block 64) failed [ 1221.983341][T14993] FAT-fs (loop8): Directory bread(block 65) failed [ 1221.983412][T14993] FAT-fs (loop8): Directory bread(block 66) failed [ 1221.983443][T14993] FAT-fs (loop8): Directory bread(block 67) failed [ 1221.983512][T14993] FAT-fs (loop8): Directory bread(block 68) failed [ 1221.983530][T14993] FAT-fs (loop8): Directory bread(block 69) failed [ 1221.983599][T14993] FAT-fs (loop8): Directory bread(block 70) failed [ 1221.983616][T14993] FAT-fs (loop8): Directory bread(block 71) failed [ 1221.983683][T14993] FAT-fs (loop8): Directory bread(block 72) failed [ 1221.983700][T14993] FAT-fs (loop8): Directory bread(block 73) failed [ 1222.049817][T14852] team0: Port device team_slave_0 added [ 1222.124405][T14825] hsr_slave_0: entered promiscuous mode [ 1222.126733][T14825] hsr_slave_1: entered promiscuous mode [ 1222.128554][T14825] debugfs: 'hsr0' already exists in 'hsr' [ 1222.128578][T14825] Cannot create hsr debugfs directory [ 1222.140934][T14852] team0: Port device team_slave_1 added [ 1222.630220][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1691'. [ 1223.067231][T14829] hsr_slave_0: entered promiscuous mode [ 1223.069689][T14829] hsr_slave_1: entered promiscuous mode [ 1223.071681][T14829] debugfs: 'hsr0' already exists in 'hsr' [ 1223.071708][T14829] Cannot create hsr debugfs directory [ 1223.143060][T15000] loop8: detected capacity change from 0 to 32768 [ 1223.160536][T15000] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1692 (15000) [ 1223.182932][T14852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.182949][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.182975][T14852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.250525][T15000] BTRFS info (device loop8): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 1223.250573][T15000] BTRFS info (device loop8): using xxhash64 checksum algorithm [ 1223.941328][T15000] BTRFS info (device loop8): enabling ssd optimizations [ 1223.941359][T15000] BTRFS info (device loop8): turning on async discard [ 1223.941378][T15000] BTRFS info (device loop8): enabling free space tree [ 1223.976485][T14852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.976503][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.976528][T14852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.122633][T11088] BTRFS info (device loop8): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 1225.032698][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1693'. [ 1226.469216][T15024] loop8: detected capacity change from 0 to 512 [ 1226.470610][T15024] journal_path: Lookup failure for './file/file0/..//file0' [ 1226.470646][T15024] EXT4-fs: error: could not find journal device path [ 1227.400952][T14852] hsr_slave_0: entered promiscuous mode [ 1227.417240][T14852] hsr_slave_1: entered promiscuous mode [ 1227.432764][T14852] debugfs: 'hsr0' already exists in 'hsr' [ 1227.432796][T14852] Cannot create hsr debugfs directory [ 1227.542288][T14729] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1227.935818][T14729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1228.028527][T14729] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1228.866044][T14729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1228.939149][T15028] loop8: detected capacity change from 0 to 512 [ 1228.940451][T15028] EXT4-fs: Ignoring removed nobh option [ 1228.973275][T15028] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 1229.003695][T15028] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.1696: attempt to clear invalid blocks 1 len 1 [ 1229.033789][T15028] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1229.034446][T15028] EXT4-fs (loop8): Remounting filesystem read-only [ 1229.042417][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1229.042493][ C0] EXT4-fs (loop8): initial error at time 1780253785: ext4_clear_blocks:876: inode 13 [ 1229.042526][ C0] EXT4-fs (loop8): last error at time 1780253785: ext4_clear_blocks:876: inode 13 [ 1229.152530][T15028] EXT4-fs (loop8): 1 truncate cleaned up [ 1229.156430][T15028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.232751][T14729] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1229.278507][T14729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1229.367400][T14729] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1229.384873][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.441780][T14729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1230.649028][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1231.435799][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1699'. [ 1231.435824][T15063] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1699'. [ 1232.619459][T15078] tipc: Enabled bearer , priority 0 [ 1232.620202][T15076] syzkaller0: entered promiscuous mode [ 1232.620224][T15076] syzkaller0: entered allmulticast mode [ 1232.686919][T14729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.772920][T15069] tipc: Resetting bearer [ 1232.965842][T15069] tipc: Disabling bearer [ 1233.632340][T10781] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1233.817252][T10781] usb 9-1: Using ep0 maxpacket: 32 [ 1233.820345][T14729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.852039][T10781] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1233.890200][T10781] usb 9-1: config 7 has an invalid interface number: 187 but max is 0 [ 1233.890237][T10781] usb 9-1: config 7 has no interface number 0 [ 1233.890272][T10781] usb 9-1: config 7 interface 187 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1233.890293][T10781] usb 9-1: config 7 interface 187 has no altsetting 0 [ 1233.895978][T10781] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1233.896079][T10781] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.896149][T10781] usb 9-1: Product: syz [ 1233.896202][T10781] usb 9-1: Manufacturer: syz [ 1233.896246][T10781] usb 9-1: SerialNumber: syz [ 1234.179055][T10781] usb 9-1: Limiting number of CPorts to U8_MAX [ 1234.270349][T13297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.270516][T13297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.356543][T10781] usb 9-1: Unknown endpoint type found, address 0x07 [ 1234.356563][T10781] usb 9-1: Not enough endpoints found in device, aborting! [ 1234.644941][T10781] usb 9-1: USB disconnect, device number 27 [ 1234.929295][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1234.949726][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.949901][T13301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.471510][T15108] loop8: detected capacity change from 0 to 256 [ 1235.667260][T15108] FAT-fs (loop8): Directory bread(block 64) failed [ 1235.667297][T15108] FAT-fs (loop8): Directory bread(block 65) failed [ 1235.667414][T15108] FAT-fs (loop8): Directory bread(block 66) failed [ 1235.667441][T15108] FAT-fs (loop8): Directory bread(block 67) failed [ 1235.667553][T15108] FAT-fs (loop8): Directory bread(block 68) failed [ 1235.667579][T15108] FAT-fs (loop8): Directory bread(block 69) failed [ 1235.667805][T15108] FAT-fs (loop8): Directory bread(block 70) failed [ 1235.667830][T15108] FAT-fs (loop8): Directory bread(block 71) failed [ 1235.667925][T15108] FAT-fs (loop8): Directory bread(block 72) failed [ 1235.667949][T15108] FAT-fs (loop8): Directory bread(block 73) failed [ 1235.836873][T15108] FAULT_INJECTION: forcing a failure. [ 1235.836873][T15108] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.836912][T15108] CPU: 0 UID: 0 PID: 15108 Comm: syz.8.1704 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1235.836940][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1235.836954][T15108] Call Trace: [ 1235.836964][T15108] [ 1235.836974][T15108] dump_stack_lvl+0xe8/0x150 [ 1235.837009][T15108] should_fail_ex+0x46b/0x600 [ 1235.837045][T15108] should_failslab+0xa8/0x100 [ 1235.837081][T15108] kmem_cache_alloc_noprof+0x87/0x680 [ 1235.837113][T15108] ? alloc_empty_file+0x5b/0x1d0 [ 1235.837147][T15108] alloc_empty_file+0x5b/0x1d0 [ 1235.837177][T15108] path_openat+0x11b/0x3960 [ 1235.837223][T15108] ? try_to_take_rt_mutex+0x840/0xb00 [ 1235.837256][T15108] ? arch_stack_walk+0xfb/0x150 [ 1235.837303][T15108] ? __lock_acquire+0x6b5/0x2d10 [ 1235.837341][T15108] ? __pfx_path_openat+0x10/0x10 [ 1235.837381][T15108] ? kasan_save_track+0x4f/0x80 [ 1235.837410][T15108] ? kasan_save_track+0x3e/0x80 [ 1235.837437][T15108] ? __kasan_slab_alloc+0x6c/0x80 [ 1235.837479][T15108] ? do_raw_spin_lock+0x12b/0x2f0 [ 1235.837530][T15108] do_file_open+0x23e/0x4a0 [ 1235.837565][T15108] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1235.837613][T15108] ? __pfx_do_file_open+0x10/0x10 [ 1235.837646][T15108] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1235.837698][T15108] ? alloc_fd+0x679/0x6f0 [ 1235.837737][T15108] do_sys_openat2+0x115/0x200 [ 1235.837770][T15108] ? __pfx_do_sys_openat2+0x10/0x10 [ 1235.837801][T15108] ? ksys_write+0x248/0x270 [ 1235.837846][T15108] ? __pfx_ksys_write+0x10/0x10 [ 1235.837886][T15108] __x64_sys_openat+0x138/0x170 [ 1235.837919][T15108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.837944][T15108] do_syscall_64+0x174/0x580 [ 1235.837967][T15108] ? trace_irq_disable+0x3b/0x140 [ 1235.837996][T15108] ? clear_bhb_loop+0x40/0x90 [ 1235.838025][T15108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.838049][T15108] RIP: 0033:0x7f38d4aace59 [ 1235.838071][T15108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.838093][T15108] RSP: 002b:00007f38d2cfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1235.838118][T15108] RAX: ffffffffffffffda RBX: 00007f38d4d25fa0 RCX: 00007f38d4aace59 [ 1235.838136][T15108] RDX: 0000000000000a5d RSI: 0000200000000640 RDI: ffffffffffffff9c [ 1235.838153][T15108] RBP: 00007f38d2cfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.838168][T15108] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1235.838182][T15108] R13: 00007f38d4d26038 R14: 00007f38d4d25fa0 R15: 00007ffe640e19f8 [ 1235.838219][T15108] [ 1236.906547][ T5745] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1237.082254][ T5745] usb 9-1: Using ep0 maxpacket: 8 [ 1237.089511][ T5745] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1237.089555][ T5745] usb 9-1: can't read configurations, error -61 [ 1237.223771][ T5745] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1237.452690][ T5745] usb 9-1: Using ep0 maxpacket: 8 [ 1237.456190][ T5745] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1237.456240][ T5745] usb 9-1: can't read configurations, error -61 [ 1237.456679][ T5745] usb usb9-port1: attempt power cycle [ 1237.492461][ T9213] bridge_slave_1: left allmulticast mode [ 1237.492490][ T9213] bridge_slave_1: left promiscuous mode [ 1237.492706][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.664386][ T9213] bridge_slave_0: left allmulticast mode [ 1237.664428][ T9213] bridge_slave_0: left promiscuous mode [ 1237.664759][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.843084][ T5745] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1237.864639][ T5745] usb 9-1: Using ep0 maxpacket: 8 [ 1237.867037][ T5745] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1237.867078][ T5745] usb 9-1: can't read configurations, error -61 [ 1237.942550][ T9213] bridge_slave_1: left allmulticast mode [ 1237.942578][ T9213] bridge_slave_1: left promiscuous mode [ 1237.942787][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.042441][ T5745] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1238.076391][ T5745] usb 9-1: Using ep0 maxpacket: 8 [ 1238.078728][ T5745] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1238.078767][ T5745] usb 9-1: can't read configurations, error -61 [ 1238.079188][ T5745] usb usb9-port1: unable to enumerate USB device [ 1238.113969][ T9213] bridge_slave_0: left allmulticast mode [ 1238.114007][ T9213] bridge_slave_0: left promiscuous mode [ 1238.114320][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.392454][ T9213] bridge_slave_1: left allmulticast mode [ 1238.392494][ T9213] bridge_slave_1: left promiscuous mode [ 1238.392785][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.533593][ T9213] bridge_slave_0: left allmulticast mode [ 1238.533623][ T9213] bridge_slave_0: left promiscuous mode [ 1238.533836][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.983073][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.063277][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.125002][ T9213] bond0 (unregistering): Released all slaves [ 1239.208587][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.208709][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.403307][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.503485][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.587385][ T9213] bond0 (unregistering): Released all slaves [ 1239.866549][T15176] Mount JFS Failure: -22 [ 1240.154751][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.263008][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.104261][ T9213] bond0 (unregistering): Released all slaves [ 1241.919556][ T5745] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1242.067393][T14729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.162758][ T5745] usb 9-1: Using ep0 maxpacket: 8 [ 1242.174219][ T5745] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1242.174300][ T5745] usb 9-1: config 0 has no interface number 0 [ 1242.174425][ T5745] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1242.206328][ T5745] usb 9-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1242.206364][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.206387][ T5745] usb 9-1: Product: syz [ 1242.206403][ T5745] usb 9-1: Manufacturer: syz [ 1242.206420][ T5745] usb 9-1: SerialNumber: syz [ 1242.278657][ T5745] usb 9-1: config 0 descriptor?? [ 1242.522436][ T5745] i2c-cp2615 9-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 1242.532816][ T5745] usb 9-1: USB disconnect, device number 32 [ 1243.162030][ T9213] hsr_slave_0: left promiscuous mode [ 1243.213433][ T9213] hsr_slave_1: left promiscuous mode [ 1243.214543][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.260542][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.452356][ T9213] hsr_slave_0: left promiscuous mode [ 1243.504115][ T9213] hsr_slave_1: left promiscuous mode [ 1243.509647][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.543423][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.742323][ T9213] hsr_slave_0: left promiscuous mode [ 1243.763792][ T9213] hsr_slave_1: left promiscuous mode [ 1243.764654][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.808947][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.931772][T15235] loop8: detected capacity change from 0 to 32768 [ 1243.965158][T15235] XFS (loop8): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1244.072906][T15235] XFS (loop8): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0xc0. [ 1244.106178][T15235] XFS (loop8): Corruption warning: Metadata has LSN (1:192) ahead of current LSN (1:64). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1244.106221][T15235] XFS (loop8): log mount/recovery failed: error -22 [ 1244.170009][T15235] XFS (loop8): log mount failed [ 1244.793291][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1244.896908][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1247.676414][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1247.744791][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1247.943640][T15256] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1720'. [ 1248.424880][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1248.473155][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1248.892584][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1722'. [ 1249.163837][T14729] veth0_vlan: entered promiscuous mode [ 1249.199306][T14729] veth1_vlan: entered promiscuous mode [ 1249.381213][T14729] veth0_macvtap: entered promiscuous mode [ 1249.402676][T14729] veth1_macvtap: entered promiscuous mode [ 1249.481384][T14729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.904929][T14729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.015082][T13280] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.064223][T13302] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.070577][T13302] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.080686][T13302] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.337014][T15276] FAULT_INJECTION: forcing a failure. [ 1250.337014][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.337063][T15276] CPU: 1 UID: 0 PID: 15276 Comm: syz.8.1724 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1250.337090][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1250.337105][T15276] Call Trace: [ 1250.337114][T15276] [ 1250.337125][T15276] dump_stack_lvl+0xe8/0x150 [ 1250.337163][T15276] should_fail_ex+0x46b/0x600 [ 1250.337200][T15276] should_failslab+0xa8/0x100 [ 1250.337236][T15276] kmem_cache_alloc_noprof+0x87/0x680 [ 1250.337268][T15276] ? __anon_vma_prepare+0x117/0x4a0 [ 1250.337304][T15276] __anon_vma_prepare+0x117/0x4a0 [ 1250.337337][T15276] do_pte_missing+0x1d63/0x2940 [ 1250.337386][T15276] handle_mm_fault+0xdc2/0x14d0 [ 1250.337418][T15276] ? handle_mm_fault+0xed/0x14d0 [ 1250.337451][T15276] ? __pfx_handle_mm_fault+0x10/0x10 [ 1250.337478][T15276] ? lock_vma_under_rcu+0x45a/0x500 [ 1250.337512][T15276] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1250.337575][T15276] do_user_addr_fault+0xa73/0x1340 [ 1250.337614][T15276] ? rcu_is_watching+0x15/0xb0 [ 1250.337650][T15276] ? trace_page_fault_user+0x84/0x1e0 [ 1250.337685][T15276] exc_page_fault+0x6a/0xc0 [ 1250.337709][T15276] asm_exc_page_fault+0x26/0x30 [ 1250.337732][T15276] RIP: 0033:0x7f38d4964123 [ 1250.337755][T15276] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1250.337776][T15276] RSP: 002b:00007f38d2cfd470 EFLAGS: 00010206 [ 1250.337797][T15276] RAX: 0000000000000000 RBX: 00007f38d2cfd530 RCX: 00007f38ca8de000 [ 1250.337813][T15276] RDX: 00007f38d2cfd6d0 RSI: 0000000000000000 RDI: 00007f38d2cfd5d0 [ 1250.337829][T15276] RBP: 0000000000000000 R08: 000000000000000a R09: 000000000000039e [ 1250.337843][T15276] R10: 00000000000003b2 R11: 00007f38d2cfd530 R12: 000000000000011e [ 1250.337859][T15276] R13: 00007f38d4b62980 R14: 00000000000000eb R15: 00007f38d2cfd5d0 [ 1250.337895][T15276] [ 1250.337932][T15276] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1250.771255][T15276] loop8: detected capacity change from 0 to 4096 [ 1250.783544][T15276] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1251.243241][T15276] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1251.557702][T15276] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 1251.558184][T15276] ntfs3(loop8): ino=5, mi_enum_attr [ 1251.970756][T15282] Unsupported ieee802154 address type: 0 [ 1252.065949][T15283] loop8: detected capacity change from 0 to 256 [ 1252.116427][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1252.120035][T15283] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 1253.916883][T11092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1253.923275][T11092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1253.995827][T11092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1254.151019][T11092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1254.289744][T11092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1256.480043][ T61] Bluetooth: hci2: command tx timeout [ 1258.025983][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.029479][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.029858][T15285] bridge_slave_0: entered allmulticast mode [ 1258.121378][T15285] bridge_slave_0: entered promiscuous mode [ 1258.135430][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.138985][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.139716][T15285] bridge_slave_1: entered allmulticast mode [ 1258.181546][T15285] bridge_slave_1: entered promiscuous mode [ 1258.518702][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.562496][ T61] Bluetooth: hci2: command tx timeout [ 1258.570609][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.838419][T15285] team0: Port device team_slave_0 added [ 1258.865944][T15285] team0: Port device team_slave_1 added [ 1259.031328][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.031349][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.031381][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.171268][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.171288][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.171320][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.250714][T15338] loop8: detected capacity change from 0 to 32768 [ 1260.553032][T15338] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1260.553801][T15338] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop8": -EINTR [ 1260.554400][T15338] XFS (loop8): log mount failed [ 1260.642497][ T61] Bluetooth: hci2: command tx timeout [ 1262.722606][ T61] Bluetooth: hci2: command tx timeout [ 1262.899173][T11092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1262.919751][T11092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1262.926008][T11092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1262.930855][T11092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1262.931626][T11092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1264.108802][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1264.148035][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1264.203167][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1264.235704][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1264.237223][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1265.282663][T13722] Bluetooth: hci4: command tx timeout [ 1266.398043][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1266.411189][T11092] Bluetooth: hci5: command tx timeout [ 1266.501282][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1266.517756][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1266.573646][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1266.630076][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1267.384388][ T61] Bluetooth: hci4: command tx timeout [ 1268.091007][T15285] hsr_slave_0: entered promiscuous mode [ 1268.114167][T15285] hsr_slave_1: entered promiscuous mode [ 1268.132498][T15285] debugfs: 'hsr0' already exists in 'hsr' [ 1268.132532][T15285] Cannot create hsr debugfs directory [ 1268.482400][T13722] Bluetooth: hci5: command tx timeout [ 1269.002380][T13722] Bluetooth: hci7: command tx timeout [ 1269.454755][T13722] Bluetooth: hci4: command tx timeout [ 1270.634602][T13722] Bluetooth: hci5: command tx timeout [ 1270.844058][T15396] comedi comedi0: reset error (fatal) [ 1271.049992][T13722] Bluetooth: hci7: command tx timeout [ 1271.525454][T13722] Bluetooth: hci4: command tx timeout [ 1272.658930][T13722] Bluetooth: hci5: command tx timeout [ 1273.132534][T13722] Bluetooth: hci7: command tx timeout [ 1273.829496][T15421] loop8: detected capacity change from 0 to 512 [ 1273.831851][T15421] journal_path: Lookup failure for './file/file0/..//file0' [ 1273.831885][T15421] EXT4-fs: error: could not find journal device path [ 1276.770008][T13722] Bluetooth: hci7: command tx timeout [ 1278.263451][T15140] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1278.432377][T15140] usb 9-1: Using ep0 maxpacket: 16 [ 1278.434299][T15140] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.434336][T15140] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.434372][T15140] usb 9-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1278.434399][T15140] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.516813][T15140] usb 9-1: config 0 descriptor?? [ 1281.020187][T15140] usbhid 9-1:0.0: can't add hid device: -71 [ 1281.020285][T15140] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1281.242062][ T9213] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.001495][T15140] usb 9-1: USB disconnect, device number 33 [ 1282.820961][T15453] loop8: detected capacity change from 0 to 256 [ 1283.383545][T15453] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 256) [ 1283.415416][T14852] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 1285.629377][T15462] loop8: detected capacity change from 0 to 4096 [ 1285.645705][T15462] ntfs3: Unknown parameter 'ª' [ 1286.552908][T15462] loop8: detected capacity change from 0 to 4096 [ 1286.557873][T15462] ntfs3: Unknown parameter 'ª' [ 1286.857017][ T9213] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.313896][T15462] loop8: detected capacity change from 0 to 4096 [ 1287.317922][T15462] ntfs3: Unknown parameter 'ª' [ 1288.978431][T15465] loop8: detected capacity change from 0 to 2048 [ 1289.042306][T15465] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1290.781234][ T9213] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.913348][T14119] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1291.346884][T15371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.347625][T15371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.348380][T15371] bridge_slave_0: entered allmulticast mode [ 1291.377814][T15371] bridge_slave_0: entered promiscuous mode [ 1291.420034][T15371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.420376][T15371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.421167][T15371] bridge_slave_1: entered allmulticast mode [ 1291.448164][T15371] bridge_slave_1: entered promiscuous mode [ 1291.521236][T15369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.521581][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.538309][T15369] bridge_slave_0: entered allmulticast mode [ 1291.549476][T15369] bridge_slave_0: entered promiscuous mode [ 1291.588366][T15369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.588719][T15369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.589059][T15369] bridge_slave_1: entered allmulticast mode [ 1291.625828][T15369] bridge_slave_1: entered promiscuous mode [ 1291.658328][T15371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.707573][T15371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.796484][T15369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.872504][T15369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.878349][T15371] team0: Port device team_slave_0 added [ 1291.927696][T15371] team0: Port device team_slave_1 added [ 1292.005513][T15369] team0: Port device team_slave_0 added [ 1292.049215][T15369] team0: Port device team_slave_1 added [ 1292.059954][T15371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.059972][T15371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.060004][T15371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.125570][T14119] usb 9-1: Using ep0 maxpacket: 16 [ 1292.128620][T14119] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.128658][T14119] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1292.128684][T14119] usb 9-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1292.128702][T14119] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.139391][T14119] usb 9-1: config 0 descriptor?? [ 1292.489438][T15371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.489458][T15371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.489491][T15371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.425834][T14119] usb 9-1: can't set config #0, error -71 [ 1293.452272][T14119] usb 9-1: USB disconnect, device number 34 [ 1294.358876][ T9213] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.395753][T15491] loop8: detected capacity change from 0 to 64 [ 1300.370037][T15369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.370057][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.370088][T15369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.649613][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.649734][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.670596][T15369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.670610][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.670632][T15369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.960012][T15371] hsr_slave_0: entered promiscuous mode [ 1300.968434][T15371] hsr_slave_1: entered promiscuous mode [ 1300.970684][T15371] debugfs: 'hsr0' already exists in 'hsr' [ 1300.970715][T15371] Cannot create hsr debugfs directory [ 1301.188099][T15378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.188382][T15378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.188709][T15378] bridge_slave_0: entered allmulticast mode [ 1301.192064][T15378] bridge_slave_0: entered promiscuous mode [ 1301.328601][T15378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.329018][T15378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.329347][T15378] bridge_slave_1: entered allmulticast mode [ 1301.337674][T15378] bridge_slave_1: entered promiscuous mode [ 1301.806435][T15369] hsr_slave_0: entered promiscuous mode [ 1301.808905][T15369] hsr_slave_1: entered promiscuous mode [ 1301.833595][T15369] debugfs: 'hsr0' already exists in 'hsr' [ 1301.833628][T15369] Cannot create hsr debugfs directory [ 1302.013834][T15498] loop8: detected capacity change from 0 to 32768 [ 1302.015242][T15498] btrfs: Unknown parameter 'pcr' [ 1302.391338][T15378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.678169][T15378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.339950][T15378] team0: Port device team_slave_0 added [ 1307.583772][T15378] team0: Port device team_slave_1 added [ 1307.909706][ T9213] bridge_slave_1: left allmulticast mode [ 1307.909755][ T9213] bridge_slave_1: left promiscuous mode [ 1307.910115][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.700926][ T9213] bridge_slave_0: left allmulticast mode [ 1308.700971][ T9213] bridge_slave_0: left promiscuous mode [ 1308.701268][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.003139][ T5802] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1310.182332][ T5802] usb 9-1: Using ep0 maxpacket: 32 [ 1310.184859][ T5802] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1310.184892][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.205188][ T5802] usb 9-1: config 0 descriptor?? [ 1310.306555][ T5802] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1310.873219][ T5802] gspca_vc032x: reg_w err -71 [ 1310.873331][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873346][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873356][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873368][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873378][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873389][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873400][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873411][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873422][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873433][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873444][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873455][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873466][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873477][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873487][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873500][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873510][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873520][ T5802] gspca_vc032x: I2c Bus Busy Wait 00 [ 1310.873560][ T5802] gspca_vc032x: Unknown sensor... [ 1310.873652][ T5802] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1311.071718][ T5802] usb 9-1: USB disconnect, device number 35 [ 1315.157439][T13722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1315.257464][T13722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1315.260473][T13722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1315.311013][T13722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1315.347842][T13722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1316.715152][ T9213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.822326][ T9213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.868304][ T9213] bond0 (unregistering): Released all slaves [ 1317.605769][T13722] Bluetooth: hci0: command tx timeout [ 1317.641485][T15551] loop8: detected capacity change from 0 to 8 [ 1317.751136][T15378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.751158][T15378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.751189][T15378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.655709][T15378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.655729][T15378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.655762][T15378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.682266][T13722] Bluetooth: hci0: command tx timeout [ 1320.002903][ T33] I/O error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 1321.326242][T15568] loop8: detected capacity change from 0 to 32768 [ 1321.431387][T15568] (syz.8.1755,15568,1):ocfs2_slot_map_physical_size:227 ERROR: Slot map file is too small! (size 2, needed 8) [ 1321.764938][T13722] Bluetooth: hci0: command tx timeout [ 1323.842722][T13722] Bluetooth: hci0: command tx timeout [ 1325.069478][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1325.162873][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1325.171369][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1325.219357][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1325.239498][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1325.819568][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1325.877853][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1325.881848][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1325.888030][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1325.891868][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1327.242306][T15378] hsr_slave_0: entered promiscuous mode [ 1327.244898][T15378] hsr_slave_1: entered promiscuous mode [ 1327.247127][T15378] debugfs: 'hsr0' already exists in 'hsr' [ 1327.247156][T15378] Cannot create hsr debugfs directory [ 1327.365337][T13722] Bluetooth: hci1: command tx timeout [ 1328.242408][T13722] Bluetooth: hci3: command tx timeout [ 1328.789820][T15606] loop8: detected capacity change from 0 to 512 [ 1328.813827][T15606] EXT4-fs: Ignoring removed oldalloc option [ 1329.241148][T15606] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 1329.452986][T13722] Bluetooth: hci1: command tx timeout [ 1330.599270][ T61] Bluetooth: hci3: command tx timeout [ 1330.681519][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1330.779159][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1330.810626][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1330.826226][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1330.831592][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1331.522507][T13722] Bluetooth: hci1: command tx timeout [ 1332.642499][T13722] Bluetooth: hci3: command tx timeout [ 1333.042446][T13722] Bluetooth: hci8: command tx timeout [ 1333.602509][T13722] Bluetooth: hci1: command tx timeout [ 1333.884901][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1334.722724][T13722] Bluetooth: hci3: command tx timeout [ 1335.122474][T13722] Bluetooth: hci8: command tx timeout [ 1337.202368][T13722] Bluetooth: hci8: command tx timeout [ 1338.256051][T15545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.256488][T15545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.282816][T15545] bridge_slave_0: entered allmulticast mode [ 1338.287100][T15545] bridge_slave_0: entered promiscuous mode [ 1339.292581][T13722] Bluetooth: hci8: command tx timeout [ 1344.045999][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1763'. [ 1344.145716][T15545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.146058][T15545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.146467][T15545] bridge_slave_1: entered allmulticast mode [ 1344.188526][T15545] bridge_slave_1: entered promiscuous mode [ 1344.775209][T15651] loop8: detected capacity change from 0 to 32768 [ 1344.883920][T15651] OCFS2: ERROR (device loop8): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: suballoc slot 17919 [ 1344.883963][T15651] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1344.883996][T15651] OCFS2: File system is now read-only. [ 1344.884011][T15651] (syz.8.1764,15651,1):ocfs2_read_locked_inode:633 ERROR: status = -30 [ 1344.953202][T15651] (syz.8.1764,15651,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30 [ 1344.953589][T15651] (syz.8.1764,15651,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 1344.953620][T15651] (syz.8.1764,15651,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs? [ 1344.953648][T15651] (syz.8.1764,15651,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 1344.953674][T15651] (syz.8.1764,15651,1):ocfs2_initialize_super:2195 ERROR: status = -30 [ 1344.953791][T15651] (syz.8.1764,15651,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 1346.979961][ T9213] hsr_slave_0: left promiscuous mode [ 1347.039148][ T9213] hsr_slave_1: left promiscuous mode [ 1347.040448][ T9213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.040480][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.188521][ T9213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.188559][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.309702][T15659] loop8: detected capacity change from 0 to 4096 [ 1349.915049][ T9213] veth1_macvtap: left promiscuous mode [ 1349.915171][ T9213] veth0_macvtap: left promiscuous mode [ 1349.915534][ T9213] veth1_vlan: left promiscuous mode [ 1349.991878][ T9213] veth0_vlan: left promiscuous mode [ 1350.183115][T15661] loop8: detected capacity change from 0 to 512 [ 1350.189482][T15661] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.1767: bad orphan inode 13 [ 1350.189524][T15661] loop8: lost filesystem error report for type 5 error -117 [ 1350.189997][T15661] ext4_test_bit(bit=12, block=4) = 1 [ 1350.190020][T15661] is_bad_inode(inode)=0 [ 1350.190031][T15661] NEXT_ORPHAN(inode)=0 [ 1350.190041][T15661] max_ino=32 [ 1350.190051][T15661] i_nlink=1 [ 1350.277588][T15661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1350.281078][T15659] EXT4-fs warning (device loop8): dx_probe:813: inode #2: comm syz.8.1767: Hash code is SIPHASH, but hash not in dirent [ 1350.281117][T15659] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1767: Corrupt directory, running e2fsck is recommended [ 1350.281647][T15659] EXT4-fs warning (device loop8): dx_probe:813: inode #2: comm syz.8.1767: Hash code is SIPHASH, but hash not in dirent [ 1350.281677][T15659] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1767: Corrupt directory, running e2fsck is recommended [ 1351.041975][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.040731][T15666] loop8: detected capacity change from 0 to 512 [ 1352.056599][T15666] journal_path: Lookup failure for './file/file0/..//file0' [ 1352.056638][T15666] EXT4-fs: error: could not find journal device path [ 1354.723897][ T9213] team0 (unregistering): Port device team_slave_1 removed [ 1354.959455][ T9213] team0 (unregistering): Port device team_slave_0 removed [ 1355.751341][T15545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.845990][T15545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.093959][T15670] loop8: detected capacity change from 0 to 32768 [ 1356.279943][T15670] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1356.435039][T15670] XFS (loop8): Ending clean mount [ 1356.499571][T15545] team0: Port device team_slave_0 added [ 1356.605829][T15545] team0: Port device team_slave_1 added [ 1356.814875][T11088] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1357.654276][T15545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.654293][T15545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.654318][T15545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.788239][T15545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.788258][T15545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.788289][T15545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.375900][T15691] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1771'. [ 1362.103603][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.103725][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.180311][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1771'. [ 1365.278107][T15692] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1771'. [ 1366.113198][T15545] hsr_slave_0: entered promiscuous mode [ 1366.116005][T15545] hsr_slave_1: entered promiscuous mode [ 1368.199047][T15707] loop8: detected capacity change from 0 to 4096 [ 1368.213952][T15707] ntfs3(loop8): Primary boot: unsupported bytes per index 8192. [ 1368.214204][T15707] ntfs3(loop8): try to read out of volume at offset 0x1ffe00 [ 1372.805186][T15724] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1779'. [ 1373.155872][T15726] loop8: detected capacity change from 0 to 256 [ 1373.244811][T15726] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 256) [ 1373.911419][T15582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.911759][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.928597][T15582] bridge_slave_0: entered allmulticast mode [ 1373.964708][T15582] bridge_slave_0: entered promiscuous mode [ 1374.402370][T15730] loop8: detected capacity change from 0 to 32768 [ 1374.587552][T15730] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1374.649008][T15730] XFS (loop8): Ending clean mount [ 1374.710297][T15730] XFS (loop8): Quotacheck needed: Please wait. [ 1376.058452][T15730] XFS (loop8): Quotacheck: Done. [ 1377.361686][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1377.703392][T15582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.703754][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.704160][T15582] bridge_slave_1: entered allmulticast mode [ 1377.735720][T15582] bridge_slave_1: entered promiscuous mode [ 1377.750959][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1377.763556][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1377.784869][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1377.801481][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1378.203651][T15582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.245986][T15577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.247952][T15577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.248361][T15577] bridge_slave_0: entered allmulticast mode [ 1378.286152][T15577] bridge_slave_0: entered promiscuous mode [ 1378.330101][T15582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.330815][T15577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.331156][T15577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.331502][T15577] bridge_slave_1: entered allmulticast mode [ 1378.528142][T15577] bridge_slave_1: entered promiscuous mode [ 1379.426513][T11088] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1379.475957][T15577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.519354][T15582] team0: Port device team_slave_0 added [ 1379.814759][T15577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.563836][ T61] Bluetooth: hci2: command tx timeout [ 1382.642195][ T61] Bluetooth: hci2: command tx timeout [ 1382.871118][T15775] loop5: detected capacity change from 0 to 7 [ 1382.893107][T15775] Dev loop5: unable to read RDB block 7 [ 1382.893156][T15775] loop5: unable to read partition table [ 1382.893536][T15775] loop5: partition table beyond EOD, truncated [ 1382.893578][T15775] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1383.131402][T15582] team0: Port device team_slave_1 added [ 1383.403344][T15777] loop8: detected capacity change from 0 to 4096 [ 1383.419958][T15777] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1383.849623][T15777] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1383.850106][T15777] ntfs3(loop8): Failed to load $Bitmap (-22). [ 1384.722371][ T61] Bluetooth: hci2: command tx timeout [ 1386.802255][ T61] Bluetooth: hci2: command tx timeout [ 1387.679642][T13722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1387.782187][T13722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1387.784096][T13722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1387.830696][T13722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1387.907560][T13722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1388.603915][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1388.790555][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1388.851707][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1388.865599][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1388.868050][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1388.895025][T15609] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1389.875294][T13722] Bluetooth: hci4: command 0x0406 tx timeout [ 1390.091685][T13722] Bluetooth: hci0: command tx timeout [ 1390.183111][T15799] loop8: detected capacity change from 0 to 1024 [ 1390.189352][T15799] EXT4-fs: Ignoring removed mblk_io_submit option [ 1390.189386][T15799] EXT4-fs: Ignoring removed oldalloc option [ 1390.300043][T15799] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 1390.315525][T15799] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1390.315707][T15799] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1390.699236][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1390.819853][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1390.871383][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1391.122862][ T61] Bluetooth: hci5: command tx timeout [ 1391.162699][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1391.166545][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1392.210704][T13722] Bluetooth: hci0: command tx timeout [ 1392.749396][T11088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1393.202229][T11092] Bluetooth: hci5: command tx timeout [ 1393.442967][T11092] Bluetooth: hci7: command tx timeout [ 1393.823822][T15817] netlink: 17780 bytes leftover after parsing attributes in process `syz.8.1788'. [ 1394.240566][T15823] netlink: 'syz.8.1789': attribute type 36 has an invalid length. [ 1394.242715][T11092] Bluetooth: hci0: command tx timeout [ 1395.328951][T11092] Bluetooth: hci5: command tx timeout [ 1395.522838][T11092] Bluetooth: hci7: command tx timeout [ 1396.322427][T11092] Bluetooth: hci0: command tx timeout [ 1397.362749][T11092] Bluetooth: hci5: command tx timeout [ 1397.602658][T11092] Bluetooth: hci7: command tx timeout [ 1399.684129][T11092] Bluetooth: hci7: command tx timeout [ 1408.404943][ T37] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 1408.617921][ T37] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1408.617956][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.617980][ T37] usb 9-1: Product: syz [ 1408.617997][ T37] usb 9-1: Manufacturer: syz [ 1408.618014][ T37] usb 9-1: SerialNumber: syz [ 1408.624310][ T37] usb 9-1: config 0 descriptor?? [ 1408.831579][ T37] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1411.220139][ T37] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1412.278940][T14639] usb 9-1: USB disconnect, device number 36 [ 1421.810315][T15744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.810746][T15744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.811116][T15744] bridge_slave_0: entered allmulticast mode [ 1421.820832][T15744] bridge_slave_0: entered promiscuous mode [ 1423.015957][T15744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.016395][T15744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.016836][T15744] bridge_slave_1: entered allmulticast mode [ 1423.124879][T15744] bridge_slave_1: entered promiscuous mode [ 1423.600747][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.600878][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.314841][T15744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.463771][T15744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.586655][T15744] team0: Port device team_slave_0 added [ 1434.866785][T15744] team0: Port device team_slave_1 added [ 1437.882720][T15744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.882740][T15744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.882772][T15744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.159170][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1449.142440][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1449.145949][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1449.159937][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1450.130451][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1453.343916][ T61] Bluetooth: hci1: command tx timeout [ 1456.820877][ T61] Bluetooth: hci1: command tx timeout [ 1458.457246][ T9213] bridge_slave_1: left allmulticast mode [ 1458.571628][ T9213] bridge_slave_1: left promiscuous mode [ 1458.870801][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.152234][ T61] Bluetooth: hci1: command tx timeout [ 1463.251477][ T61] Bluetooth: hci1: command tx timeout [ 1470.578633][ T9213] bridge_slave_0: left allmulticast mode [ 1470.578675][ T9213] bridge_slave_0: left promiscuous mode [ 1470.578974][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.003162][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.003284][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.037484][ T9213] bridge_slave_1: left allmulticast mode [ 1489.363116][ T9213] bridge_slave_1: left promiscuous mode [ 1489.706829][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.972054][ C1] sched: DL replenish lagged too much [ 1502.933033][T11092] Bluetooth: hci2: command 0x0406 tx timeout [ 1507.726631][ T9213] bridge_slave_0: left allmulticast mode [ 1507.726675][ T9213] bridge_slave_0: left promiscuous mode [ 1507.727010][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.522309][T15891] Bluetooth: hci5: command 0x0406 tx timeout [ 1513.823372][T15891] Bluetooth: hci0: command 0x0406 tx timeout [ 1518.469443][T15891] Bluetooth: hci7: command 0x0406 tx timeout [ 1531.128286][ T9213] bridge_slave_1: left allmulticast mode [ 1531.128322][ T9213] bridge_slave_1: left promiscuous mode [ 1531.128546][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.393942][ T9213] bridge_slave_0: left allmulticast mode [ 1541.681916][ T9213] bridge_slave_0: left promiscuous mode [ 1543.499862][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.901299][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.901418][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1564.702328][ T9213] bridge_slave_1: left allmulticast mode [ 1564.702370][ T9213] bridge_slave_1: left promiscuous mode [ 1564.702665][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.474771][ T9213] bridge_slave_0: left allmulticast mode [ 1572.474821][ T9213] bridge_slave_0: left promiscuous mode [ 1572.475163][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.475323][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 1601.452188][ T39] INFO: task dhcpcd:5273 blocked for more than 153 seconds. [ 1601.452217][ T39] Not tainted syzkaller #0 [ 1601.452230][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1601.452241][ T39] task:dhcpcd state:D stack:21496 pid:5273 tgid:5273 ppid:5272 task_flags:0x400140 flags:0x00080000 [ 1601.452310][ T39] Call Trace: [ 1601.452320][ T39] [ 1601.452350][ T39] __schedule+0x16f9/0x5500 [ 1601.452428][ T39] ? __pfx___schedule+0x10/0x10 [ 1601.452481][ T39] rt_mutex_schedule+0x76/0xf0 [ 1601.452518][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 1601.452570][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 1601.452604][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 1601.452635][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1601.452690][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1601.452732][ T39] ? rtnl_dump_ifinfo+0xa31/0x1450 [ 1601.452768][ T39] mutex_lock_nested+0x168/0x1d0 [ 1601.452799][ T39] ? rtnl_dump_ifinfo+0xa31/0x1450 [ 1601.452837][ T39] rtnl_dump_ifinfo+0xa31/0x1450 [ 1601.452891][ T39] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1601.452937][ T39] ? __alloc_skb+0x1d0/0x7d0 [ 1601.453038][ T39] ? rcu_is_watching+0x15/0xb0 [ 1601.453075][ T39] ? trace_kmalloc+0x2a/0xf0 [ 1601.453109][ T39] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 1601.453143][ T39] ? __alloc_skb+0x1d0/0x7d0 [ 1601.453181][ T39] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1601.453218][ T39] rtnl_dumpit+0xcc/0x200 [ 1601.453258][ T39] netlink_dump+0x702/0xe10 [ 1601.453296][ T39] ? __pfx_netlink_dump+0x10/0x10 [ 1601.453352][ T39] ? netlink_recvmsg+0x5d6/0xa50 [ 1601.453376][ T39] ? kmem_cache_free+0x187/0x6c0 [ 1601.453431][ T39] ? netlink_recvmsg+0x5d6/0xa50 [ 1601.453506][ T39] netlink_recvmsg+0x690/0xa50 [ 1601.453545][ T39] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1601.453575][ T39] ? __pfx_aa_sk_perm+0x10/0x10 [ 1601.453602][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.453638][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 1601.453668][ T39] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1601.453695][ T39] sock_recvmsg_nosec+0x130/0x170 [ 1601.453730][ T39] ____sys_recvmsg+0x23d/0x4f0 [ 1601.453765][ T39] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1601.453810][ T39] ? import_iovec+0x73/0xa0 [ 1601.453852][ T39] ___sys_recvmsg+0x215/0x590 [ 1601.453885][ T39] ? __pfx____sys_recvmsg+0x10/0x10 [ 1601.453916][ T39] ? rcu_is_watching+0x15/0xb0 [ 1601.453952][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1601.453992][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1601.454044][ T39] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1601.454074][ T39] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1601.454111][ T39] ? rcu_is_watching+0x15/0xb0 [ 1601.454158][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.454185][ T39] do_syscall_64+0x174/0x580 [ 1601.454209][ T39] ? trace_irq_disable+0x3b/0x140 [ 1601.454239][ T39] ? clear_bhb_loop+0x40/0x90 [ 1601.454268][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.454293][ T39] RIP: 0033:0x7f4c8cbf9407 [ 1601.454315][ T39] RSP: 002b:00007fffeb377700 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1601.454353][ T39] RAX: ffffffffffffffda RBX: 00007f4c8cb6f780 RCX: 00007f4c8cbf9407 [ 1601.454371][ T39] RDX: 0000000000000000 RSI: 00007fffeb377790 RDI: 000000000000003e [ 1601.454386][ T39] RBP: 00007fffeb377774 R08: 0000000000000000 R09: 0000000000000000 [ 1601.454400][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001f40 [ 1601.454414][ T39] R13: 00007fffeb377780 R14: 00007fffeb377870 R15: 0000000000000000 [ 1601.454450][ T39] [ 1601.454500][ T39] INFO: task kworker/u8:46:13300 blocked for more than 153 seconds. [ 1601.454519][ T39] Not tainted syzkaller #0 [ 1601.454531][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1601.454542][ T39] task:kworker/u8:46 state:D stack:20824 pid:13300 tgid:13300 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1601.454609][ T39] Workqueue: events_unbound linkwatch_event [ 1601.454638][ T39] Call Trace: [ 1601.454647][ T39] [ 1601.454661][ T39] __schedule+0x16f9/0x5500 [ 1601.454731][ T39] ? __pfx___schedule+0x10/0x10 [ 1601.454784][ T39] rt_mutex_schedule+0x76/0xf0 [ 1601.454820][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 1601.454873][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 1601.454908][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 1601.454940][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1601.454983][ T39] ? linkwatch_event+0xe/0x60 [ 1601.455014][ T39] ? process_one_work+0x8be/0x1630 [ 1601.455057][ T39] ? linkwatch_event+0xe/0x60 [ 1601.455082][ T39] mutex_lock_nested+0x168/0x1d0 [ 1601.455118][ T39] ? process_one_work+0x8be/0x1630 [ 1601.455153][ T39] linkwatch_event+0xe/0x60 [ 1601.455179][ T39] process_one_work+0x98b/0x1630 [ 1601.455241][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1601.455275][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1601.455321][ T39] worker_thread+0xb49/0x1140 [ 1601.455393][ T39] kthread+0x388/0x470 [ 1601.455425][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1601.455446][ T39] ? __pfx_kthread+0x10/0x10 [ 1601.455477][ T39] ret_from_fork+0x514/0xb70 [ 1601.455512][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1601.455543][ T39] ? __switch_to+0xc79/0x1410 [ 1601.455574][ T39] ? __pfx_kthread+0x10/0x10 [ 1601.455604][ T39] ret_from_fork_asm+0x1a/0x30 [ 1601.455657][ T39] [ 1601.455687][ T39] INFO: task syz-executor:15369 blocked for more than 153 seconds. [ 1601.455705][ T39] Not tainted syzkaller #0 [ 1601.455718][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1601.455729][ T39] task:syz-executor state:D stack:19224 pid:15369 tgid:15369 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1601.455789][ T39] Call Trace: [ 1601.455797][ T39] [ 1601.455812][ T39] __schedule+0x16f9/0x5500 [ 1601.455883][ T39] ? __pfx___schedule+0x10/0x10 [ 1601.455934][ T39] rt_mutex_schedule+0x76/0xf0 [ 1601.455969][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 1601.456019][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 1601.456053][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 1601.456086][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1601.456135][ T39] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1601.456177][ T39] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1601.456210][ T39] mutex_lock_nested+0x168/0x1d0 [ 1601.456239][ T39] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1601.456274][ T39] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1601.456308][ T39] rtnl_net_dev_lock+0x257/0x2f0 [ 1601.456358][ T39] unregister_netdevice_notifier_dev_net+0x96/0x440 [ 1601.456395][ T39] ? nsim_destroy+0xb4/0x7f0 [ 1601.456419][ T39] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10[ 1601.456419][ T39] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10 [ 1601.456458][ T39] ? __pfx_mntput_no_expire_slowpath+0x10/0x10 [ 1601.456499][ T39] ? mntput_no_expire+0x1c/0x1c0 [ 1601.456525][ T39] ? rcu_is_watching+0x15/0xb0 [ 1601.456559][ T39] ? mntput_no_expire+0x1c/0x1c0 [ 1601.456589][ T39] nsim_destroy+0xfd/0x7f0 [ 1601.456622][ T39] __nsim_dev_port_del+0x14f/0x200 [ 1601.456656][ T39] nsim_dev_reload_destroy+0x288/0x490 [ 1601.456685][ T39] ? nsim_drv_remove+0x50/0x160 [ 1601.456717][ T39] nsim_drv_remove+0x58/0x160 [ 1601.456744][ T39] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1601.456770][ T39] device_release_driver_internal+0x46f/0x870 [ 1601.456831][ T39] bus_remove_device+0x45a/0x570 [ 1601.456873][ T39] ? __pfx_bus_remove_device+0x10/0x10 [ 1601.456908][ T39] ? up_read+0x23/0x40 [ 1601.456931][ T39] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1601.456971][ T39] device_del+0x52b/0x900 [ 1601.457018][ T39] ? __pfx_device_del+0x10/0x10 [ 1601.457065][ T39] device_unregister+0x21/0xf0 [ 1601.457104][ T39] del_device_store+0x2b0/0x370 [ 1601.457132][ T39] ? __pfx_del_device_store+0x10/0x10 [ 1601.457157][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 1601.457185][ T39] ? sysfs_kf_write+0x166/0x260 [ 1601.457217][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1601.457242][ T39] kernfs_fop_write_iter+0x3b0/0x540 [ 1601.457274][ T39] vfs_write+0x629/0xba0 [ 1601.457319][ T39] ? __pfx_vfs_write+0x10/0x10 [ 1601.457374][ T39] ? do_sys_openat2+0x14e/0x200 [ 1601.457403][ T39] ? kmem_cache_free+0x187/0x6c0 [ 1601.457454][ T39] ksys_write+0x156/0x270 [ 1601.457493][ T39] ? __pfx_ksys_write+0x10/0x10 [ 1601.457540][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.457566][ T39] do_syscall_64+0x174/0x580 [ 1601.457591][ T39] ? clear_bhb_loop+0x40/0x90 [ 1601.457620][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.457645][ T39] RIP: 0033:0x7f700ba8d68e [ 1601.457666][ T39] RSP: 002b:00007fff44ef8db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1601.457690][ T39] RAX: ffffffffffffffda RBX: 000055555b84a500 RCX: 00007f700ba8d68e [ 1601.457708][ T39] RDX: 0000000000000001 RSI: 00007fff44ef8e40 RDI: 0000000000000005 [ 1601.457724][ T39] RBP: 00007f700bb635f2 R08: 0000000000000000 R09: 0000000000000000 [ 1601.457740][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.457755][ T39] R13: 00007fff44ef8e40 R14: 00007f700c874620 R15: 0000000000000003 [ 1601.457792][ T39] [ 1601.457819][ T39] INFO: task syz-executor:15744 blocked for more than 153 seconds. [ 1601.457836][ T39] Not tainted syzkaller #0 [ 1601.457849][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1601.457860][ T39] task:syz-executor state:D stack:19112 pid:15744 tgid:15744 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1601.457917][ T39] Call Trace: [ 1601.457926][ T39] [ 1601.457940][ T39] __schedule+0x16f9/0x5500 [ 1601.457975][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1601.458043][ T39] ? __pfx___schedule+0x10/0x10 [ 1601.458097][ T39] rt_mutex_schedule+0x76/0xf0 [ 1601.458131][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 1601.458182][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 1601.458215][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 1601.458246][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1601.458291][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1601.458341][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1601.458384][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1601.458416][ T39] mutex_lock_nested+0x168/0x1d0 [ 1601.458453][ T39] rtnl_newlink+0x883/0x1bb0 [ 1601.458503][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1601.458539][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.458577][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.458611][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.458653][ T39] ? unwind_next_frame+0xa6/0x2550 [ 1601.458696][ T39] ? unwind_next_frame+0xa6/0x2550 [ 1601.458735][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1601.458787][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.458824][ T39] ? kernel_text_address+0xa5/0xe0 [ 1601.458859][ T39] ? __kernel_text_address+0xd/0x30 [ 1601.458890][ T39] ? unwind_get_return_address+0x4d/0x90 [ 1601.458924][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1601.458952][ T39] ? arch_stack_walk+0xfb/0x150 [ 1601.458995][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1601.459047][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1601.459083][ T39] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1601.459115][ T39] ? kasan_save_track+0x3e/0x80 [ 1601.459143][ T39] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1601.459176][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1601.459211][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1601.459249][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.459294][ T39] netlink_rcv_skb+0x232/0x4b0 [ 1601.459321][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1601.459368][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1601.459408][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1601.459439][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1601.459476][ T39] netlink_unicast+0x780/0x920 [ 1601.459530][ T39] netlink_sendmsg+0x813/0xb40 [ 1601.459568][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1601.459596][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1601.459638][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 1601.459671][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1601.459696][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1601.459733][ T39] __sys_sendto+0x402/0x590 [ 1601.459777][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1601.459841][ T39] ? fput_close_sync+0x11f/0x240 [ 1601.459873][ T39] ? __pfx_fput_close_sync+0x10/0x10 [ 1601.459914][ T39] __x64_sys_sendto+0xde/0x100 [ 1601.459952][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.459979][ T39] do_syscall_64+0x174/0x580 [ 1601.460003][ T39] ? trace_irq_disable+0x3b/0x140 [ 1601.460032][ T39] ? clear_bhb_loop+0x40/0x90 [ 1601.460062][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.460087][ T39] RIP: 0033:0x7f95a198d68e [ 1601.460108][ T39] RSP: 002b:00007ffd59d494e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1601.460134][ T39] RAX: ffffffffffffffda RBX: 00005555715f9500 RCX: 00007f95a198d68e [ 1601.460153][ T39] RDX: 0000000000000028 RSI: 00007f95a2774670 RDI: 0000000000000003 [ 1601.460169][ T39] RBP: 0000000000000001 R08: 00007ffd59d49564 R09: 000000000000000c [ 1601.460185][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1601.460201][ T39] R13: 0000000000000000 R14: 00007f95a2774670 R15: 0000000000000000 [ 1601.460239][ T39] [ 1601.460250][ T39] INFO: task syz-executor:15781 blocked for more than 153 seconds. [ 1601.460268][ T39] Not tainted syzkaller #0 [ 1601.460281][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1601.460292][ T39] task:syz-executor state:D stack:21832 pid:15781 tgid:15781 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1601.460364][ T39] Call Trace: [ 1601.460372][ T39] [ 1601.460387][ T39] __schedule+0x16f9/0x5500 [ 1601.460423][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1601.460491][ T39] ? __pfx___schedule+0x10/0x10 [ 1601.460544][ T39] rt_mutex_schedule+0x76/0xf0 [ 1601.460578][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 1601.460629][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 1601.460664][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 1601.460697][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1601.460752][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1601.460794][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1601.460826][ T39] mutex_lock_nested+0x168/0x1d0 [ 1601.460856][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1601.460895][ T39] rtnl_newlink+0x883/0x1bb0 [ 1601.460945][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1601.460980][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.461017][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.461050][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.461093][ T39] ? unwind_next_frame+0xa6/0x2550 [ 1601.461136][ T39] ? unwind_next_frame+0xa6/0x2550 [ 1601.461174][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1601.461221][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.461258][ T39] ? kernel_text_address+0xa5/0xe0 [ 1601.461291][ T39] ? __kernel_text_address+0xd/0x30 [ 1601.461333][ T39] ? unwind_get_return_address+0x4d/0x90 [ 1601.461369][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1601.461399][ T39] ? arch_stack_walk+0xfb/0x150 [ 1601.461443][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1601.461495][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1601.461530][ T39] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1601.461570][ T39] ? kasan_save_track+0x3e/0x80 [ 1601.461600][ T39] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1601.461633][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1601.461668][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1601.461704][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1601.461750][ T39] netlink_rcv_skb+0x232/0x4b0 [ 1601.461776][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1601.461813][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1601.461853][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1601.461878][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1601.461910][ T39] netlink_unicast+0x780/0x920 [ 1603.397894][ T39] netlink_sendmsg+0x813/0xb40 [ 1603.397953][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1603.397985][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1603.398026][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 1603.398060][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1603.398085][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1603.398121][ T39] __sys_sendto+0x402/0x590 [ 1603.398165][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1603.398213][ T39] ? file_init_path+0x3b/0x5b0 [ 1603.398277][ T39] ? rcu_is_watching+0x15/0xb0 [ 1603.398321][ T39] __x64_sys_sendto+0xde/0x100 [ 1603.398357][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.398382][ T39] do_syscall_64+0x174/0x580 [ 1603.398406][ T39] ? trace_irq_disable+0x3b/0x140 [ 1603.398437][ T39] ? clear_bhb_loop+0x40/0x90 [ 1603.398466][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.398491][ T39] RIP: 0033:0x7f79ef44d68e [ 1603.398512][ T39] RSP: 002b:00007ffcec1be258 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1603.398539][ T39] RAX: ffffffffffffffda RBX: 000055556749a500 RCX: 00007f79ef44d68e [ 1603.398558][ T39] RDX: 000000000000004c RSI: 00007f79f0234670 RDI: 0000000000000003 [ 1603.398575][ T39] RBP: 0000000000000001 R08: 00007ffcec1be2d4 R09: 000000000000000c [ 1603.398591][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1603.398606][ T39] R13: 0000000000000000 R14: 00007f79f0234670 R15: 0000000000000000 [ 1603.398644][ T39] [ 1603.398662][ T39] INFO: task syz-executor:15787 blocked for more than 155 seconds. [ 1603.398682][ T39] Not tainted syzkaller #0 [ 1603.398695][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1603.398705][ T39] task:syz-executor state:D stack:19816 pid:15787 tgid:15787 ppid:15784 task_flags:0x400140 flags:0x00080000 [ 1603.398768][ T39] Call Trace: [ 1603.398776][ T39] [ 1603.398791][ T39] __schedule+0x16f9/0x5500 [ 1603.398826][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1603.398893][ T39] ? __pfx___schedule+0x10/0x10 [ 1603.398946][ T39] rt_mutex_schedule+0x76/0xf0 [ 1603.398981][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 1603.399033][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 1603.399068][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 1603.399100][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1603.399144][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1603.399184][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1603.399238][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1603.399272][ T39] mutex_lock_nested+0x168/0x1d0 [ 1603.844828][ T39] rtnl_newlink+0x883/0x1bb0 [ 1603.844894][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1603.844930][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.844969][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.845002][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.845043][ T39] ? unwind_next_frame+0xa6/0x2550 [ 1603.845088][ T39] ? unwind_next_frame+0xa6/0x2550 [ 1603.845125][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1603.845190][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.845227][ T39] ? kernel_text_address+0xa5/0xe0 [ 1603.845261][ T39] ? __kernel_text_address+0xd/0x30 [ 1603.845293][ T39] ? unwind_get_return_address+0x4d/0x90 [ 1603.845327][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1603.845357][ T39] ? arch_stack_walk+0xfb/0x150 [ 1603.845400][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1603.845458][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1603.845494][ T39] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1603.845527][ T39] ? kasan_save_track+0x3e/0x80 [ 1603.845555][ T39] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1603.845588][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1603.845623][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1603.845662][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.845707][ T39] netlink_rcv_skb+0x232/0x4b0 [ 1603.845735][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1603.845772][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1603.845811][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1603.845836][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1603.845868][ T39] netlink_unicast+0x780/0x920 [ 1603.845939][ T39] netlink_sendmsg+0x813/0xb40 [ 1603.845977][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1603.846006][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1603.846048][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 1603.846080][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1603.846105][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1603.846139][ T39] __sys_sendto+0x402/0x590 [ 1603.846191][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1603.846225][ T39] ? file_init_path+0x3b/0x5b0 [ 1603.846288][ T39] ? rcu_is_watching+0x15/0xb0 [ 1603.846330][ T39] __x64_sys_sendto+0xde/0x100 [ 1603.846368][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.846394][ T39] do_syscall_64+0x174/0x580 [ 1603.846418][ T39] ? trace_irq_disable+0x3b/0x140 [ 1603.846447][ T39] ? clear_bhb_loop+0x40/0x90 [ 1603.846477][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.846503][ T39] RIP: 0033:0x7f80fb2ad68e [ 1603.846525][ T39] RSP: 002b:00007ffff8418c08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1603.846551][ T39] RAX: ffffffffffffffda RBX: 0000555575a94500 RCX: 00007f80fb2ad68e [ 1603.846570][ T39] RDX: 000000000000004c RSI: 00007f80fc094670 RDI: 0000000000000003 [ 1603.846586][ T39] RBP: 0000000000000001 R08: 00007ffff8418c84 R09: 000000000000000c [ 1603.846602][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1603.846617][ T39] R13: 0000000000000000 R14: 00007f80fc094670 R15: 0000000000000000 [ 1603.846654][ T39] [ 1603.846672][ T39] INFO: task syz-executor:15803 blocked for more than 155 seconds. [ 1603.846692][ T39] Not tainted syzkaller #0 [ 1603.846705][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1603.846716][ T39] task:syz-executor state:D stack:22560 pid:15803 tgid:15803 ppid:15797 task_flags:0x400140 flags:0x00080000 [ 1603.846782][ T39] Call Trace: [ 1603.846790][ T39] [ 1603.846805][ T39] __schedule+0x16f9/0x5500 [ 1603.846840][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1603.846909][ T39] ? __pfx___schedule+0x10/0x10 [ 1603.846961][ T39] rt_mutex_schedule+0x76/0xf0 [ 1603.846995][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 1603.847046][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 1603.847080][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 1603.847111][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1603.847154][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1603.847204][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1603.847246][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 1603.847278][ T39] mutex_lock_nested+0x168/0x1d0 [ 1603.847314][ T39] rtnl_newlink+0x883/0x1bb0 [ 1603.847363][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1603.847397][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.847436][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.847470][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.847511][ T39] ? unwind_next_frame+0xa6/0x2550 [ 1603.847552][ T39] ? unwind_next_frame+0xa6/0x2550 [ 1603.847591][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1603.847643][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.847679][ T39] ? kernel_text_address+0xa5/0xe0 [ 1603.847714][ T39] ? __kernel_text_address+0xd/0x30 [ 1603.847744][ T39] ? unwind_get_return_address+0x4d/0x90 [ 1603.847780][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1603.847808][ T39] ? arch_stack_walk+0xfb/0x150 [ 1603.847851][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1603.847902][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1603.847936][ T39] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1603.847971][ T39] ? kasan_save_track+0x3e/0x80 [ 1603.847999][ T39] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1603.848034][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1603.848067][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1603.848104][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 1603.848150][ T39] netlink_rcv_skb+0x232/0x4b0 [ 1603.848193][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1603.848232][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1603.848271][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1603.848296][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1603.848329][ T39] netlink_unicast+0x780/0x920 [ 1603.848377][ T39] netlink_sendmsg+0x813/0xb40 [ 1603.848413][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1603.848441][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1603.848481][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 1603.848514][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1603.848538][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1603.848573][ T39] __sys_sendto+0x402/0x590 [ 1603.848616][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1603.848649][ T39] ? file_init_path+0x3b/0x5b0 [ 1603.848713][ T39] ? rcu_is_watching+0x15/0xb0 [ 1603.848755][ T39] __x64_sys_sendto+0xde/0x100 [ 1603.848791][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.848817][ T39] do_syscall_64+0x174/0x580 [ 1603.848841][ T39] ? trace_irq_disable+0x3b/0x140 [ 1603.848870][ T39] ? clear_bhb_loop+0x40/0x90 [ 1603.848899][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.848924][ T39] RIP: 0033:0x7faccddfd68e [ 1603.848944][ T39] RSP: 002b:00007ffceae992f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1603.848969][ T39] RAX: ffffffffffffffda RBX: 0000555567068500 RCX: 00007faccddfd68e [ 1603.848986][ T39] RDX: 000000000000004c RSI: 00007faccebe4670 RDI: 0000000000000003 [ 1603.849003][ T39] RBP: 0000000000000001 R08: 00007ffceae99374 R09: 000000000000000c [ 1603.849018][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1603.849033][ T39] R13: 0000000000000000 R14: 00007faccebe4670 R15: 0000000000000000 [ 1603.849069][ T39] [ 1603.849106][ T39] [ 1603.849106][ T39] Showing all locks held in the system: [ 1603.849119][ T39] 4 locks held by ksoftirqd/0/15: [ 1603.849133][ T39] #0: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.849199][ T39] #1: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.849253][ T39] #2: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 1603.849316][ T39] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1603.849374][ T39] 4 locks held by pr/legacy/17: [ 1603.849387][ T39] #0: ffffffff8dfbccc0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 1603.849447][ T39] #1: ffffffff8dea45b8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 1603.849507][ T39] #2: ffffffff99bc0f98 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x178/0x1b50 [ 1603.849566][ T39] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1603.849629][ T39] 3 locks held by rcuc/0/21: [ 1603.849641][ T39] #0: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.849695][ T39] #1: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.849749][ T39] #2: ffffffff8dfcad80 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x205/0x1470 [ 1603.849816][ T39] 5 locks held by rcuc/1/29: [ 1603.849829][ T39] #0: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.849884][ T39] #1: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 1603.849948][ T39] #2: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1603.850003][ T39] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 1603.850063][ T39] #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __ip_vs_conn_in_get+0xa6/0x10f0 [ 1603.850126][ T39] 7 locks held by ktimers/1/30: [ 1603.850139][ T39] #0: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.850203][ T39] #1: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.850256][ T39] #2: ffff8880b87241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x610 [ 1603.850315][ T39] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1603.850376][ T39] #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd3/0x3e0 [ 1603.850436][ T39] #5: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.850489][ T39] #6: ffff88802bce0228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xbbf/0x1b80 [ 1603.850555][ T39] 1 lock held by khungtaskd/39: [ 1603.850568][ T39] #0: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1603.850663][ T39] 1 lock held by klogd/4967: [ 1603.850676][ T39] #0: ffffffff8e111470 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1603.850736][ T39] 1 lock held by udevd/4978: [ 1603.850750][ T39] #0: ffffffff8e111470 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1603.850808][ T39] 2 locks held by dhcpcd/5273: [ 1603.850822][ T39] #0: ffff888011170928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 1603.850875][ T39] #1: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa31/0x1450 [ 1603.850942][ T39] 2 locks held by kworker/0:3/5344: [ 1603.850955][ T39] #0: ffff88813fe4f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.851024][ T39] #1: ffffc90003a47c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.851093][ T39] 2 locks held by getty/5365: [ 1603.851106][ T39] #0: ffff8880363ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1603.851172][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1603.851245][ T39] 5 locks held by kworker/u8:41/9213: [ 1603.851259][ T39] #0: ffff88801b69e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.851326][ T39] #1: ffffc90004e17c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.851393][ T39] #2: ffffffff8f380c60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1603.851459][ T39] #3: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 1603.851524][ T39] #4: ffff88803de818b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_exit_rtnl+0xab/0x200 [ 1603.851588][ T39] 6 locks held by kworker/u8:1/13266: [ 1603.851602][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.851668][ T39] #1: ffffc90004de7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.851738][ T39] #2: ffff88802bce08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1603.851804][ T39] #3: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.851857][ T39] #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.851911][ T39] #5: ffff88802bce0228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_put_bss+0x5b/0x270 [ 1603.852027][ T39] 3 locks held by kworker/u8:15/13277: [ 1603.852043][ T39] #0: ffff888031d6f138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.852111][ T39] #1: ffffc900044cfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.852191][ T39] #2: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1603.852260][ T39] 7 locks held by kworker/u8:16/13278: [ 1603.852274][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.852344][ T39] #1: ffffc900044afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.852414][ T39] #2: ffff88803dd34310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1603.852484][ T39] #3: ffff88805ec78920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1603.852549][ T39] #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1603.852609][ T39] #5: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.852662][ T39] #6: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1603.852716][ T39] 4 locks held by kworker/u8:19/13280: [ 1603.852731][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.852797][ T39] #1: ffffc9000446fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.852866][ T39] #2: ffff88806d8f08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1603.852932][ T39] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 1603.852998][ T39] 2 locks held by kworker/u8:38/13294: [ 1603.853012][ T39] #0: ffff888032ea4938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.853079][ T39] #1: ffffc90004207c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.853151][ T39] 2 locks held by kworker/u8:43/13299: [ 1603.853164][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.853241][ T39] #1: ffffc90004cc7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.853311][ T39] 3 locks held by kworker/u8:46/13300: [ 1603.853326][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.853394][ T39] #1: ffffc90004ca7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.853461][ T39] #2: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1603.853518][ T39] 2 locks held by kworker/u8:50/13302: [ 1603.853532][ T39] #0: ffff88813fe8a938 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.853600][ T39] #1: ffffc90004c87c40 ((work_completion)(&(&krcp->krw_arr[i].rcu_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.853672][ T39] 3 locks held by kworker/0:2/14119: [ 1603.853686][ T39] #0: ffff88813fe4f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1603.853754][ T39] #1: ffffc90004a67c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1603.853821][ T39] #2: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1603.853883][ T39] 7 locks held by syz-executor/15369: [ 1603.853896][ T39] #0: ffff888035142480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1603.853965][ T39] #1: ffff88803682b878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1603.854020][ T39] #2: ffff88802948b2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1603.854078][ T39] #3: ffffffff8ec05258 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1603.854134][ T39] #4: ffff8880341aa160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1603.854201][ T39] #5: ffff8880332d2310 (&devlink->lock_key#28){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1603.854266][ T39] #6: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1603.854334][ T39] 1 lock held by syz-executor/15744: [ 1603.854348][ T39] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1603.854414][ T39] 2 locks held by syz-executor/15781: [ 1603.854428][ T39] #0: ffffffff8f8d2008 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1603.854486][ T39] #1: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1603.854551][ T39] 2 locks held by syz-executor/15787: [ 1603.854565][ T39] #0: ffffffff8f8d2168 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1603.854623][ T39] #1: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1603.854689][ T39] 2 locks held by syz-executor/15803: [ 1603.854703][ T39] #0: ffffffff8f8d2008 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1603.854762][ T39] #1: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1603.854827][ T39] 1 lock held by syz-executor/15884: [ 1603.854840][ T39] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1603.854901][ T39] 1 lock held by udevd/15895: [ 1603.854914][ T39] #0: ffff8880416891b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2c2/0x9e0 [ 1603.854976][ T39] [ 1603.854982][ T39] ============================================= [ 1603.854982][ T39] [ 1603.855008][ T39] NMI backtrace for cpu 1 [ 1603.855027][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1603.855052][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1603.855068][ T39] Call Trace: [ 1603.855078][ T39] [ 1603.855088][ T39] dump_stack_lvl+0xe8/0x150 [ 1603.855121][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1603.855153][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1603.855197][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1603.855233][ T39] sys_info+0x135/0x170 [ 1603.855261][ T39] watchdog+0xfd3/0x1030 [ 1603.855298][ T39] ? watchdog+0x1c9/0x1030 [ 1603.855332][ T39] kthread+0x388/0x470 [ 1603.855360][ T39] ? __pfx_watchdog+0x10/0x10 [ 1603.855385][ T39] ? __pfx_kthread+0x10/0x10 [ 1603.855415][ T39] ret_from_fork+0x514/0xb70 [ 1603.855450][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1603.855486][ T39] ? __switch_to+0xc79/0x1410 [ 1603.855514][ T39] ? __pfx_kthread+0x10/0x10 [ 1603.855545][ T39] ret_from_fork_asm+0x1a/0x30 [ 1603.855594][ T39] [ 1603.855604][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1603.855647][ C0] NMI backtrace for cpu 0 [ 1603.855665][ C0] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1603.855695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1603.855707][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x28/0x80 [ 1603.855732][ C0] Code: 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 58 e5 af 10 65 8b 35 79 e5 af 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 ec 0b 00 00 <89> d7 09 f7 74 11 85 f6 75 39 85 d2 74 35 83 b9 fc 16 00 00 00 74 [ 1603.855750][ C0] RSP: 0018:ffffc900001a7b88 EFLAGS: 00000246 [ 1603.855766][ C0] RAX: ffffffff890a5993 RBX: 1ffff1100b3ca8c1 RCX: ffff88801d6edd00 [ 1603.855781][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1603.855792][ C0] RBP: 0000000000007d10 R08: 0000000000000000 R09: 0000000000000000 [ 1603.855804][ C0] R10: dffffc0000000000 R11: ffffed10074658dd R12: ffffffff9a3eb520 [ 1603.855818][ C0] R13: 000000000003e880 R14: ffff888059e54600 R15: fffffbfff3475994 [ 1603.855833][ C0] FS: 0000000000000000(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000 [ 1603.855848][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1603.855861][ C0] CR2: 0000556f855021f0 CR3: 000000002ba50000 CR4: 00000000003526f0 [ 1603.855879][ C0] Call Trace: [ 1603.855886][ C0] [ 1603.855893][ C0] dst_destroy+0x223/0x570 [ 1603.855917][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1603.855940][ C0] rcu_cpu_kthread+0x99e/0x1470 [ 1603.855972][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 1603.856002][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1603.856029][ C0] ? schedule+0x90/0x360 [ 1603.856060][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1603.856079][ C0] smpboot_thread_fn+0x541/0xa50 [ 1603.856100][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1603.856125][ C0] kthread+0x388/0x470 [ 1603.856147][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1603.856166][ C0] ? __pfx_kthread+0x10/0x10 [ 1603.856191][ C0] ret_from_fork+0x514/0xb70 [ 1603.856216][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1603.856240][ C0] ? __switch_to+0xc79/0x1410 [ 1603.856262][ C0] ? __pfx_kthread+0x10/0x10 [ 1603.856285][ C0] ret_from_fork_asm+0x1a/0x30 [ 1603.856320][ C0] [ 1603.856649][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1603.856673][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1603.856699][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1603.856714][ T39] Call Trace: [ 1603.856724][ T39] [ 1603.856734][ T39] vpanic+0x56c/0xa60 [ 1603.856773][ T39] ? __pfx_vpanic+0x10/0x10 [ 1603.856816][ T39] panic+0xc5/0xd0 [ 1603.856848][ T39] ? __pfx_panic+0x10/0x10 [ 1603.856878][ T39] ? __x2apic_send_IPI_mask+0x158/0x190 [ 1603.856908][ T39] ? wq_watchdog_touch+0xf9/0x160 [ 1603.856944][ T39] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1603.856980][ T39] watchdog+0x102c/0x1030 [ 1603.857016][ T39] ? watchdog+0x1c9/0x1030 [ 1603.857051][ T39] kthread+0x388/0x470 [ 1603.857079][ T39] ? __pfx_watchdog+0x10/0x10 [ 1603.857105][ T39] ? __pfx_kthread+0x10/0x10 [ 1603.857135][ T39] ret_from_fork+0x514/0xb70 [ 1603.857169][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1603.857211][ T39] ? __switch_to+0xc79/0x1410 [ 1603.857239][ T39] ? __pfx_kthread+0x10/0x10 [ 1603.857269][ T39] ret_from_fork_asm+0x1a/0x30 [ 1603.857319][ T39] [ 1603.857939][ T39] Kernel Offset: disabled