last executing test programs: 10m27.933453172s ago: executing program 4 (id=27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000c40)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000e80)={@val={0x0, 0x86dd}, @val={0x2, 0x0, 0x11, 0x800}, @ipv6=@tcp={0xa, 0x6, "044e04", 0x14, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0xd, 0x0, 0x80}}}}}, 0x4a) 10m27.25071565s ago: executing program 4 (id=31): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x14, 0x30, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)='_', 0x1}], 0x1) 10m25.913862734s ago: executing program 4 (id=34): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m22.54529892s ago: executing program 4 (id=46): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000005980)=0x9, 0x4) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x88, &(0x7f0000000140)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x78, 0x34, 0x25]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f000000f600)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000000f6c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000000f700)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000000f740)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f000000f7c0)='./mnt\x00', &(0x7f000000f800)='overlay\x00', 0x0, &(0x7f000000f840)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000002ee40)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f000002ee80)={@id={0x2, 0x0, @a}}) 10m21.468824895s ago: executing program 2 (id=50): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x56a4c5c) pwritev(r1, &(0x7f0000001540)=[{&(0x7f0000000480)="04cf", 0x2}], 0x1, 0x1, 0xad) 10m20.712055798s ago: executing program 2 (id=53): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001380)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000013c0)={&(0x7f0000001400)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001480)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000014c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r2, 0x84, 0x85, &(0x7f00000015c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7fffffff}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001680)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x8d, 0xffffffb9, 0x1a}, 0x9c) 10m19.996401462s ago: executing program 2 (id=58): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x4, 0x6b08, 0x7}}]}]}}}]}, 0x88}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 10m19.624797629s ago: executing program 4 (id=60): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x1, 0xc, 0x8, 0x2, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80, 0x2}, {0x5000, 0x7000, 0xe, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0xeeee8000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x0, 0x1, 0xa4, 0x1, 0x45}, {0x1, 0x54000, 0x9, 0x7, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x8000000, 0xf, 0xc1, 0x0, 0x7, 0xab, 0x8, 0xd, 0x9, 0xf7, 0x97}, {0x2, 0x3000, 0xe, 0xb0, 0xb1, 0xff, 0x1, 0x20, 0x86, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x84, 0x40, 0x60}, {0x8000000, 0x4000, 0x8, 0x0, 0xcd, 0xb, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x7e}, {0xeeee0000, 0x30}, {0x0, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x9, 0x1, 0x100000, [0x6800000000000000, 0x7, 0x3, 0x8]}) r4 = syz_create_resource$kvm_nested_state(&(0x7f0000000300)=@vmx={0x100, 0x0, 0x2080, {0x8000000, 0xc000, {0x1}, 0x0, 0x2}, {"c42d72eda00fc65ded432f19c9eba8ec7afe460a4fcb127f6a648002639795f726e07308e8a69bf40476b43f2f96165a7aba509c7b52758711f9ce171fd52a6ba8fa33af71db2da27b9eb8fd48195e3bcd6077730017a67d9abadef05197fe9dd2cca8a27f4cd5bd64e4bf49946d55120c7e376a0b932f48aedf9ff86ce91a6acb877f00650983924fec95855fcafe6caf2ed53396e0247d69232902c514d59e75fd2367f34e41339565c67fbb4b506dce85663e60fee3a4db869a8883629ab55ed0c4a81288fb60a932a44f592b4d104abc45f467b00240554b7731eb9087cda5ee40015cd56b43fe9cf8959a777667621aeaf4fc88ac7e5f23d412600ea52e7652520339d1da698729ae2ef484aa1c04dd927400ee3de9ef0b83cef7985f7bc2bc38e0defa476b1b0b32f1964568529253c6591c5984de8d9dfc1ddd57495b051c1650c5ebc4f855712b18542209db3a1b35ee23a2b0d786dd3826744b26a1b04f0a81851122359ccbd0efb14a1818ef917df679d07e9c171ce01a3d34375c135c2e127f10131105e0c3641a6bfaabe624107fb68248aad1686c61a66c58a5248c51809db047c17b988654f590449f2caa38588306d1c74b2b4e58ec28fd8377e1e9edeafc87b04df0567bf90cc2719b4b7941cb93340213677003201027b26fb3d11cffc58de0d96b6d0f653dd89d07da94d22dc87420c64319269737fdada912bce9afc60d089d3e221b497e3f9415c4807ece5ab4903b6065948aa3842a7edc7f863856ee2b0097ace6329d3156e76b9f953f3750b2b2b5d26cc102a986e7a598daa2c9f8f6879b68549749633ca4f2e8e3769f709e5f3e6a25c7d051cd08ad09d6fdeaff9d1bb6f701111d38a09ff65a594c97908d9a1dcd348747413ff96399659d14c58312cb5c10b0538eb11764f8aa64f597250bd3f7e23944d7a3a61ad3815be325c3488965b47b05a825069bff5198442de27b5989d8ebf32e166cd54db7a458c336ab0a75e2c5423b0a01ae4cf5801a443590ede8c26514768ef91b4bdf4b4f2683eea8ecd0cd1f7cd7e044e768fc2443f604026d32243adc4d9b2a4288216ffb0a868cc2d572e7a5cb330f501ce7936ae98e38c7a67de3349d65da6c9306c9bb5dc2dfafbfc0d7b3cee6c4d1e6373b97437777c89876b96bd745276cfb6aaa7b4f4fab4b6ce3376a0ca0d19a95634f47581a5badc8623d78da8ef7f522b55109f7c70d6c5faa72ec55aa9b2209c43ad3eea89f84ef997199fa5dd8d739549403ac99cc0e647aef99d492c0bcb6be21f252200fe83968f9af93ce2eb4be9629eded9636ec4c05421f11bfdb08f7240bbbaca180afdaffa1a65875111d8462bb7ac9ad4b493b22040c1ea8e9ccc78823f5da538b24b216fc9f4f6630c0cc05942c4a155352032e5fbf5db20a9b026193f9f7eb5b0a933d26c5a06432c5851844e6bf8f8a5662c368da09f8d382c58ef2364735d4e4affd706a1cad1cfc3b186e44b8dae5b3c0b24055d0e8de1b38263bcbcec532e3d0cfe8892382b8e0d1acc41c70aee4872dd64e5772b2dafa9ac4dfcb419269d2e2a4e1e5131e5cbb4a5b7157e5963c76f747a1d18e9e0f75c47d69e144572ca2f6022e9c6b322a215a60b266d4865585b78ccbc78065fc6d1670a446b5616b38cf672376807a2b9b5f7fb71879ed89638083cb365385b6122b5d06c74d2b015cb31d561028bfc8b106e124a8d7629981c1f83742464ed06a6a1cf34914e67b80d18263430681414e69db4da707a6af9cd505a4aeb6b35fda25c19db9371e0d368b4805036577868cf6e687574181510f8598e54ccc3c63835eca4626611819634256f17e46de468b271e5229e151abb6aaf2397a6ccaf9127d565da4d4a6c2a718d529ce4feb34be67874cbeba77b102b1f04bc06a676a20ddf6f0ba20731c16ab68b39cf39df4631b09c0e951cd553e44ca49ac18226f79a3dec65ae61d5de3f4db7b3e36680aa27c8d38c7a32407ec63ceb6fd832f03105896f8f6dd4c4eeefc71f7a20da8d2f8d7c0ebf39661add71c07d12f175214c0feaec70f32d59b52c5bdfba6c54a7ad9c77d67fd8f5b986106250aacbac3e1d27540b5135176e7881b3291329f1e2509bffe1fa0e2e0f5e0fac11b38d6c63ef80d8bcea0c7178fe804cfb5377ce4681d704faf8b506d0a5a3bce6816c241807eb001a133f9c2312c0f273f3dc2dd59e8e619440fd4ad625486476210272faa0d144a132d7d6d765dcca69189e19c8bc6171182a8ba27f8c6d57794878159863720fa8044aa1581453fd7b5ec249c2def3921dcaf4aabca7eda1342bc94c71fbaf10e40071f26b2053cb435655a351faa9211227f34cbd01e9535314b27158443c8b759078cd607d7bb4b58d9803c0fd4bd1cb268a5c2d37cc44bc96a54e7a26cbcb68c2c86ff348f7bfdece54e740d5f1c6f06aca66f4c9299668f8a44d4c03e56305eac55bcfd8f6335c276dee5e53b3327a78999a6fc9e15e6fa12979c8c3b7a6344d5024d19c4481d379cb201629e77c5a3478e517a0f6cd00508bc33f6947b7616fcb651cabe7892de90d58bf28660d5aa79959243f2254769858b9248c304da6358f6502d33d6ea8a6891697e13e861f11bd32c094b637155483d4076b088b5cbb9c7c75d840eda7afafe07e57d1da752c2c5fc2506dd25248228871f8bb97f483dc7630f0cd5cc92899ada5346d844372159cadc5cf7752fa12f54479c00f0b6f626f773e8f3bf0380375cd4ebca1576147e3ed9b8c8070cc241ea5ceccaadd7d3dbc1d97ee577e7bc07494abd767da0ddfadc3e785ac5aa0507bdedb03de3caedc90353416d15a5c6f34f773ccc8ff802d05ca8615e1a3246a5e2f63dd12b1e85d6e894f8100d8807ba699464fc6657db37af2535cc194d4eeec7c2604d3ed4d61d29a33fcd6876cb53370cbe11e374a6574fb2d0e4833e9954b65e67c715e8fbef7d1b5e25b67908a4b19c07c1247a4539eb3028f4f122602fcf618c9eb601b93263150e1b18a8d22ca55ee6ff37401b27d222995277f13d3b7f86967fbfda4b84f629342d1c62e65f827006a4fe8f1ceb29b7955337dcb9b845e76791eb71b58fcf28a90389ff103dbb1a5fae8399701e1ebe4860884685d9be93f4e64b5a212aff8319907df3305e6ed9960ea65c227ea640b39227337c8327033ccbb684bf03ade17a2d8f2a053b276880c26063feb99922e8769e60cddc779240f4269685d9d83464adb6f3b382b5b7b35a8494c347a9655943d978ddef5cd5511a8993deda6b3ea133b8ff9bc2fb26dfcf53ea7a4569bc3da65df2ba9f137663ef6f8fca6255df1605a7f91d7e39f2918f6e9f82a2ec1c31451fc910a530ed176b06f97c9352b078462c8ed462916dd85142fe900aac7381de212165062339da5d1633f76df1919a2b3108c7c82d05e66b293870dec8e94e7c97a2ee79a84574e00856866c185d8d7fdea06e223759d0c9830645e1991b8b1b59d13c51b36ca215793c60387ca3cd23db82458dbf3bb19b380d1f1d4f06613eb4001cb77efa931556e424858db2157f25b0ce56d76edb8103d8dd8ae009d9f05c305a5982c46871785789f62c8115a87a1f9829b0635c556a3a14c4b291fc6bb979359ddfa282613257708420284ad02b957f263a1a4ccfbb678dba18e49866debe0758b0ac64c29941b47e98aa2a524c23e509165043f2e77260260ab63d3038ed9e007477c4bdadf3756a37e42c3ecd2783793a94ea7dc2e1312bb9887c92937b7c9b25f2ba1726181bbaaeec40ea55ec759d12e14abdd2bc8b4720c2751e69cb5c7e2695ccfc542528edf9260e05f5a0469f15af07995b4d90719d40527fa13fd03e84c4f786cb3d39a9f7a736a4c42bfde1af9a6cda559564335a15f6441418bec41355bb70758491164784347ea19a5f9e27859f91a573cf4e3c22064d5bdf69133e3e00c7f3b867adb28a0d62ef6c6e1573e272ec0ae975a7b475e19deefff957bca449a7af8c641348cc217a5fe9d8a47775b029bd54d516c5d3ba7204a719a72976e503537b6b3a9c93112890e3f92ec0316fc52598fa4da08121c9b219ff5d9c574469886c4b385b6f63f424eb6f54b728d14851703a1fd0912805b6ab17e04f8baf7310a1bc9c6a5abc35912e3d78c204c10e02a15e8576eb939ddc0f8b881476d0ba4c9c1fe02637c81c17874a9570b8243b9bd6c714092a6b2ece0545768c2d1a0d93d8e1e32216877e0e75a261ab5c153a855b48e51c798657c62932211b89f8820d4c0355c4f541284cdce1ecc9f9c1e4a9e66259009500cb208f1308e49c66a7e82bdfe8abcaa2e5edc901a16c0e0783ce399a01c93ea566332bbd228116f7ec286b21f24b8198bd20338cb8936e3f82b5cfa9b31aa90bd67a7ca1579e0a8b070de2d963c9da52e023d2fef01505f8e9dc31054b4476836d59eb3c7cf229a2e71caf8f26cfb52a9be84b42afc0f8adafa39c30feca57da1c6d5a894ef6398903a0c1f55a481a61549b36d151fa9c5b6ada9e5bd58103c09af39887ee2526c65b4fb61ff62fa13ddfc1c219a2d95768b82dacc32a966368010ab687bf0c3575d22e1141fff935693956527f7f0b77abddefc4049a6b9fa81af98a11c75366743c52a115f6d25c63db443bc745036646ca3f999424183914abf4a85a088195f51509d2d35c800f9af56b662e29b7eb36c1f5789d7d29fd4a4324be0885656495d2c007e291a800e36992310c6dbceef04d828c9f7c0841c6add5def79f0e4edeb50647e6f0384e27ac71da1ac9dc3d9b307add301686cf28aebf8ce63c2f15cdeba144deb8d652d872dac701b05e6515add19257449bb153189ae2a2ff540aa05d3b08b078cbecd13a0545fe00c3a662475875d8bb2e028c66fbb4ddfbc8e0a0aee545d9f868922b517eedc7482094ebecf44a03c078516af0f8c11fb6f91ec0f02579e51e99fa578ded790a3fe8de7dc74369311190223b20e46d32cf0bbaeabc7eab616ef527d43a493703d3cb157577ddb0268ce165fa40ebcfc4dbbbd32193675e79ba5be0562b323e3ecbc0a6d091ebd1e6dd87ec3d68fbb1ddbb56d2f8c999d65bc093b07c58b9c620b4e27b9e1a2e08edfe0b2e57a993c45228f7b570fe9a85e2637249691289b7cac199cf32889b68a1e686381a473b84e2fe6642e4845c5ac5dbe128b41678c12e524a37999b243b45a7f67bb80c9d98e983c756523e19f284a2c6346e734c279a356d938c562ce5bcca22d6c24cb6a69c9c0a4fae702932d9a19681e3af39f9a5f301c0c97ce0eb911e6feb00853dbb69ba71c27b089b8470d275a2ec533c3b71e0aea7ce648d5578af757316c4e776c8007872e21e8938c4792bf276d656b6be2d6b6625c55ada80e372b5c2c8d3d12628fa9271c52dfca7562e1f45bc0204729e32238c4e402a88101ec3e160e1bafe4b003678ffa22dd1e013f02694ba7b30e83302b0e88e9d71c75f3ccb76e3cb8d741a57b7f1bb44ffbf5a6f099ce55a0a558e3e80b0982eaafb9d86f45dbbe4bf4b568fe53c5a6ec522f5202e86ae6aae9ae99c04d9fcf9d7eed92c6cd9d4804793b6e00a5aa206cdeda8d9e54b3daa06a671b8a3d5cbb86f8ce38ce1435243c7a9834c49929d12d6f4194a823326d17078d9a680284d59485f71be2fa23c1f36d409ceab6ac0bfa36770475edb4c3e6cc82087704c9af2c80c84c9bb8735de3ac5ea4f040a6d3dce439c47ae1c0ae5768ca7dbb93a9461f3f27cb858718b34b2870d0b150b0a34d3e9759e0741b59a1946", "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"}}) ioctl$KVM_GET_NESTED_STATE_res(r3, 0xc080aebe, r4) ioctl$KVM_SET_NESTED_STATE_res(r3, 0x4080aebf, r4) 10m19.381767307s ago: executing program 2 (id=61): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x280440e, &(0x7f0000000080)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@errors_remount}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@minixdf}, {@usrquota}, {@errors_remount}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0xbdb, &(0x7f0000000b80)="$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") mount$bind(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000940)='./file0/../file0\x00', &(0x7f0000000980)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000009c0)='./file0/../file0\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000a40)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000a80)='.\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002c40)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) 10m18.544720146s ago: executing program 2 (id=64): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='name', 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000540)={@empty, @broadcast, 0xffffffffffffffff, "9ab19992b41cbaa3d0fa45d10f54a9b04b78fdca4f68049161bc377385408ed2", 0x1, 0x5, 0x6, 0xffff0001}, 0x3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000140), 0x9) 10m17.498313867s ago: executing program 2 (id=69): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20008820) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000580), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0) 10m16.790354758s ago: executing program 32 (id=69): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20008820) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000580), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0) 10m16.716634858s ago: executing program 4 (id=73): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f00000002c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f000000f800)=@filename='mtd0\x00', &(0x7f000000f840)='./file0\x00', &(0x7f000000f880)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f000000f8c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f000000f900)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000000f940)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f000000f980)='./file1\x00', 0x42, 0x140) write$FUSE_WRITE(r0, &(0x7f000000f9c0)={0x18}, 0xfffffdef) unlink(&(0x7f000000fa00)='./file1\x00') creat(&(0x7f000000fa40)='./bus\x00', 0xad) 10m16.716345765s ago: executing program 33 (id=73): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f00000002c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f000000f800)=@filename='mtd0\x00', &(0x7f000000f840)='./file0\x00', &(0x7f000000f880)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f000000f8c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f000000f900)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000000f940)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f000000f980)='./file1\x00', 0x42, 0x140) write$FUSE_WRITE(r0, &(0x7f000000f9c0)={0x18}, 0xfffffdef) unlink(&(0x7f000000fa00)='./file1\x00') creat(&(0x7f000000fa40)='./bus\x00', 0xad) 7m17.135367745s ago: executing program 5 (id=526): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r2, &(0x7f0000000840)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) readv(0xffffffffffffffff, &(0x7f00000198c0), 0x0) 7m16.599524276s ago: executing program 5 (id=527): socket$netlink(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x2004c000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480), 0x242, 0x0) write$dsp(r2, &(0x7f00000004c0)='`', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000500)='maps\x00') read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) 7m14.728558115s ago: executing program 5 (id=529): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000940)=""/102392, 0x18ff8) r3 = syz_open_dev$vbi(&(0x7f0000019940), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000019980)={0x5, 0x2}) 7m12.987067188s ago: executing program 5 (id=533): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xfe, 0x45e, &(0x7f0000000740)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) creat(&(0x7f0000000c00)='./bus\x00', 0x0) unshare(0x600) r1 = timerfd_create(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000580)=0xa) mount(&(0x7f0000000c40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000c80)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000cc0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x100000001, 0x4, 0x0, 0x0, 0x4, 0x19, "ef359f413bb938e0ddd407ae6dddfbd1ce5d29c2ee5e5ca9030fe8ee56285677df701905b9aafab4afaaf755a3f6a000", "036c47c6780820d1cbf7968259ca171c00a411ef54e424d71e14ef3dc177e9b48b000000000000000000000000000000000000000000000000000800", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x10000010]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x0) 7m11.038340434s ago: executing program 5 (id=536): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019ac0)=0x7) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000019b40)={&(0x7f0000019b80)={0x2, 0xff7e, @multicast2}, 0x10, &(0x7f0000019bc0)=[{&(0x7f0000019c00)='\b\x00', 0x2}, {&(0x7f0000019c40)="c2a9d6b63808", 0x6}], 0x2, &(0x7f0000000400)}, 0x2400c044) 7m9.576185197s ago: executing program 5 (id=540): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) sendto$inet6(r1, &(0x7f0000000240)='X', 0x34000, 0xe0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) accept(r0, 0x0, 0x0) 7m7.63596706s ago: executing program 34 (id=540): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) sendto$inet6(r1, &(0x7f0000000240)='X', 0x34000, 0xe0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) accept(r0, 0x0, 0x0) 3m56.749293841s ago: executing program 7 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000d40)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000dc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e80), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000300)=0xce, 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x14, &(0x7f00000003c0)=[{&(0x7f0000000400)=' ', 0x100120}], 0x1}, 0x0) 3m55.275323344s ago: executing program 7 (id=818): prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x34f304df) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001200)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001240), 0x0, 0x0) read$msr(r2, &(0x7f0000001e80)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./debug\x00', &(0x7f0000000ec0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./debug/ieee80211/phy0/netdev:wlan0/hw_queues\x00', 0x0, 0x0) read(r3, 0x0, 0x0) 3m49.703913676s ago: executing program 7 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x61) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x10800, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f0000000240)="$eJzskj9v00AYxn9nGydBEIHElIUMEX8GiOMAYoMx7GwsRIkJEQ6Q2BIkioQRQhkYECOfgK+BxBegQ1Wpa+eojbp0qVzd+Ww57Ufo/YY897733nPve/HbaBpVgNPNcsBzFDZ1doTAAW6LLLe2Mv2ldVfrT6AG/Nd1L3T+m9ZGNF+42ZImN1UC+mEYzJrAscpF88U7lYqefbVYK6u9zXIgF6+BNE1TmRuCLOcaHOU1NjAt1TQcuKWGSAsfOYgM7gLtePKxHc0XD8aT/igYBe99u/vEe+R5j/32m3EYeNmvKLWhR0HqfaBSpUDuXwG+6/iQbUSpNclVEDVeFWdd/YbUBeexSmeVOtLvb9FXxc3/L3jJHWRbn5LcR2ZbysVBjdRDYOug45T6y+6qqo2HfAiHKwQiP1bDKTzyf1IFflJy7z5NuJ7trXRNS2tP6x+tB6A+rf2T7U/GkX780NG9BFw+9+N41pHXZivBFyCOZ76V5/wbSfnB5K2/re3h/lkX3tZgMBgMBoPBYDAYLhtnAQAA///CnXTs") prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./trace\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) write(r3, &(0x7f0000000a80)='prev_comm ~ \"*\"', 0xf) 3m48.717848787s ago: executing program 7 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000004240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001d240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001480), 0x57, 0x10, &(0x7f00000014c0), 0xffffffffffffffc9}, 0x48) 3m46.625099434s ago: executing program 7 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000019340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f00000193c0), &(0x7f0000019400), &(0x7f0000019440)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000019480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019540)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000019580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3m37.913826896s ago: executing program 7 (id=837): ioctl(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x48810) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x4004044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000015c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c050}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001780)={0x1, 0x16, "c7ec4b0b6e7d986f5dfa695f381d120237352421e5e0"}, &(0x7f00000017c0)=0x1e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0], 0x0, 0xb6, &(0x7f0000001b80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0x41, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) 3m22.047954386s ago: executing program 35 (id=837): ioctl(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x48810) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x4004044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000015c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c050}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001780)={0x1, 0x16, "c7ec4b0b6e7d986f5dfa695f381d120237352421e5e0"}, &(0x7f00000017c0)=0x1e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0], 0x0, 0xb6, &(0x7f0000001b80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0x41, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) 8.470117435s ago: executing program 8 (id=1126): syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_WRITE_DEF_DATA_LEN={{}, 0x8}}}, 0x7) 7.653392781s ago: executing program 8 (id=1127): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000000)={0x21, "bfffabae9ebef352f700f0211504fc48e1192a9cba7b41c804c93c66b6318e82c2"}}) 7.170733674s ago: executing program 8 (id=1129): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[], 0x50}}, 0x400c040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), 0x0, 0xffffffff}, 0x38) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x60680, 0x0) sendfile(r0, r1, 0x0, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x7) 6.889975244s ago: executing program 8 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000003800)=""/102392, 0x18ff8) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0xffffffffffffffda, 0x0, {{0x5, 0x0, 0x2, r0}}}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) getpgrp(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000140)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) wait4(0x0, &(0x7f00000002c0), 0x8, &(0x7f0000000300)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000400)="560002002a000000000000000001010001000000000000000000000000000000000000000000000000ffffffffffffff", 0x30) 5.618770098s ago: executing program 8 (id=1133): symlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0\x00') creat(&(0x7f000000e440)='./file0\x00', 0x68) 2.267437335s ago: executing program 6 (id=1148): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x2f0, 0x11, 0x148, 0x3e8, 0x0, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x2f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file1\x00', {0x5}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x7ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x7, 0x16, 0xe, 0x36, 0x23, 0x8, 0x2f, 0x30, 0x13, 0x10, 0x33, 0x27, 0x30, 0x2a, 0x13, 0x7], 0x1, 0x5, 0x3e}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e6) 1.9000214s ago: executing program 6 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x4, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x24001050}, 0x4004084) 1.832589112s ago: executing program 3 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5, 0x3100}}, 0x1c}}, 0x0) 1.832243873s ago: executing program 0 (id=1153): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='g', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, 0x0}}], 0x2, 0x40) 1.83214484s ago: executing program 1 (id=1154): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000080)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) 1.710536472s ago: executing program 6 (id=1155): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000100)={0x1}) 1.686112884s ago: executing program 3 (id=1156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b0, 0x190, 0x340, 0x340, 0x190, 0x270, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x8000004, 0xb, 0x5}}, @common=@srh1={{0x90}, {0x33, 0x1, 0x2, 0x18, 0x6, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xff000000, 0xff, 0xffffff00], [0x0, 0xff000000, 0xffffffff, 0xff000000], 0x84, 0xf0}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0xffffff00], [0x0, 0xff000000], 'veth1_macvtap\x00', 'xfrm0\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2}, {0xffffffffffffffff, 0x6}, {0x2}, 0x800001}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xffffffff, 0xff000000, 0xff, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xff], 'veth0_virt_wifi\x00', 'ip6gre0\x00', {}, {0xff}, 0x33, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) 1.65092185s ago: executing program 1 (id=1157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x36, 0x0, &(0x7f0000000440)="c9188e9bb95d02ff4284860186dd7ee8fa5a5745d3881fb6b93cdeeb6b589a04abcaffe8f96e9f90a39946c637dcac13b3ebeb678c27", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.646819081s ago: executing program 0 (id=1158): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 1.508622427s ago: executing program 6 (id=1159): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) 1.508385885s ago: executing program 3 (id=1160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b00200001900010000000000fcdbdf250a010101000000000000000000000000ac1e00010000000000000000000000004e2100004e24fffc020000005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff030000000000000000000000008000000300000000000000fdffffffff1f00000000000000000000fdffffff00000000010001000000000004010500fc010000000000000000000000000001000004d42b00000002000000ac1414bb000000000000180000000000000000000003ff00020000000200000240000000ac1414bb000000000000000000000000000004d52400000002000000000000000000000000000000000000010700000002030900f9ffffff0000000003000000fc010000000000000000000000000001000004d433000000020000000a010102000000000000000000000000013500000200a6000000000000000080d8070000ac1414bb000000000000000000000000000004d66c0000000200000064010100000000000000000000000000023500000203070004000000050000003e3c0000e8001100fe8800ffff0000000000000000000101fe8000000000000000000000000000cbac1414bb000000000000000000000000ac1e0101000000000000000000000000ff010000060000000200020064010100000000000000000000000000fe8800000000000000000000000000010a010102000000000000000000000000fe8000000000000000000000000000bb2b0100000035000002000a00fe8000000000000000000000000000aae0000001000000000000000000000000fc000000000000000000000000000001fc010000000000000000000000000001ff010000053500000a0002000c0008"], 0x2b0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.493579814s ago: executing program 0 (id=1161): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x3fffffffffffff69, &(0x7f00000000c0)=[{0x0, 0x1000}]}) 1.479454144s ago: executing program 1 (id=1162): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.316416864s ago: executing program 3 (id=1163): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)="d8000000100081046881f782db44b904021d080b3f000000e8fe55a11800150006001400000000120800040044000000a80016000a3f014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) 1.311829199s ago: executing program 1 (id=1164): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x2002) write$evdev(r0, 0x0, 0x0) 1.256406112s ago: executing program 0 (id=1165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000004000090125bd700000000000047c000004002a800c00018006000600800a00000c000280080019"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.200383415s ago: executing program 6 (id=1166): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x52, 0x1, 0x0, 0x4, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), 0x0) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) fsopen(&(0x7f0000000240)='ext3\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f00000196c0)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000019e40)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2538181b080d29308f0e1ac6e7149b3468959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f7227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850ab8afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c0c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f198a037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e251f2409f610b2db8d1f48c13b65df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b70894902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd66555347015daa85f25057f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba021943939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3ef4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a06f8c04ef23d537639a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f7953c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939b6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b0500000000000000a1d998a2017aef0948a68cb0b3e35cb80dd349e891ae04000000080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a63c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5347d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4fcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a9a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f30ad92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d821a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) write(r1, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$XFS_IOC_GETBMAP(r7, 0xc0205826, 0x0) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0x4000002) 1.162532414s ago: executing program 8 (id=1167): socket$pppl2tp(0x18, 0x1, 0x1) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_inode_killpriv\x00') prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001380), 0x318, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) syz_mount_image$ext4(&(0x7f00000014c0)='ext4\x00', &(0x7f0000001500)='./file2\x00', 0x10e, &(0x7f0000001540), 0x3, 0x470, &(0x7f0000001580)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r3, &(0x7f00000000c0)=""/4098, 0x1002) 1.147124589s ago: executing program 3 (id=1168): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0xa, 0x1f6, &(0x7f0000000440)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000500), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 237.187691ms ago: executing program 6 (id=1169): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@updsa={0x10c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x400000000}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e24, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0x10c}}, 0x0) 191.955058ms ago: executing program 1 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x109, 0x70bd25, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 179.606679ms ago: executing program 0 (id=1171): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0xb001, 0xff03, 0x418, 0x220, 0x0, 0x0, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@random="9122ff7a3c88", @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @remote, 0x0, 0xffffff00, 0xb, 0xf, {@mac=@broadcast, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xfff6, 0x85, 0x204, 0x4, 0x7fb, 0x6, 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast2, 0x2, 0x1}}}, {{@arp={@broadcast, @empty, 0xff, 0x0, 0x2, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'nicvf0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x640100ff, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) 74.720837ms ago: executing program 1 (id=1172): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0xcbf, 0x4e, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x8, 0x8, 0x101, 0x7}}) 24.54967ms ago: executing program 3 (id=1173): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000880)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") truncate(&(0x7f0000000b40)='./file0\x00', 0x6) 0s ago: executing program 0 (id=1174): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") llistxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=""/227, 0xe3) kernel console output (not intermixed with test programs): nting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.218467][ T7806] syzkaller0: entered promiscuous mode [ 231.218481][ T7806] syzkaller0: entered allmulticast mode [ 231.420692][ T7811] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 233.535182][ T33] audit: type=1326 audit(1794624628.969:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.440" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a1ba94d9 code=0x7fc00000 [ 233.570886][ T7834] syzkaller0: entered promiscuous mode [ 233.570901][ T7834] syzkaller0: entered allmulticast mode [ 233.719283][ T1740] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 233.785305][ T33] audit: type=1326 audit(1794624629.219:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.440" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f07a1ba94d9 code=0x7fc00000 [ 233.885995][ T1740] usb 2-1: Using ep0 maxpacket: 8 [ 233.886797][ T1740] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.035838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 235.229131][ C0] net_ratelimit: 19 callbacks suppressed [ 235.343961][ T1740] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 235.344022][ T1740] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.344041][ T1740] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.344063][ T1740] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.344083][ T1740] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.344137][ T1740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.503672][ T1740] usb 2-1: can't set config #16, error -71 [ 235.518589][ T1740] usb 2-1: USB disconnect, device number 6 [ 238.862550][ T7869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 239.706718][ T7873] tipc: Started in network mode [ 239.706742][ T7873] tipc: Node identity 4, cluster identity 4711 [ 239.706752][ T7873] tipc: Node number set to 4 [ 239.782608][ T7860] event trace: Could not enable event p [ 240.430625][ T6032] net_ratelimit: 197 callbacks suppressed [ 245.448838][ T7903] loop6: detected capacity change from 0 to 33280 [ 245.466514][ C0] net_ratelimit: 32 callbacks suppressed [ 245.519456][ T7903] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.463: inode has both inline data and extents flags [ 245.519486][ T7903] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 245.519786][ T7903] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.463: couldn't read orphan inode 15 (err -117) [ 245.519812][ T7903] loop6: lost filesystem error report for type 5 error -117 [ 245.521541][ T7903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.882647][ T7907] xt_TCPMSS: Only works on TCP SYN packets [ 246.485322][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.947494][ T7926] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.745869][ C1] net_ratelimit: 41 callbacks suppressed [ 255.710104][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.710153][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.765468][ T6486] net_ratelimit: 43 callbacks suppressed [ 255.833223][ T7960] syzkaller0: entered promiscuous mode [ 255.833238][ T7960] syzkaller0: entered allmulticast mode [ 257.212608][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.482'. [ 257.815678][ T7994] loop3: detected capacity change from 0 to 33280 [ 257.820416][ T7994] EXT4-fs: Ignoring removed oldalloc option [ 257.830813][ T7994] EXT4-fs (loop3): filesystem is read-only [ 257.834055][ T7994] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 257.836427][ T7994] EXT4-fs (loop3): filesystem is read-only [ 257.836444][ T7994] EXT4-fs (loop3): orphan cleanup on readonly fs [ 257.912934][ T7994] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.486: bg 0: block 64: padding at end of block bitmap is not set [ 257.912967][ T7994] loop3: lost filesystem error report for type 5 error -117 [ 257.915834][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 257.915850][ C0] EXT4-fs (loop3): initial error at time 1794624653: ext4_validate_block_bitmap:445 [ 257.915872][ C0] EXT4-fs (loop3): last error at time 1794624653: ext4_validate_block_bitmap:445 [ 257.978147][ T7994] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 257.978171][ T7994] loop3: lost filesystem error report for type 5 error -117 [ 257.997840][ T7994] EXT4-fs (loop3): 1 orphan inode deleted [ 258.004216][ T7994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.130048][ T7997] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 258.147344][ T46] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.147505][ T53] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.147538][ T53] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.147569][ T53] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.199391][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.996046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 260.003680][ T1740] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 261.211693][ T7399] net_ratelimit: 21 callbacks suppressed [ 261.222435][ T1740] usb 7-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 261.223497][ T1740] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.223563][ T1740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.266042][ T1740] usb 7-1: config 0 descriptor?? [ 261.271845][ T1740] pwc: Askey VC010 type 2 USB webcam detected. [ 261.575137][ T1740] pwc: send_video_command error -71 [ 261.575151][ T1740] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 261.575261][ T1740] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 261.628311][ T1740] usb 7-1: USB disconnect, device number 5 [ 262.014810][ T8026] netlink: 'syz.6.496': attribute type 10 has an invalid length. [ 262.015722][ T8026] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 264.983735][ T8055] loop6: detected capacity change from 0 to 33280 [ 265.011920][ T8055] EXT4-fs: Ignoring removed i_version option [ 265.283473][ T8055] EXT4-fs (loop6): 1 orphan inode deleted [ 265.457160][ T8055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.514047][ T8060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.991782][ T8065] loop1: detected capacity change from 0 to 16 [ 266.006153][ T8055] EXT4-fs error (device loop6): __ext4_add_entry:2414: inode #2: comm syz.6.506: Directory hole found for htree leaf block 0 [ 266.008628][ T8065] erofs (device loop1): mounted with root inode @ nid 36. [ 266.065220][ T5645] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 266.081515][ T8065] erofs (device loop1): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 266.081641][ T8065] erofs (device loop1): read error -117 @ 1 of nid 89 [ 266.083339][ T33] audit: type=1800 audit(1794624661.529:114): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.505" name="file2" dev="loop1" ino=89 res=0 errno=-117 [ 266.269018][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.487860][ T8084] Bluetooth: hci0: Invalid link address type 32 for 66:55:44:33:22:11 [ 266.597019][ T7401] net_ratelimit: 23 callbacks suppressed [ 266.633772][ T8091] loop3: detected capacity change from 0 to 256 [ 266.644719][ T8091] exfat: Unknown parameter '00000000001041410600000' [ 266.655926][ T5632] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 266.675932][ T1740] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 266.806803][ T5632] usb 1-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 266.808193][ T5632] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.809465][ T5632] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.811845][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.811863][ T5632] usb 1-1: Product: syz [ 266.811876][ T5632] usb 1-1: Manufacturer: syz [ 266.811889][ T5632] usb 1-1: SerialNumber: syz [ 266.864743][ T1740] usb 6-1: not running at top speed; connect to a high speed hub [ 266.864775][ T1740] usb 6-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 266.895294][ T1740] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.895434][ T1740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.917714][ T5632] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 266.943066][ T5632] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 266.944554][ T1740] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 266.944629][ T1740] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 266.997590][ T5632] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 267.148561][ T5632] usb 6-1: USB disconnect, device number 2 [ 267.870794][ T8094] loop6: detected capacity change from 0 to 164 [ 267.871504][ T8094] iso9660: Unknown parameter 'o4•ñ$Ç(’ockperm' [ 270.368354][ T8123] loop3: detected capacity change from 0 to 33792 [ 270.988477][ T8075] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 271.147541][ T8075] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 271.234967][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.286739][ T5632] usb 1-1: USB disconnect, device number 10 [ 271.705897][ C0] net_ratelimit: 21 callbacks suppressed [ 272.217484][ T5632] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 272.252834][ T5632] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 272.265626][ T5632] ti_usb_3410_5052 1-1:2.0: device disconnected [ 272.355940][ T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 272.515873][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 272.516743][ T11] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 272.518091][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.518145][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.753243][ T11] usb 4-1: config 0 descriptor?? [ 272.765198][ T11] hub 4-1:0.0: bad descriptor, ignoring hub [ 272.765214][ T11] hub 4-1:0.0: probe with driver hub failed with error -5 [ 272.791230][ T11] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 272.888542][ T33] audit: type=1326 audit(1794624668.319:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.5.527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58827a94d9 code=0x0 [ 272.928760][ T5632] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 273.101333][ T5632] usb 1-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.105558][ T5632] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.105588][ T5632] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.105642][ T5632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.136522][ T8134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 273.183273][ T5632] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.846413][ T5632] usb 1-1: USB disconnect, device number 11 [ 276.682506][ T8158] loop5: detected capacity change from 0 to 33280 [ 277.393249][ C1] net_ratelimit: 28 callbacks suppressed [ 277.514628][ T8158] EXT4-fs (loop5): 1 truncate cleaned up [ 277.675167][ T8158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. ** 801 printk messages dropped ** ** 16 printk messages dropped ** [ 278.223948][ T8158] loop5: detected capacity change from 33280 to 0 [ 278.271725][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.272412][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.272973][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.273620][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.464402][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.483370][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.483735][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.484053][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.484378][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 278.549766][ T6178] EXT4-fs warning (device loop5): ext4_empty_dir:3116: inode #11: lblock 2: comm syz-executor: error -EIO reading directory block [ 279.446309][ T8173] netlink: 68 bytes leftover after parsing attributes in process `syz.6.538'. [ 279.669912][ T6178] Buffer I/O error on dev loop5, logical block 13, lost sync page write [ 279.670033][ T6178] Buffer I/O error on dev loop5, logical block 7, lost sync page write [ 279.670051][ T6178] EXT4-fs error (device loop5): ext4_sync_inode_metadata:6810: inode #11: block 7: comm syz-executor: IO error syncing inode [ 279.670065][ T6178] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -5 [ 279.670085][ T6178] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 279.670093][ T6178] EXT4-fs (loop5): I/O error while writing superblock [ 279.681945][ T6178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.709912][ T6178] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 279.709936][ T6178] EXT4-fs (loop5): I/O error while writing superblock [ 281.196552][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.196572][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.400169][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.400196][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.508832][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.508859][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.590736][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.668608][ T11] usb 4-1: USB disconnect, device number 9 [ 281.886375][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.886404][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.943631][ T8191] FAULT_INJECTION: forcing a failure. [ 281.943631][ T8191] name failslab, interval 1, probability 0, space 0, times 0 [ 281.943665][ T8191] CPU: 1 UID: 0 PID: 8191 Comm: syz.1.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.943693][ T8191] Tainted: [L]=SOFTLOCKUP [ 281.943701][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 281.943730][ T8191] Call Trace: [ 281.943738][ T8191] [ 281.943747][ T8191] dump_stack_lvl+0xe8/0x150 [ 281.943785][ T8191] should_fail_ex+0x3eb/0x540 [ 281.943812][ T8191] should_failslab+0xa8/0x100 [ 281.943843][ T8191] __kmalloc_cache_noprof+0x9e/0x600 [ 281.943875][ T8191] ? tcf_block_get_ext+0x14f/0x17d0 [ 281.943905][ T8191] ? tcf_block_get_ext+0x14f/0x17d0 [ 281.943930][ T8191] tcf_block_get_ext+0x14f/0x17d0 [ 281.943961][ T8191] tcf_block_get+0x67/0xa0 [ 281.943982][ T8191] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 281.944007][ T8191] multiq_init+0x72/0x2b0 [ 281.944033][ T8191] ? __pfx_multiq_init+0x10/0x10 [ 281.944057][ T8191] qdisc_create+0xc23/0x1450 [ 281.944079][ T8191] ? lockdep_rtnl_is_held+0x26/0x40 [ 281.944100][ T8191] ? qdisc_lookup+0x364/0x6c0 [ 281.944127][ T8191] tc_modify_qdisc+0x17af/0x2390 [ 281.944156][ T8191] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 281.944174][ T8191] ? __mutex_lock+0x5cd/0x15a0 [ 281.944229][ T8191] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 281.944247][ T8191] rtnetlink_rcv_msg+0x7b9/0xc00 [ 281.944268][ T8191] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 281.944285][ T8191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.944306][ T8191] ? __lock_acquire+0x747/0x2de0 [ 281.944346][ T8191] netlink_rcv_skb+0x226/0x4a0 [ 281.944377][ T8191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.944396][ T8191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.944437][ T8191] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.944466][ T8191] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.944502][ T8191] netlink_unicast+0x8ef/0xa80 [ 281.944547][ T8191] netlink_sendmsg+0x7f0/0xb20 [ 281.944581][ T8191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.944608][ T8191] ? __lock_acquire+0x747/0x2de0 [ 281.944637][ T8191] ? aa_sock_msg_perm+0x144/0x210 [ 281.944670][ T8191] ? apparmor_socket_sendmsg+0x98/0x360 [ 281.944698][ T8191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.944726][ T8191] sock_sendmsg_nosec+0x14e/0x190 [ 281.944754][ T8191] ____sys_sendmsg+0x49f/0x790 [ 281.944783][ T8191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.944812][ T8191] ? import_iovec+0x73/0xa0 [ 281.944836][ T8191] ___sys_sendmsg+0x2f8/0x3d0 [ 281.944851][ T8191] ? __lock_acquire+0x747/0x2de0 [ 281.944881][ T8191] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.944912][ T8191] ? futex_wait+0x2a2/0x390 [ 281.944970][ T8191] ? __fget_files+0x37a/0x3f0 [ 281.944992][ T8191] ? __fget_files+0x29/0x3f0 [ 281.945019][ T8191] __x64_sys_sendmsg+0x1b1/0x290 [ 281.945042][ T8191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.945084][ T8191] do_syscall_64+0x171/0x540 [ 281.945109][ T8191] ? trace_irq_disable+0x3b/0x140 [ 281.945127][ T8191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.945147][ T8191] ? clear_bhb_loop+0x70/0xc0 [ 281.945172][ T8191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.945191][ T8191] RIP: 0033:0x00007fda0e3a94d9 [ 281.945211][ T8191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.945228][ T8191] RSP: 002b:00007fda0f24b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.945249][ T8191] RAX: ffffffffffffffda RBX: 00007fda0e625fa0 RCX: 00007fda0e3a94d9 [ 281.945264][ T8191] RDX: 000000000000c840 RSI: 0000200000000500 RDI: 0000000000000005 [ 281.945277][ T8191] RBP: 00007fda0e43804e R08: 0000000000000000 R09: 0000000000000000 [ 281.945290][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.945302][ T8191] R13: 00007fda0e626038 R14: 00007fda0e625fa0 R15: 00007ffea72a6c48 [ 281.945336][ T8191] [ 282.430515][ C0] net_ratelimit: 32 callbacks suppressed [ 283.823037][ T8204] netlink: 260 bytes leftover after parsing attributes in process `syz.3.547'. [ 283.950718][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.967065][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.968625][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.971798][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.972958][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.105187][ T8210] bridge_slave_0: left allmulticast mode [ 284.105199][ T8210] bridge_slave_0: left promiscuous mode [ 284.105332][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.164054][ T8210] bridge_slave_1: left allmulticast mode [ 284.164073][ T8210] bridge_slave_1: left promiscuous mode [ 284.164276][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.329341][ T8210] bond0: (slave bond_slave_0): Releasing backup interface [ 284.362399][ T8210] bond0: (slave bond_slave_1): Releasing backup interface [ 284.369856][ T8220] netlink: 'syz.6.548': attribute type 5 has an invalid length. [ 284.369874][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.6.548'. [ 284.410653][ T8210] team0: Port device team_slave_0 removed [ 284.433572][ T8210] team0: Port device team_slave_1 removed [ 284.434136][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.434147][ T8210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.478800][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.478810][ T8210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.609702][ T8215] team0: Mode changed to "loadbalance" [ 286.119409][ T5631] Bluetooth: hci1: command tx timeout [ 286.160605][ T8216] team0: Unable to change to the same mode the team is in [ 286.640521][ T53] bridge_slave_1: left allmulticast mode [ 286.640533][ T53] bridge_slave_1: left promiscuous mode [ 286.640677][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.690920][ T53] bridge_slave_0: left allmulticast mode [ 286.690932][ T53] bridge_slave_0: left promiscuous mode [ 286.691079][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.705958][ C1] net_ratelimit: 19 callbacks suppressed [ 288.186041][ T5631] Bluetooth: hci1: command tx timeout [ 290.266429][ T5631] Bluetooth: hci1: command tx timeout [ 290.391120][ T53] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 290.564911][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.624855][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.644033][ T53] bond0 (unregistering): Released all slaves [ 290.905999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 291.649234][ T53] tipc: Disabling bearer [ 291.653565][ T53] tipc: Left network mode [ 291.841479][ T8290] IPVS: Error connecting to the multicast addr [ 292.446116][ T5631] Bluetooth: hci1: command tx timeout [ 292.825879][ C1] net_ratelimit: 26 callbacks suppressed [ 292.974414][ T8296] syzkaller0: entered promiscuous mode [ 292.974429][ T8296] syzkaller0: entered allmulticast mode [ 293.164930][ T8208] rxe_eth0 speed is unknown, defaulting to 1000 [ 294.472355][ T5294] 8021q: adding VLAN 0 to HW filter on device eth9 [ 296.342827][ T8310] loop3: detected capacity change from 0 to 4096 [ 296.352408][ T8310] ntfs3: unknown option "iocharsnqpx". Use uid,gid,umask,dmask,fmask,sys_immutable,discard,force,sparse,nohidden,hide_dot_files,windows_names,showmeta,acl,iocharset,prealloc,nocase,delalloc,ads,ugm [ 296.352428][ T8310] ntfs3: Unknown parameter 'iocharsnqpx' [ 297.402687][ T8332] tipc: Started in network mode [ 297.402712][ T8332] tipc: Node identity cec8813d9af8, cluster identity 4711 [ 297.402949][ T8332] tipc: Enabled bearer , priority 0 [ 297.427376][ T8326] syzkaller0: entered promiscuous mode [ 297.427386][ T8326] syzkaller0: entered allmulticast mode [ 297.541263][ T8335] tipc: Resetting bearer [ 297.841535][ T8321] tipc: Resetting bearer [ 297.853829][ T8346] netlink: 'syz.6.572': attribute type 11 has an invalid length. [ 297.939306][ T8321] tipc: Disabling bearer [ 297.950733][ T7401] net_ratelimit: 49 callbacks suppressed [ 298.573364][ T8344] tipc: Enabled bearer , priority 0 [ 298.727366][ T53] hsr_slave_0: left promiscuous mode [ 298.741135][ T53] hsr_slave_1: left promiscuous mode [ 298.744128][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.744142][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.771733][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.771743][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.777639][ T53] batman_adv: batadv0: Interface deactivated: dummy0 [ 298.777655][ T53] batman_adv: batadv0: Removing interface: dummy0 [ 299.020857][ T53] veth1_macvtap: left promiscuous mode [ 299.020904][ T53] veth0_macvtap: left promiscuous mode [ 299.021898][ T53] veth1_vlan: left promiscuous mode [ 299.023367][ T53] veth0_vlan: left promiscuous mode [ 302.609308][ T53] team0 (unregistering): Port device team_slave_1 removed [ 302.652213][ T53] team0 (unregistering): Port device team_slave_0 removed [ 303.065856][ C0] net_ratelimit: 70 callbacks suppressed [ 304.281892][ T5294] 8021q: adding VLAN 0 to HW filter on device eth10 [ 304.313401][ T8362] tipc: Resetting bearer [ 304.381338][ T8355] syzkaller0: entered promiscuous mode [ 304.381353][ T8355] syzkaller0: entered allmulticast mode [ 304.434832][ T8343] tipc: Resetting bearer [ 304.461993][ T8343] tipc: Disabling bearer [ 304.477402][ T11] tipc: Node number set to 745590089 [ 306.614769][ T33] audit: type=1326 audit(1794624702.049:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.614905][ T33] audit: type=1326 audit(1794624702.049:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.667687][ T33] audit: type=1326 audit(1794624702.059:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.667734][ T33] audit: type=1326 audit(1794624702.059:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.667774][ T33] audit: type=1326 audit(1794624702.059:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.667814][ T33] audit: type=1326 audit(1794624702.059:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.667853][ T33] audit: type=1326 audit(1794624702.059:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.667893][ T33] audit: type=1326 audit(1794624702.059:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.667932][ T33] audit: type=1326 audit(1794624702.059:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 306.667971][ T33] audit: type=1326 audit(1794624702.059:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.1.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda0e3a94d9 code=0x7ffc0000 [ 308.804704][ T53] net_ratelimit: 12 callbacks suppressed [ 311.105254][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.105433][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.105584][ T8208] bridge_slave_0: entered allmulticast mode [ 311.107354][ T8208] bridge_slave_0: entered promiscuous mode [ 311.110203][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.110305][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.110445][ T8208] bridge_slave_1: entered allmulticast mode [ 311.112159][ T8208] bridge_slave_1: entered promiscuous mode [ 311.157447][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.160678][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.245934][ T1740] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 311.396148][ T1740] usb 1-1: Using ep0 maxpacket: 16 [ 311.400791][ T1740] usb 1-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 311.404818][ T1740] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 311.404834][ T1740] usb 1-1: Product: syz [ 311.404847][ T1740] usb 1-1: Manufacturer: syz [ 311.404860][ T1740] usb 1-1: SerialNumber: syz [ 311.444352][ T8208] team0: Port device team_slave_0 added [ 311.452143][ T1740] usb 1-1: config 0 descriptor?? [ 311.471518][ T8208] team0: Port device team_slave_1 added [ 311.802977][ T5294] 8021q: adding VLAN 0 to HW filter on device eth11 [ 311.814441][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.814450][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.814473][ T8208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.828663][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.828674][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.828699][ T8208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.926903][ T1740] usb 1-1: USB disconnect, device number 12 [ 312.267986][ T8208] hsr_slave_0: entered promiscuous mode [ 312.269226][ T8208] hsr_slave_1: entered promiscuous mode [ 312.278127][ T8208] debugfs: 'hsr0' already exists in 'hsr' [ 312.278139][ T8208] Cannot create hsr debugfs directory [ 314.253724][ T65] net_ratelimit: 21 callbacks suppressed [ 315.700382][ T8485] xt_CT: No such helper "syz1" [ 316.061712][ T8208] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 316.077655][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.078485][ T8208] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 316.085208][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 316.107430][ T8208] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 316.119794][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.122210][ T8208] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 316.146515][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.422147][ T5294] 8021q: adding VLAN 0 to HW filter on device eth12 [ 316.492316][ T8208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.537137][ T8208] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.550036][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.550132][ T7401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.559469][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.559584][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.006955][ T8208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.161629][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.161657][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.213454][ T8208] veth0_vlan: entered promiscuous mode [ 317.224619][ T8208] veth1_vlan: entered promiscuous mode [ 317.259300][ T8208] veth0_macvtap: entered promiscuous mode [ 317.263278][ T8208] veth1_macvtap: entered promiscuous mode [ 317.291749][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.313079][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.407044][ T7401] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.411414][ T65] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.411642][ T65] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.435993][ T53] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.483003][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.483016][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.548675][ T7401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.548689][ T7401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.116115][ T8537] __vm_enough_memory: pid: 8537, comm: syz.6.604, bytes: 4503599627366400 not enough memory for the allocation [ 319.082676][ T8542] loop1: detected capacity change from 0 to 256 [ 319.642471][ T5294] net_ratelimit: 134 callbacks suppressed [ 320.013340][ T8542] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64add636, utbl_chksum : 0xe619d30d) [ 320.112519][ T8542] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 320.413164][ T8562] loop1: detected capacity change from 0 to 32896 [ 320.440439][ T8562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 320.440538][ T8562] System zones: 1-3, 19-19, 35-36 [ 320.443322][ T8562] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.443777][ T8562] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.727242][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.598'. [ 320.875653][ T5628] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.618409][ T8594] loop3: detected capacity change from 0 to 1024 [ 324.831811][ T65] net_ratelimit: 142 callbacks suppressed [ 325.449810][ T8595] syzkaller0: entered promiscuous mode [ 325.449825][ T8595] syzkaller0: entered allmulticast mode [ 326.845990][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 329.946771][ C0] net_ratelimit: 31 callbacks suppressed [ 330.288435][ T8623] 9pnet_fd: p9_fd_create_unix (8623): problem connecting socket: éq‰Y’3aK: -111 [ 334.709194][ T8656] loop0: detected capacity change from 0 to 8 [ 335.225418][ C1] net_ratelimit: 70 callbacks suppressed [ 335.663658][ T8656] SQUASHFS error: zstd decompression error: 10 [ 335.663795][ T8656] SQUASHFS error: zstd decompression failed, data probably corrupt [ 335.663829][ T8656] SQUASHFS error: Failed to read block 0x60: -5 [ 335.738559][ T8656] SQUASHFS error: zstd decompression error: 10 [ 335.738581][ T8656] SQUASHFS error: zstd decompression failed, data probably corrupt [ 335.751283][ T8656] SQUASHFS error: Failed to read block 0x60: -5 [ 335.751530][ T33] kauditd_printk_skb: 24 callbacks suppressed [ 335.751542][ T33] audit: type=1800 audit(1794624987.191:150): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.625" name="/" dev="loop0" ino=1 res=0 errno=-5 [ 338.047377][ T8687] mmap: syz.6.629 (8687) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 338.129010][ T8687] loop6: detected capacity change from 0 to 33792 [ 338.144887][ T8687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.496014][ T8687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.496437][ T8687] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.546014][ T8694] MTRR 1 not used [ 338.845203][ T8693] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 338.910013][ T8693] EXT4-fs (loop6): Remounting filesystem read-only [ 339.028376][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 340.283912][ T6486] net_ratelimit: 20 callbacks suppressed [ 340.708614][ T8709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.348699][ T8716] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 345.544173][ C1] net_ratelimit: 21 callbacks suppressed [ 348.366237][ T8756] loop6: detected capacity change from 0 to 2048 [ 348.408113][ T8756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.583766][ C1] net_ratelimit: 50 callbacks suppressed [ 350.638668][ T8775] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 350.638683][ T8775] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 350.663608][ T8781] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(13) [ 350.663626][ T8781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 350.663687][ T8781] vhci_hcd vhci_hcd.0: Device attached [ 350.667531][ T8775] vhci_hcd vhci_hcd.0: Device attached [ 350.686170][ T8781] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(15) [ 350.686194][ T8781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 350.686236][ T8781] vhci_hcd vhci_hcd.0: Device attached [ 350.718370][ T8775] netlink: 'syz.6.647': attribute type 12 has an invalid length. [ 350.729970][ T8778] vhci_hcd: connection closed [ 350.736621][ T8782] vhci_hcd: connection closed [ 350.738957][ T8785] vhci_hcd: connection closed [ 351.003741][ T5632] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 351.134944][ T67] vhci_hcd vhci_hcd.6: stop threads [ 351.188301][ T67] vhci_hcd vhci_hcd.6: release socket [ 351.214580][ T67] vhci_hcd vhci_hcd.6: disconnect device [ 351.291710][ T67] vhci_hcd vhci_hcd.6: stop threads [ 351.291727][ T67] vhci_hcd vhci_hcd.6: release socket [ 351.293169][ T67] vhci_hcd vhci_hcd.6: disconnect device [ 351.293670][ T67] vhci_hcd vhci_hcd.6: stop threads [ 351.293685][ T67] vhci_hcd vhci_hcd.6: release socket [ 351.293731][ T67] vhci_hcd vhci_hcd.6: disconnect device [ 355.323053][ T5365] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 355.476536][ T5365] usb 8-1: not running at top speed; connect to a high speed hub [ 355.476554][ T5365] usb 8-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 355.478038][ T5365] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.478141][ T5365] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.489923][ T5365] uvcvideo 8-1:1.0: Found UVC 1.00 device (046d:0825) [ 355.554768][ T5365] uvcvideo 8-1:1.0: No streaming interface found for terminal 32770. [ 355.622952][ C1] net_ratelimit: 21 callbacks suppressed [ 356.293402][ T5365] usb 8-1: USB disconnect, device number 2 [ 356.314430][ T5632] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 356.719591][ T8828] md0: detected capacity change from 0 to 16128 [ 356.788885][ T8830] md0: detected capacity change from 16128 to 0 [ 356.788902][ T8830] md: md0 stopped. [ 360.812392][ T8497] net_ratelimit: 57 callbacks suppressed [ 365.861755][ C0] net_ratelimit: 13 callbacks suppressed [ 366.721145][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.671'. [ 366.732611][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.671'. [ 367.565196][ T8898] loop7: detected capacity change from 0 to 256 [ 369.557503][ T8913] loop1: detected capacity change from 0 to 64 [ 370.974628][ T6486] net_ratelimit: 30 callbacks suppressed [ 371.013389][ T8916] netlink: 14 bytes leftover after parsing attributes in process `syz.6.670'. [ 374.591820][ T8930] loop6: detected capacity change from 0 to 32768 [ 374.621683][ T8930] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 374.708130][ T8930] XFS (loop6): Ending clean mount [ 374.927018][ T6179] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 376.264362][ C1] net_ratelimit: 20 callbacks suppressed [ 376.437546][ T8957] syzkaller0: entered promiscuous mode [ 376.437561][ T8957] syzkaller0: entered allmulticast mode [ 376.452966][ T8957] tipc: Enabled bearer , priority 0 [ 376.504990][ T8956] tipc: Resetting bearer [ 376.895665][ T8956] tipc: Disabling bearer [ 377.078432][ T33] audit: type=1800 audit(1794625028.526:151): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.679" name="/ttyS3" dev="devtmpfs" ino=619 res=0 errno=-13 [ 378.448366][ T8975] random: crng reseeded on system resumption [ 378.599735][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.600777][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.027398][ T8993] FAULT_INJECTION: forcing a failure. [ 380.027398][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 380.027449][ T8993] CPU: 1 UID: 0 PID: 8993 Comm: syz.3.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.027477][ T8993] Tainted: [L]=SOFTLOCKUP [ 380.027485][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 380.027507][ T8993] Call Trace: [ 380.027516][ T8993] [ 380.027525][ T8993] dump_stack_lvl+0xe8/0x150 [ 380.027563][ T8993] should_fail_ex+0x3eb/0x540 [ 380.027590][ T8993] should_failslab+0xa8/0x100 [ 380.027619][ T8993] __kmalloc_cache_noprof+0x9e/0x600 [ 380.027653][ T8993] ? netdevice_event+0x3aa/0x8a0 [ 380.027679][ T8993] ? netdevice_event+0x3aa/0x8a0 [ 380.027712][ T8993] netdevice_event+0x3aa/0x8a0 [ 380.027741][ T8993] ? do_raw_spin_lock+0x12b/0x2f0 [ 380.027766][ T8993] ? __pfx_netdevice_event+0x10/0x10 [ 380.027792][ T8993] ? __pfx_del_netdev_ips+0x10/0x10 [ 380.027816][ T8993] ? __pfx_pass_all_filter+0x10/0x10 [ 380.027865][ T8993] notifier_call_chain+0x1a5/0x3d0 [ 380.027899][ T8993] unregister_netdevice_many_notify+0x1432/0x1dc0 [ 380.027942][ T8993] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 380.027978][ T8993] ? do_raw_spin_unlock+0xf5/0x200 [ 380.028009][ T8993] unregister_netdevice_queue+0x2f5/0x340 [ 380.028037][ T8993] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 380.028060][ T8993] ? queue_delayed_work_on+0x12f/0x1e0 [ 380.028079][ T8993] ? lockdep_hardirqs_on+0x7b/0x110 [ 380.028106][ T8993] ? queue_delayed_work_on+0x171/0x1e0 [ 380.028132][ T8993] __tun_detach+0x106f/0x1910 [ 380.028173][ T8993] tun_chr_close+0x10a/0x1c0 [ 380.028200][ T8993] ? __pfx_tun_chr_close+0x10/0x10 [ 380.028229][ T8993] __fput+0x408/0xa40 [ 380.028267][ T8993] fput_close_sync+0x11f/0x240 [ 380.028297][ T8993] ? __pfx_fput_close_sync+0x10/0x10 [ 380.028336][ T8993] filp_close_sync+0x6e/0xa0 [ 380.028357][ T8993] __se_sys_close_range+0xa77/0xef0 [ 380.028398][ T8993] ? __pfx___se_sys_close_range+0x10/0x10 [ 380.028431][ T8993] do_syscall_64+0x171/0x540 [ 380.028458][ T8993] ? trace_irq_disable+0x3b/0x140 [ 380.028476][ T8993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.028496][ T8993] ? clear_bhb_loop+0x70/0xc0 [ 380.028529][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.028554][ T8993] RIP: 0033:0x00007f6b5bba94d9 [ 380.028578][ T8993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.028595][ T8993] RSP: 002b:00007f6b5caf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 380.028617][ T8993] RAX: ffffffffffffffda RBX: 00007f6b5be25fa0 RCX: 00007f6b5bba94d9 [ 380.028632][ T8993] RDX: 0010000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 380.028646][ T8993] RBP: 00007f6b5bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 380.028659][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.028671][ T8993] R13: 00007f6b5be26038 R14: 00007f6b5be25fa0 R15: 00007fffcf5d8018 [ 380.028705][ T8993] [ 381.299963][ C0] net_ratelimit: 71 callbacks suppressed [ 382.460794][ T8996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.460816][ T8996] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 382.508029][ T8996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.508045][ T8996] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 382.519298][ T9009] jffs2: notice: (9009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 382.766131][ T8996] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 382.766145][ T8996] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 384.106182][ T8996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.106200][ T8996] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 387.059114][ C1] net_ratelimit: 30 callbacks suppressed [ 391.470973][ T9063] xt_CT: No such helper "syz1" [ 392.258517][ C1] net_ratelimit: 20 callbacks suppressed [ 393.856069][ T9088] loop7: detected capacity change from 0 to 128 [ 393.862602][ T9088] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 393.870761][ T9088] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 397.617983][ C1] net_ratelimit: 31 callbacks suppressed [ 398.687776][ T33] audit: type=1326 audit(1794625050.089:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.3.718" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b5bba94d9 code=0x0 [ 399.603408][ T9128] xt_CT: No such helper "syz1" [ 401.431584][ T9138] jffs2: notice: (9138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 401.791265][ T9138] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 402.657264][ C0] net_ratelimit: 26 callbacks suppressed [ 403.615933][ T9153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.212566][ T9162] loop6: detected capacity change from 0 to 33792 [ 404.229400][ T9162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.229413][ T9162] EXT4-fs: Ignoring removed i_version option [ 404.960239][ T9162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.960304][ T9162] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.082494][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 407.017689][ T5757] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 407.210086][ T5757] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 407.213146][ T5757] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 407.213173][ T5757] usb 8-1: config 0 interface 0 has no altsetting 0 [ 407.245495][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 407.245514][ T5757] usb 8-1: Product: syz [ 407.245527][ T5757] usb 8-1: Manufacturer: syz [ 407.245541][ T5757] usb 8-1: SerialNumber: syz [ 407.275290][ T5757] usb 8-1: config 0 descriptor?? [ 407.291321][ T5757] usb 8-1: selecting invalid altsetting 0 [ 407.389642][ T9188] xt_CT: No such helper "syz1" [ 408.017767][ T6674] net_ratelimit: 26 callbacks suppressed [ 409.810731][ T9192] loop3: detected capacity change from 0 to 32768 [ 409.816618][ T9192] ocfs2: Unknown parameter 'da ‹' [ 409.862606][ T5632] usb 8-1: USB disconnect, device number 3 [ 409.947212][ T9192] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 409.957155][ T9192] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 413.216111][ C0] net_ratelimit: 20 callbacks suppressed [ 416.123370][ T9262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.735133][ C0] net_ratelimit: 28 callbacks suppressed [ 424.116733][ T9296] jffs2: notice: (9296) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 425.934465][ C0] net_ratelimit: 31 callbacks suppressed [ 426.039957][ T9316] loop6: detected capacity change from 0 to 32768 [ 426.377196][ T9316] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 426.818327][ T9316] XFS (loop6): Ending clean mount [ 426.832116][ T9316] XFS (loop6): Quotacheck needed: Please wait. [ 427.663301][ T9316] XFS (loop6): Quotacheck: Done. [ 427.699013][ T6179] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 429.203103][ T9335] syz.0.755 (9335) used greatest stack depth: 16488 bytes left [ 431.053866][ C1] net_ratelimit: 20 callbacks suppressed [ 431.871045][ T9342] loop3: detected capacity change from 0 to 33280 [ 431.970595][ T9342] EXT4-fs error (device loop3): __ext4_iget:6462: inode #2: block 131072: comm syz.3.758: invalid block [ 431.970622][ T9342] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 431.982241][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 431.982262][ C0] EXT4-fs (loop3): initial error at time 1794625083: __ext4_iget:6462: inode 2: block 131072 [ 431.982297][ C0] EXT4-fs (loop3): last error at time 1794625083: __ext4_iget:6462: inode 2: block 131072 [ 432.007603][ T9342] EXT4-fs (loop3): get root inode failed [ 432.007621][ T9342] EXT4-fs (loop3): mount failed [ 433.541571][ T9357] loop1: detected capacity change from 0 to 256 [ 434.481838][ T9364] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 436.614701][ T33] audit: type=1400 audit(1794625087.453:153): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9371 comm="syz.0.768" [ 436.807063][ T9364] md: pers->run() failed ... [ 436.815481][ C1] net_ratelimit: 27 callbacks suppressed [ 440.186098][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.186144][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.852572][ C0] net_ratelimit: 42 callbacks suppressed [ 442.559636][ T9422] syzkaller0: entered promiscuous mode [ 442.559650][ T9422] syzkaller0: entered allmulticast mode [ 443.350881][ T9422] tipc: Enabled bearer , priority 0 [ 443.362229][ T9422] tipc: Resetting bearer [ 443.373441][ T9420] tipc: Resetting bearer [ 443.418612][ T9427] syz.3.779 (9427): drop_caches: 2 [ 443.520672][ T9420] tipc: Disabling bearer [ 447.691885][ C1] net_ratelimit: 39 callbacks suppressed [ 448.091473][ T9456] random: crng reseeded on system resumption [ 449.268820][ T9464] jffs2: notice: (9464) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 450.511683][ T9470] team0 (unregistering): Port device team_slave_0 removed [ 450.527337][ T9470] team0 (unregistering): Port device team_slave_1 removed [ 452.811624][ C1] net_ratelimit: 18 callbacks suppressed [ 458.570962][ T7401] net_ratelimit: 32 callbacks suppressed [ 461.807310][ T9515] loop6: detected capacity change from 0 to 164 [ 463.609985][ C1] net_ratelimit: 22 callbacks suppressed [ 464.443560][ T9532] loop7: detected capacity change from 0 to 33792 [ 464.448854][ T9532] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 464.630868][ T9532] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 464.655161][ T9532] EXT4-fs (loop7): orphan cleanup on readonly fs [ 464.973754][ T9532] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 464.974835][ T9532] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 465.010813][ T9532] EXT4-fs error (device loop7): ext4_acquire_dquot:7120: comm syz.7.804: Failed to acquire dquot type 0 [ 465.010945][ T9532] loop7: lost filesystem error report for type 5 error -117 [ 465.019786][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 465.019811][ C1] EXT4-fs (loop7): initial error at time 1794625116: ext4_acquire_dquot:7120 [ 465.019836][ C1] EXT4-fs (loop7): last error at time 1794625116: ext4_acquire_dquot:7120 [ 465.081213][ T9532] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 465.081955][ T9532] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 465.083160][ T9532] EXT4-fs error (device loop7): ext4_acquire_dquot:7120: comm syz.7.804: Failed to acquire dquot type 0 [ 465.083223][ T9532] loop7: lost filesystem error report for type 5 error -117 [ 465.128765][ T9532] EXT4-fs error (device loop7): ext4_free_blocks:6717: comm syz.7.804: Freeing blocks not in datazone - block = 0, count = 4096 [ 465.128801][ T9532] loop7: lost filesystem error report for type 5 error -117 [ 465.130340][ T9532] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 465.130477][ T9532] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 465.178202][ T9532] EXT4-fs error (device loop7): ext4_acquire_dquot:7120: comm syz.7.804: Failed to acquire dquot type 0 [ 465.178232][ T9532] loop7: lost filesystem error report for type 5 error -117 [ 465.193533][ T9532] EXT4-fs (loop7): 1 orphan inode deleted [ 465.240197][ T9532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.509368][ T9532] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.804: iget: bad extended attribute block 6 [ 466.576417][ T9541] EXT4-fs error (device loop7): ext4_search_dir:1476: inode #2: block 16: comm syz.7.804: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 466.581484][ T9532] EXT4-fs error (device loop7): ext4_search_dir:1476: inode #2: block 16: comm syz.7.804: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 467.025870][ T9548] loop3: detected capacity change from 0 to 33792 [ 467.796176][ T9550] ceph: No mds server is up or the cluster is laggy [ 467.808805][ T9548] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 467.808877][ T9548] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 467.811407][ T9548] jbd2_journal_init_inode: Cannot locate journal superblock [ 467.811417][ T9548] EXT4-fs (loop3): Could not load journal inode [ 467.812311][ T5757] libceph: connect (1)[c::]:6789 error -99 [ 467.812658][ T5757] libceph: mon0 (1)[c::]:6789 connect error [ 468.071624][ T5757] libceph: connect (1)[c::]:6789 error -99 [ 468.151870][ T5757] libceph: mon0 (1)[c::]:6789 connect error [ 468.276153][ T8208] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.729397][ C1] net_ratelimit: 26 callbacks suppressed [ 470.171747][ T9565] evm: overlay not supported [ 470.442430][ T9564] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 471.751210][ T9571] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 472.034415][ T7401] IPVS: starting estimator thread 0... [ 472.119097][ T9574] IPVS: using max 28 ests per chain, 67200 per kthread [ 473.808175][ T9582] loop6: detected capacity change from 0 to 2048 [ 474.072454][ T67] net_ratelimit: 20 callbacks suppressed [ 479.565503][ T9602] loop1: detected capacity change from 0 to 1024 [ 479.688704][ T67] net_ratelimit: 28 callbacks suppressed [ 479.770388][ T9605] loop7: detected capacity change from 0 to 8 [ 479.810178][ T9599] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 479.814123][ T9605] squashfs image on loop7 failed sanity check [ 480.360791][ T9610] fuse: Unknown parameter '00000000000000000000' [ 484.834280][ T8499] net_ratelimit: 34 callbacks suppressed [ 490.166854][ C1] net_ratelimit: 25 callbacks suppressed [ 495.286455][ C1] net_ratelimit: 36 callbacks suppressed [ 495.892981][ T9670] netlink: 1 bytes leftover after parsing attributes in process `syz.6.834'. [ 495.893006][ T9670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.331921][ T9684] loop1: detected capacity change from 0 to 4096 [ 498.057278][ T9694] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.380944][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.380963][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.380973][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.380981][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.380990][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.380999][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381008][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381016][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381032][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381041][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381050][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381058][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381066][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381075][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381084][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381092][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381101][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381110][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381119][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381127][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381136][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381144][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381153][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381162][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381170][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381178][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381188][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381196][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381204][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381213][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381221][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381229][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381237][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381245][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381254][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381262][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381270][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381279][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381287][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381296][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381304][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381312][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381320][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381329][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381337][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381345][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381354][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381362][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381370][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381378][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381387][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381395][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381403][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381412][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381420][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381428][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381436][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381445][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381453][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.381461][ T9684] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 498.508428][ T9684] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 498.737881][ T9588] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 498.885845][ T9588] usb 2-1: Using ep0 maxpacket: 8 [ 498.886780][ T9588] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 498.889327][ T9588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.889386][ T9588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.905668][ T9588] usb 2-1: config 0 descriptor?? [ 500.402016][ T6486] net_ratelimit: 24 callbacks suppressed [ 500.768872][ T9588] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 501.448256][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.448310][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.735327][ T9588] usb 2-1: USB disconnect, device number 7 [ 504.095128][ T9718] FAULT_INJECTION: forcing a failure. [ 504.095128][ T9718] name failslab, interval 1, probability 0, space 0, times 0 [ 504.095337][ T9718] CPU: 1 UID: 0 PID: 9718 Comm: syz.6.852 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.095362][ T9718] Tainted: [L]=SOFTLOCKUP [ 504.095369][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 504.095380][ T9718] Call Trace: [ 504.095389][ T9718] [ 504.095397][ T9718] dump_stack_lvl+0xe8/0x150 [ 504.095433][ T9718] should_fail_ex+0x3eb/0x540 [ 504.095470][ T9718] should_failslab+0xa8/0x100 [ 504.095493][ T9718] ? ceph_msg_new2+0x3b/0x4d0 [ 504.095523][ T9718] kmem_cache_alloc_noprof+0x9c/0x600 [ 504.095552][ T9718] ? ceph_msg_new2+0x166/0x4d0 [ 504.095578][ T9718] ? ceph_msg_new2+0x3b/0x4d0 [ 504.095612][ T9718] ceph_msg_new2+0x3b/0x4d0 [ 504.095645][ T9718] ceph_monc_init+0x620/0xae0 [ 504.095676][ T9718] ceph_create_client+0x225/0x310 [ 504.095703][ T9718] ceph_get_tree+0x1ca/0x1a90 [ 504.095727][ T9718] ? apparmor_capable+0x126/0x170 [ 504.095754][ T9718] vfs_get_tree+0x92/0x2a0 [ 504.095781][ T9718] do_new_mount+0x325/0xb00 [ 504.095805][ T9718] ? __pfx_do_new_mount+0x10/0x10 [ 504.095822][ T9718] ? security_capable+0x7e/0x2c0 [ 504.095850][ T9718] ? ns_capable+0x84/0xe0 [ 504.095879][ T9718] ? path_mount+0x643/0x1070 [ 504.095910][ T9718] ? user_path_at+0xd4/0x160 [ 504.095933][ T9718] __se_sys_mount+0x31d/0x420 [ 504.095956][ T9718] ? __pfx___se_sys_mount+0x10/0x10 [ 504.095982][ T9718] ? __x64_sys_mount+0x20/0xc0 [ 504.096002][ T9718] do_syscall_64+0x171/0x540 [ 504.096026][ T9718] ? trace_irq_disable+0x3b/0x140 [ 504.096044][ T9718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.096062][ T9718] ? clear_bhb_loop+0x70/0xc0 [ 504.096086][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.096104][ T9718] RIP: 0033:0x00007fd5127a94d9 [ 504.096124][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.096140][ T9718] RSP: 002b:00007fd51368e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 504.096160][ T9718] RAX: ffffffffffffffda RBX: 00007fd512a25fa0 RCX: 00007fd5127a94d9 [ 504.096174][ T9718] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000280 [ 504.096188][ T9718] RBP: 00007fd51283804e R08: 0000000000000000 R09: 0000000000000000 [ 504.096199][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.096211][ T9718] R13: 00007fd512a26038 R14: 00007fd512a25fa0 R15: 00007ffc6961e308 [ 504.096243][ T9718] [ 505.430656][ T46] net_ratelimit: 52 callbacks suppressed [ 507.656828][ T28] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 508.987560][ T28] usb 4-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 509.001127][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.007682][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.007701][ T28] usb 4-1: Product: syz [ 509.007715][ T28] usb 4-1: Manufacturer: syz [ 509.007728][ T28] usb 4-1: SerialNumber: syz [ 509.017940][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 509.037042][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 509.043940][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 509.057342][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 509.059547][ T28] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 509.072568][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.142512][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 509.159289][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 509.159864][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 509.185417][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 509.191295][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.516160][ T28] gspca_mr97310a: reg write [19] error -71 [ 509.516252][ T28] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 509.557104][ T28] usb 4-1: USB disconnect, device number 10 [ 510.484479][ C1] net_ratelimit: 22 callbacks suppressed [ 511.297052][ T5631] Bluetooth: hci5: command tx timeout [ 513.191945][ T67] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.374165][ T5631] Bluetooth: hci5: command tx timeout [ 513.746185][ T67] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.790177][ T9762] syzkaller0: entered promiscuous mode [ 513.790185][ T9762] syzkaller0: entered allmulticast mode [ 514.252542][ T67] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.444282][ T5631] Bluetooth: hci5: command tx timeout [ 515.762900][ T67] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.956917][ T9738] rxe_eth0 speed is unknown, defaulting to 1000 [ 516.003860][ C0] net_ratelimit: 56 callbacks suppressed [ 517.906666][ T5631] Bluetooth: hci5: command tx timeout [ 518.932775][ T9788] hub 5-0:1.0: USB hub found [ 518.937192][ T9788] hub 5-0:1.0: 1 port detected [ 518.981132][ T67] bridge_slave_1: left allmulticast mode [ 518.981145][ T67] bridge_slave_1: left promiscuous mode [ 518.981315][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.032621][ T67] bridge_slave_0: left allmulticast mode [ 519.032632][ T67] bridge_slave_0: left promiscuous mode [ 519.032771][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.272006][ T9794] loop1: detected capacity change from 0 to 33280 [ 519.317779][ T9794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 519.325200][ T9794] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 519.336245][ T9794] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 519.338294][ T9794] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.868: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 519.338336][ T9794] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 519.343394][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 519.343412][ C1] EXT4-fs (loop1): last error at time 1794625170: ext4_ext_check_inode:521: inode 13 [ 519.346271][ T9794] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.868: couldn't read orphan inode 13 (err -117) [ 519.346300][ T9794] loop1: lost filesystem error report for type 5 error -117 [ 519.385851][ T9794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.422362][ T9794] EXT4-fs error (device loop1): ext4_lookup:1787: comm syz.1.868: inode #15: comm syz.1.868: iget: illegal inode # [ 521.603170][ C1] net_ratelimit: 17 callbacks suppressed [ 522.286534][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.302163][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.309097][ T67] bond0 (unregistering): Released all slaves [ 522.617049][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.291744][ T67] hsr_slave_0: left promiscuous mode [ 525.298472][ T67] hsr_slave_1: left promiscuous mode [ 525.299278][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.299317][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.307986][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.308004][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.333829][ T67] veth1_macvtap: left promiscuous mode [ 526.333894][ T67] veth0_macvtap: left promiscuous mode [ 526.334100][ T67] veth1_vlan: left promiscuous mode [ 526.334199][ T67] veth0_vlan: left promiscuous mode [ 526.642620][ C0] net_ratelimit: 42 callbacks suppressed [ 532.282842][ T6486] net_ratelimit: 7 callbacks suppressed [ 535.074365][ T67] team0 (unregistering): Port device team_slave_1 removed [ 535.128691][ T67] team0 (unregistering): Port device team_slave_0 removed [ 535.723454][ T5294] 8021q: adding VLAN 0 to HW filter on device eth13 [ 537.512607][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.512666][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.512788][ T9738] bridge_slave_0: entered allmulticast mode [ 537.522362][ T9738] bridge_slave_0: entered promiscuous mode [ 537.546285][ T67] IPVS: stop unused estimator thread 0... [ 537.551890][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.551996][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.552189][ T9738] bridge_slave_1: entered allmulticast mode [ 537.573530][ T9738] bridge_slave_1: entered promiscuous mode [ 537.853405][ T9738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.917494][ T9738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.922141][ T509] net_ratelimit: 16 callbacks suppressed [ 538.050691][ T9910] loop3: detected capacity change from 0 to 2048 [ 538.110387][ T9910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 538.528461][ T9738] team0: Port device team_slave_0 added [ 538.569545][ T9738] team0: Port device team_slave_1 added [ 540.339122][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.339128][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.339141][ T9738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.391412][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.391422][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.391445][ T9738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.943505][ T6635] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.076917][ T9738] hsr_slave_0: entered promiscuous mode [ 541.092353][ T9738] hsr_slave_1: entered promiscuous mode [ 541.109838][ T9738] debugfs: 'hsr0' already exists in 'hsr' [ 541.109848][ T9738] Cannot create hsr debugfs directory [ 542.343424][ T6635] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 542.734170][ T9956] fido_id[9956]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 542.960738][ C0] net_ratelimit: 11 callbacks suppressed [ 545.515343][ T5294] 8021q: adding VLAN 0 to HW filter on device eth14 [ 545.881315][ T9976] loop0: detected capacity change from 0 to 256 [ 545.882044][ T9976] vfat: Bad value for 'dmask' [ 547.939621][ T9738] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 547.994870][ T9738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.998412][ T9738] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 548.037963][ T9738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.047949][ T9738] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 548.084065][ T9738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.091746][ T9738] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 548.127014][ T9738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.240240][ C1] net_ratelimit: 8 callbacks suppressed [ 551.014567][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.087410][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.115613][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.115667][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.171778][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.171832][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.228655][T10018] loop6: detected capacity change from 0 to 33280 [ 551.283887][T10018] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.898: invalid indirect mapped block 256 (level 2) [ 551.283918][T10018] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 551.289463][T10018] EXT4-fs (loop6): 2 truncates cleaned up [ 551.305397][T10018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.919720][T10022] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 552.596279][ T6179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.837149][T10030] jffs2: notice: (10030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 552.907484][ T5294] 8021q: adding VLAN 0 to HW filter on device eth15 [ 552.942031][T10032] loop6: detected capacity change from 0 to 164 [ 553.439912][ C1] net_ratelimit: 14 callbacks suppressed [ 556.909491][T10071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.095704][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.718908][ C0] net_ratelimit: 8 callbacks suppressed [ 560.047253][ T5294] 8021q: adding VLAN 0 to HW filter on device eth16 [ 560.570805][ T9738] veth0_vlan: entered promiscuous mode [ 560.611634][ T9738] veth1_vlan: entered promiscuous mode [ 560.654509][ T6635] libceph: connect (1)127.0.0.1:6789 error -101 [ 560.654690][ T6635] libceph: mon0 (1)127.0.0.1:6789 connect error [ 561.880779][ T28] libceph: connect (1)127.0.0.1:6789 error -101 [ 561.880965][ T28] libceph: mon0 (1)127.0.0.1:6789 connect error [ 561.985161][T10115] ceph: No mds server is up or the cluster is laggy [ 562.015077][ T9738] veth0_macvtap: entered promiscuous mode [ 562.046692][ T9738] veth1_macvtap: entered promiscuous mode [ 562.106276][T10114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 562.106306][T10114] block device autoloading is deprecated and will be removed. [ 562.171214][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.207717][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.303073][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.303185][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.303204][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.303221][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.202728][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.202773][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.924688][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.924699][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.133908][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.133916][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.238345][ C1] net_ratelimit: 150 callbacks suppressed [ 565.524018][T10139] loop3: detected capacity change from 0 to 32768 [ 565.543464][T10139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.925 (10139) [ 565.556921][T10139] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 565.557063][T10139] BTRFS info (device loop3): using sha256 checksum algorithm [ 565.628366][T10139] BTRFS info (device loop3): enabling ssd optimizations [ 565.628401][T10139] BTRFS info (device loop3): turning on sync discard [ 565.628412][T10139] BTRFS info (device loop3): enabling free space tree [ 565.628479][T10139] BTRFS info (device loop3): use zlib compression, level 3 [ 565.861292][ T33] audit: type=1800 audit(1794625217.329:154): pid=10157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.925" name="file1" dev="loop3" ino=260 res=0 errno=-22 [ 569.677628][ C0] net_ratelimit: 144 callbacks suppressed [ 570.645897][ T5630] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 570.705826][ T6635] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 570.712028][T10194] syzkaller0: entered promiscuous mode [ 570.712043][T10194] syzkaller0: entered allmulticast mode [ 570.924248][T10192] netlink: 'syz.1.940': attribute type 30 has an invalid length. [ 570.949415][ T6635] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.950528][ T6635] usb 2-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 570.953967][ T6635] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 570.953997][ T6635] usb 2-1: can't read configurations, error -71 [ 573.721606][ T6032] IPVS: starting estimator thread 0... [ 573.828202][T10213] IPVS: using max 33 ests per chain, 79200 per kthread [ 574.141612][T10219] CacheFiles: No cache directory specified [ 574.229384][T10224] device-mapper: table: 248:4: verity: Device must be readonly (-EINVAL) [ 574.229400][T10224] device-mapper: ioctl: error adding target to table [ 574.249515][T10223] clocksource: Switched to clocksource acpi_pm [ 574.354050][T10223] clocksource: Switched to clocksource tsc [ 575.517164][ C1] net_ratelimit: 32 callbacks suppressed [ 578.037018][T10243] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 578.039953][T10243] syzkaller0: entered promiscuous mode [ 578.039968][T10243] syzkaller0: entered allmulticast mode [ 578.074396][T10243] tipc: Started in network mode [ 578.074414][T10243] tipc: Node identity d27e1a229a3a, cluster identity 4711 [ 578.090278][T10243] tipc: Enabled bearer , priority 0 [ 578.123123][T10243] tipc: Resetting bearer [ 578.156849][T10242] tipc: Resetting bearer [ 578.253079][T10242] tipc: Disabling bearer [ 580.830668][ T6486] net_ratelimit: 47 callbacks suppressed [ 581.072012][T10259] loop3: detected capacity change from 0 to 33280 [ 581.086736][T10259] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 581.086747][T10259] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 581.132379][T10259] EXT4-fs (loop3): 1 truncate cleaned up [ 581.133263][T10259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.915001][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.589533][ T6636] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 583.748157][ T6636] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 583.751496][ T6636] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 583.751516][ T6636] usb 4-1: config 1 has no interface number 0 [ 583.756243][ T6636] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 583.756263][ T6636] usb 4-1: config 1 has no interface number 0 [ 583.762795][ T6636] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 583.762816][ T6636] usb 4-1: config 1 has no interface number 0 [ 583.774571][ T6636] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 583.774593][ T6636] usb 4-1: config 1 has no interface number 0 [ 583.784300][ T6636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.784319][ T6636] usb 4-1: Product: syz [ 583.784332][ T6636] usb 4-1: Manufacturer: syz [ 583.784346][ T6636] usb 4-1: SerialNumber: syz [ 583.793113][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 583.853092][ T6636] usb 4-1: 3:0 : does not exist [ 583.853100][ T6636] usb 4-1: 3:0 : does not exist [ 584.297378][ T5632] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 584.448466][ T5632] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 584.448489][ T5632] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 584.449543][ T5632] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.449555][ T5632] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.450586][ T5632] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.450597][ T5632] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.452932][ T5632] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.452951][ T5632] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.454756][ T5632] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.454776][ T5632] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.466645][ T5632] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.466665][ T5632] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.470316][ T5632] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.470336][ T5632] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.479576][ T5632] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.479596][ T5632] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.488055][ T5632] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.488074][ T5632] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.527613][ T5632] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 584.527632][ T5632] usb 7-1: Product: syz [ 584.527645][ T5632] usb 7-1: Manufacturer: syz [ 584.527658][ T5632] usb 7-1: SerialNumber: syz [ 584.562639][ T5632] usb 7-1: config 0 descriptor?? [ 584.651823][ T5632] yurex 7-1:0.0: Could not find endpoints [ 585.098135][ T5632] usb 7-1: USB disconnect, device number 6 [ 585.479991][T10306] loop0: detected capacity change from 0 to 33280 [ 585.735311][T10301] loop1: detected capacity change from 0 to 8192 [ 585.837172][ C1] net_ratelimit: 85 callbacks suppressed [ 589.912566][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 590.888835][ T7401] net_ratelimit: 118 callbacks suppressed [ 591.039445][ T6032] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.039544][ T6032] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.039577][ T6032] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.039608][ T6032] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.327768][ T5632] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 591.507353][T10357] loop6: detected capacity change from 0 to 32768 [ 591.535857][T10357] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 591.568871][T10357] XFS (loop6): Ending clean mount [ 591.574190][T10357] XFS (loop6): Quotacheck needed: Please wait. [ 591.608066][ T5632] usb 2-1: New USB device found: idVendor=046d, idProduct=0821, bcdDevice=1.00 [ 591.622110][ T5632] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.622122][ T5632] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 591.622156][ T5632] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.659228][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.659238][ T5632] usb 2-1: Product: syz [ 591.659245][ T5632] usb 2-1: Manufacturer: syz [ 591.659252][ T5632] usb 2-1: SerialNumber: syz [ 591.723807][ T5632] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 591.904561][T10357] XFS (loop6): Quotacheck: Done. [ 591.944898][ T5632] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 592.198610][ T33] audit: type=1800 audit(1794625243.674:155): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.965" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=-22 [ 592.353497][ T6179] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 592.505190][ T6635] usb 2-1: USB disconnect, device number 10 [ 595.712427][T10387] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 595.712445][T10387] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 595.712513][T10387] vhci_hcd vhci_hcd.0: Device attached [ 596.637288][ C1] net_ratelimit: 39 callbacks suppressed [ 596.915971][T10388] vhci_hcd: connection closed [ 596.942045][ T6032] vhci_hcd vhci_hcd.1: stop threads [ 596.942067][ T6032] vhci_hcd vhci_hcd.1: release socket [ 596.942108][ T6032] vhci_hcd vhci_hcd.1: disconnect device [ 597.008250][ T5632] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 597.008290][ T5632] usb 35-1: enqueue for inactive port 0 [ 597.078241][ T5632] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 598.718066][T10401] Cannot find add_set index 0 as target [ 600.210128][T10413] loop3: detected capacity change from 0 to 33280 [ 600.211352][T10413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.265114][T10413] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 600.280395][T10413] EXT4-fs error (device loop3): ext4_iget_extra_inode:5999: inode #15: comm syz.3.964: corrupted in-inode xattr: e_value size too large [ 600.280415][T10413] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 600.281746][T10413] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.964: couldn't read orphan inode 15 (err -117) [ 600.281764][T10413] loop3: lost filesystem error report for type 5 error -117 [ 600.283908][T10413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.574598][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.677186][ C1] net_ratelimit: 11 callbacks suppressed [ 603.122692][ T6635] usb 4-1: USB disconnect, device number 11 [ 606.489991][T10470] ieee802154 phy0 wpan0: encryption failed: -22 [ 606.518716][T10470] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 606.519126][T10470] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 606.536218][T10470] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 606.546790][T10470] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 606.877168][ C1] net_ratelimit: 20 callbacks suppressed [ 607.348535][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 609.355761][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.8.976'. [ 611.503148][T10497] loop1: detected capacity change from 0 to 33792 [ 611.503755][T10497] EXT4-fs: Ignoring removed orlov option [ 611.503829][T10497] EXT4-fs: Invalid want_extra_isize 7 [ 612.228964][ T46] net_ratelimit: 8 callbacks suppressed [ 613.064787][T10503] loop6: detected capacity change from 0 to 33280 [ 613.104399][T10503] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 613.104516][T10503] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 614.996436][T10509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.233550][T10511] sctp: [Deprecated]: syz.3.987 (pid 10511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.233550][T10511] Use struct sctp_sack_info instead [ 617.461722][T10004] net_ratelimit: 14 callbacks suppressed [ 617.821215][T10526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.573402][T10538] loop8: detected capacity change from 0 to 33280 [ 620.794007][T10538] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 620.794017][T10538] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 620.873047][T10538] EXT4-fs error (device loop8): ext4_free_branches:1040: inode #16: comm syz.8.998: invalid indirect mapped block 32768 (level 2) [ 620.873068][T10538] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 620.877156][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 620.877173][ C1] EXT4-fs (loop8): initial error at time 1794625272: ext4_free_branches:1040: inode 16 [ 620.877198][ C1] EXT4-fs (loop8): last error at time 1794625272: ext4_free_branches:1040: inode 16 [ 620.988945][T10538] EXT4-fs (loop8): 1 orphan inode deleted [ 620.988962][T10538] EXT4-fs (loop8): 1 truncate cleaned up [ 620.989848][T10538] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.085153][ T9738] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.037900][ C1] net_ratelimit: 37 callbacks suppressed [ 624.320236][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.320286][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.704804][T10563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.737197][T10566] ptp ptp0: new virtual clock ptp1 [ 627.737210][T10566] ptp ptp0: guarantee physical clock free running [ 628.369164][ T65] net_ratelimit: 7 callbacks suppressed [ 629.252465][T10577] zram0: detected capacity change from 0 to 6560 [ 629.319413][T10583] loop3: detected capacity change from 0 to 33792 [ 629.333090][T10583] EXT4-fs: Ignoring removed bh option [ 629.348159][T10583] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 630.139574][T10588] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1001'. [ 630.910758][ T6636] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 631.297281][ T6636] usb 4-1: Using ep0 maxpacket: 8 [ 631.428871][ T6636] usb 4-1: unable to get BOS descriptor or descriptor too short [ 631.428902][ T6636] usb 4-1: New USB device found: idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 631.479865][ T6636] usb 4-1: config 86 has an invalid interface number: 78 but max is 0 [ 631.479881][ T6636] usb 4-1: config 86 has no interface number 0 [ 631.479905][ T6636] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 631.479919][ T6636] usb 4-1: config 86 interface 78 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.479930][ T6636] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.479943][ T6636] usb 4-1: config 86 interface 78 has no altsetting 0 [ 631.816543][ T6636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.816554][ T6636] usb 4-1: Product: syz [ 631.816561][ T6636] usb 4-1: Manufacturer: syz [ 631.816568][ T6636] usb 4-1: SerialNumber: syz [ 632.129709][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 632.215399][ T6636] usb 4-1: can't set config #86, error -32 [ 632.269383][ T6636] usb 4-1: USB disconnect, device number 12 [ 633.221794][ T6635] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 633.227903][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 633.239836][ T28] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 633.406589][T10608] Bluetooth: MGMT ver 1.23 [ 633.454014][ T46] net_ratelimit: 38 callbacks suppressed [ 633.631023][T10607] xt_CT: No such helper "syz1" [ 633.987053][ T6635] usb 2-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 634.000805][ T28] usb 7-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 634.004220][ T28] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.004423][ T28] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 634.004448][ T28] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.004472][ T28] usb 7-1: config 0 interface 0 has no altsetting 0 [ 634.004546][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.007006][ T6635] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 634.007024][ T6635] usb 2-1: Product: syz [ 634.007038][ T6635] usb 2-1: Manufacturer: syz [ 634.007050][ T6635] usb 2-1: SerialNumber: syz [ 634.025979][ T28] usb 7-1: config 0 descriptor?? [ 634.028132][ T6635] usb 2-1: config 0 descriptor?? [ 635.822074][ T28] usbhid 7-1:0.0: can't add hid device: -71 [ 635.822152][ T28] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 635.841664][ T28] usb 7-1: USB disconnect, device number 7 [ 635.895786][ T6635] usb 2-1: USB disconnect, device number 11 [ 637.288400][T10589] udevd[10589]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.545574][T10004] net_ratelimit: 12 callbacks suppressed [ 639.720198][T10637] jffs2: notice: (10637) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 640.095160][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 640.120564][T10645] ip_tables: iptables: counters copy to user failed while replacing table [ 641.483059][T10645] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 641.483293][T10645] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 642.614253][T10661] loop1: detected capacity change from 0 to 128 [ 642.640747][T10661] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 642.670478][T10661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.130674][ T5631] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 643.757171][ C1] net_ratelimit: 18 callbacks suppressed [ 644.178138][T10672] xt_CT: No such helper "syz1" [ 644.847368][T10681] loop0: detected capacity change from 0 to 32768 [ 644.861667][T10681] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 644.914108][T10681] XFS (loop0): Ending clean mount [ 644.988079][T10679] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 645.066552][T10691] device-mapper: table: 248:5: thin-pool: Error opening metadata block device (-EBUSY) [ 645.066568][T10691] device-mapper: ioctl: error adding target to table [ 645.153863][ T5629] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 645.322550][T10695] input: syz0 as /devices/virtual/input/input11 [ 647.200538][ T5631] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 647.201585][ T5631] Bluetooth: hci5: Injecting HCI hardware error event [ 649.277194][ C0] net_ratelimit: 10 callbacks suppressed [ 650.213567][T10716] loop0: detected capacity change from 0 to 2048 [ 650.243703][T10716] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 650.244018][T10716] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 650.245181][T10716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.824614][T10721] xt_CT: No such helper "syz1" [ 654.352999][ T14] net_ratelimit: 7 callbacks suppressed [ 655.103282][T10741] loop6: detected capacity change from 0 to 33280 [ 656.062342][T10741] loop6: detected capacity change from 0 to 32768 [ 656.121414][T10741] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 656.260796][T10741] XFS (loop6): Ending clean mount [ 656.353156][T10741] XFS (loop6): Quotacheck needed: Please wait. [ 656.425346][T10754] loop8: detected capacity change from 0 to 128 [ 656.486574][T10754] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 656.577473][ T7401] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.640808][T10754] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 656.675214][T10741] XFS (loop6): Quotacheck: Done. [ 657.972658][ T6179] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 659.171323][ T33] audit: type=1800 audit(1794625310.644:156): pid=10743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1035" name="bus" dev="ramfs" ino=30344 res=0 errno=-4 [ 659.357190][ C0] net_ratelimit: 10 callbacks suppressed [ 660.525378][T10778] overlay: ./file0 is not a directory [ 663.517213][ T6635] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 663.673815][ T6635] usb 2-1: unable to get BOS descriptor or descriptor too short [ 663.673854][ T6635] usb 2-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 663.674894][ T6635] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.674913][ T6635] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.684541][ T6635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.684559][ T6635] usb 2-1: Product: syz [ 663.684572][ T6635] usb 2-1: Manufacturer: syz [ 663.684586][ T6635] usb 2-1: SerialNumber: syz [ 663.729397][ T6635] usb 2-1: selecting invalid altsetting 1 [ 663.734008][ T6635] usb 2-1: unit 6 not found! [ 664.307614][T10800] xt_CT: No such helper "syz1" [ 664.356641][ T6635] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 664.374019][ T6635] usb 2-1: USB disconnect, device number 12 [ 664.468090][T10733] udevd[10733]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.197163][ C1] net_ratelimit: 19 callbacks suppressed [ 669.257823][T10830] loop0: detected capacity change from 0 to 32768 [ 669.319814][T10830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1064 (10830) [ 669.329067][T10830] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 669.329095][T10830] BTRFS info (device loop0): using sha256 checksum algorithm [ 669.379755][T10830] BTRFS info (device loop0): enabling ssd optimizations [ 669.379769][T10830] BTRFS info (device loop0): turning on sync discard [ 669.379777][T10830] BTRFS info (device loop0): enabling free space tree [ 669.379788][T10830] BTRFS info (device loop0): use zlib compression, level 3 [ 669.472591][ T5629] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.645274][T10006] net_ratelimit: 11 callbacks suppressed [ 673.365138][T10863] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 673.464501][ T6635] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 675.757336][ C1] net_ratelimit: 9 callbacks suppressed [ 679.070225][T10892] jffs2: notice: (10892) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 680.552726][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1086'. [ 680.552740][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1086'. [ 681.117155][ C1] net_ratelimit: 50 callbacks suppressed [ 683.252177][ T5645] Bluetooth: hci5: hardware error 0x00 [ 685.612794][T10937] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 685.760197][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.760247][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.717154][ C1] net_ratelimit: 7 callbacks suppressed [ 686.825143][ T5645] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 687.868242][T10946] loop8: detected capacity change from 0 to 33280 [ 688.107230][T10946] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 688.107246][T10946] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 688.485026][T10952] xt_CT: No such helper "syz1" [ 688.551101][T10946] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.1096: bg 0: block 104: invalid block bitmap [ 688.551123][T10946] loop8: lost filesystem error report for type 5 error -117 [ 688.557141][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 688.557182][ C1] EXT4-fs (loop8): initial error at time 1794625340: ext4_validate_block_bitmap:436 [ 688.557204][ C1] EXT4-fs (loop8): last error at time 1794625340: ext4_validate_block_bitmap:436 [ 689.906626][T10946] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 689.906647][T10946] loop8: lost filesystem error report for type 5 error -117 [ 689.927590][T10946] EXT4-fs error (device loop8): ext4_free_branches:1040: inode #11: comm syz.8.1096: invalid indirect mapped block 1 (level 1) [ 689.927612][T10946] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 690.926896][T10946] EXT4-fs (loop8): 1 truncate cleaned up [ 690.949959][T10946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.917158][ C1] net_ratelimit: 10 callbacks suppressed [ 692.665503][ T9738] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.234622][T10976] loop3: detected capacity change from 0 to 33280 [ 694.243068][T10976] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 694.243081][T10976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 694.268399][T10976] EXT4-fs error (device loop3): ext4_free_branches:1040: inode #16: comm syz.3.1105: invalid indirect mapped block 32768 (level 2) [ 694.268421][T10976] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 694.273688][T10976] EXT4-fs (loop3): 1 orphan inode deleted [ 694.273708][T10976] EXT4-fs (loop3): 1 truncate cleaned up [ 694.275296][T10976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.537627][T10981] random: crng reseeded on system resumption [ 694.575532][T10981] Restarting kernel threads ... [ 694.606510][T10981] Done restarting kernel threads. [ 694.621874][T10981] jffs2: notice: (10981) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 694.823319][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.919637][T10985] netlink: 'syz.8.1109': attribute type 21 has an invalid length. [ 694.919648][T10985] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1109'. [ 695.485780][T10995] xt_CT: No such helper "syz1" [ 695.503133][T10989] kAFS: unable to lookup cell 'ÿ' [ 695.505287][T10992] kAFS: unable to lookup cell '(,c¾Ì' [ 697.277175][ C0] net_ratelimit: 31 callbacks suppressed [ 698.777546][T11017] loop8: detected capacity change from 0 to 32768 [ 698.793689][T11017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1115 (11017) [ 698.808636][T11017] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 698.808666][T11017] BTRFS info (device loop8): using sha256 checksum algorithm [ 698.824513][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1117'. [ 698.824542][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 698.884853][T11017] BTRFS info (device loop8): enabling ssd optimizations [ 698.884865][T11017] BTRFS info (device loop8): turning on sync discard [ 698.884873][T11017] BTRFS info (device loop8): enabling free space tree [ 698.884883][T11017] BTRFS info (device loop8): use zlib compression, level 3 [ 699.327884][ T33] audit: type=1800 audit(1794625350.804:157): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1115" name="file1" dev="loop8" ino=260 res=0 errno=-22 [ 700.195908][T11039] loop1: detected capacity change from 0 to 8 [ 700.228369][T11039] unable to read id index table on loop1 [ 700.499457][ T9738] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 700.751876][ T5632] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 700.770403][T11049] comedi comedi3: multiq3: I/O base address or length out of range [ 700.910742][ T5632] usb 2-1: Using ep0 maxpacket: 32 [ 700.915802][ T5632] usb 2-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 700.918720][ T5632] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 700.918740][ T5632] usb 2-1: config 0 has no interface number 0 [ 700.918776][ T5632] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 700.918796][ T5632] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 700.918827][ T5632] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 700.918849][ T5632] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.934131][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.934150][ T5632] usb 2-1: Product: syz [ 700.934163][ T5632] usb 2-1: Manufacturer: syz [ 700.934176][ T5632] usb 2-1: SerialNumber: syz [ 700.952803][ T5632] usb 2-1: config 0 descriptor?? [ 700.955636][T11044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 701.005551][ T5632] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input14 [ 701.046363][ T4984] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 701.104265][T11051] loop6: detected capacity change from 0 to 4096 [ 701.563333][ T5632] usb 2-1: USB disconnect, device number 13 [ 703.037190][ C1] net_ratelimit: 10 callbacks suppressed [ 703.849475][T11076] loop1: detected capacity change from 0 to 32768 [ 703.856478][T11076] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1132 (11076) [ 703.860981][T11076] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 703.861007][T11076] BTRFS info (device loop1): using sha256 checksum algorithm [ 703.931344][T11076] BTRFS info (device loop1): enabling ssd optimizations [ 703.931357][T11076] BTRFS info (device loop1): turning on sync discard [ 703.931365][T11076] BTRFS info (device loop1): enabling free space tree [ 703.931374][T11076] BTRFS info (device loop1): use zlib compression, level 3 [ 704.418730][ T33] audit: type=1800 audit(1794625355.894:158): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1132" name="file1" dev="loop1" ino=260 res=0 errno=-22 [ 705.409417][ T5628] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 705.492507][T11103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1137'. [ 706.211570][T11113] FAULT_INJECTION: forcing a failure. [ 706.211570][T11113] name failslab, interval 1, probability 5, space 0, times 10000 [ 706.211592][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.0.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.211606][T11113] Tainted: [L]=SOFTLOCKUP [ 706.211611][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 706.211618][T11113] Call Trace: [ 706.211623][T11113] [ 706.211628][T11113] dump_stack_lvl+0xe8/0x150 [ 706.211650][T11113] should_fail_ex+0x3eb/0x540 [ 706.211666][T11113] should_failslab+0xa8/0x100 [ 706.211681][T11113] __kmalloc_cache_noprof+0x9e/0x600 [ 706.211699][T11113] ? vidtv_s302m_encoder_init+0x325/0x780 [ 706.211714][T11113] ? vidtv_s302m_encoder_init+0x325/0x780 [ 706.211733][T11113] vidtv_s302m_encoder_init+0x325/0x780 [ 706.211752][T11113] ? __pfx_vidtv_s302m_encoder_init+0x10/0x10 [ 706.211770][T11113] ? vidtv_psi_registration_desc_init+0x34/0x2a0 [ 706.211784][T11113] ? vidtv_psi_registration_desc_init+0x34/0x2a0 [ 706.211805][T11113] vidtv_channel_s302m_init+0x35a/0x830 [ 706.211823][T11113] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 706.211840][T11113] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 706.211863][T11113] vidtv_channels_init+0x45/0xa0 [ 706.211887][T11113] vidtv_mux_init+0x4d4/0x1960 [ 706.211904][T11113] ? __mutex_lock+0x305/0x15a0 [ 706.211924][T11113] vidtv_start_feed+0x36b/0x5a0 [ 706.211940][T11113] ? __pfx_vidtv_start_feed+0x10/0x10 [ 706.211953][T11113] ? do_raw_spin_lock+0x12b/0x2f0 [ 706.211965][T11113] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 706.211990][T11113] dmx_ts_feed_start_filtering+0x129/0x220 [ 706.212007][T11113] dvb_dmxdev_filter_start+0x434/0x10d0 [ 706.212026][T11113] dvb_demux_do_ioctl+0x49a/0x540 [ 706.212040][T11113] dvb_usercopy+0x199/0x2e0 [ 706.212055][T11113] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 706.212066][T11113] ? __pfx_dvb_usercopy+0x10/0x10 [ 706.212093][T11113] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 706.212106][T11113] dvb_demux_ioctl+0x29/0x40 [ 706.212117][T11113] __se_sys_ioctl+0xfc/0x170 [ 706.212132][T11113] do_syscall_64+0x171/0x540 [ 706.212146][T11113] ? trace_irq_disable+0x3b/0x140 [ 706.212156][T11113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.212166][T11113] ? clear_bhb_loop+0x70/0xc0 [ 706.212179][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.212190][T11113] RIP: 0033:0x00007f07a1ba94d9 [ 706.212203][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.212212][T11113] RSP: 002b:00007f07a2ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.212224][T11113] RAX: ffffffffffffffda RBX: 00007f07a1e25fa0 RCX: 00007f07a1ba94d9 [ 706.212231][T11113] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000008 [ 706.212238][T11113] RBP: 00007f07a1c3804e R08: 0000000000000000 R09: 0000000000000000 [ 706.212244][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.212250][T11113] R13: 00007f07a1e26038 R14: 00007f07a1e25fa0 R15: 00007ffea45496c8 [ 706.212269][T11113] [ 706.256239][T11113] FAULT_INJECTION: forcing a failure. [ 706.256239][T11113] name failslab, interval 1, probability 5, space 0, times 9999 [ 706.256270][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.0.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.256296][T11113] Tainted: [L]=SOFTLOCKUP [ 706.256304][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 706.256315][T11113] Call Trace: [ 706.256323][T11113] [ 706.256332][T11113] dump_stack_lvl+0xe8/0x150 [ 706.256366][T11113] should_fail_ex+0x3eb/0x540 [ 706.256394][T11113] should_failslab+0xa8/0x100 [ 706.256420][T11113] __kmalloc_cache_noprof+0x9e/0x600 [ 706.256452][T11113] ? vidtv_channel_s302m_init+0x78/0x830 [ 706.256481][T11113] ? vidtv_channel_s302m_init+0x78/0x830 [ 706.256517][T11113] vidtv_channel_s302m_init+0x78/0x830 [ 706.256546][T11113] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 706.256576][T11113] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 706.256605][T11113] ? vidtv_mux_init+0x3b1/0x1960 [ 706.256643][T11113] vidtv_channels_init+0x45/0xa0 [ 706.256672][T11113] vidtv_mux_init+0x4d4/0x1960 [ 706.256702][T11113] ? __mutex_lock+0x305/0x15a0 [ 706.256737][T11113] vidtv_start_feed+0x36b/0x5a0 [ 706.256767][T11113] ? __pfx_vidtv_start_feed+0x10/0x10 [ 706.256787][T11113] ? do_raw_spin_lock+0x12b/0x2f0 [ 706.256808][T11113] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 706.256855][T11113] dmx_ts_feed_start_filtering+0x129/0x220 [ 706.256892][T11113] dvb_dmxdev_filter_start+0x434/0x10d0 [ 706.256927][T11113] dvb_demux_do_ioctl+0x49a/0x540 [ 706.256952][T11113] dvb_usercopy+0x199/0x2e0 [ 706.256980][T11113] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 706.257000][T11113] ? __pfx_dvb_usercopy+0x10/0x10 [ 706.257049][T11113] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 706.257069][T11113] dvb_demux_ioctl+0x29/0x40 [ 706.257092][T11113] __se_sys_ioctl+0xfc/0x170 [ 706.257119][T11113] do_syscall_64+0x171/0x540 [ 706.257144][T11113] ? trace_irq_disable+0x3b/0x140 [ 706.257162][T11113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.257181][T11113] ? clear_bhb_loop+0x70/0xc0 [ 706.257205][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.257224][T11113] RIP: 0033:0x00007f07a1ba94d9 [ 706.257244][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.257260][T11113] RSP: 002b:00007f07a2ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.257280][T11113] RAX: ffffffffffffffda RBX: 00007f07a1e25fa0 RCX: 00007f07a1ba94d9 [ 706.257294][T11113] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000008 [ 706.257306][T11113] RBP: 00007f07a1c3804e R08: 0000000000000000 R09: 0000000000000000 [ 706.257318][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.257330][T11113] R13: 00007f07a1e26038 R14: 00007f07a1e25fa0 R15: 00007ffea45496c8 [ 706.257364][T11113] [ 706.342392][T11113] FAULT_INJECTION: forcing a failure. [ 706.342392][T11113] name failslab, interval 1, probability 5, space 0, times 9998 [ 706.342426][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.0.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.342451][T11113] Tainted: [L]=SOFTLOCKUP [ 706.342459][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 706.342469][T11113] Call Trace: [ 706.342477][T11113] [ 706.342484][T11113] dump_stack_lvl+0xe8/0x150 [ 706.342521][T11113] should_fail_ex+0x3eb/0x540 [ 706.342547][T11113] should_failslab+0xa8/0x100 [ 706.342573][T11113] __kmalloc_noprof+0xf9/0x710 [ 706.342603][T11113] ? tomoyo_encode+0x2ad/0x570 [ 706.342631][T11113] ? tomoyo_encode+0x2ad/0x570 [ 706.342665][T11113] tomoyo_encode+0x2ad/0x570 [ 706.342702][T11113] tomoyo_realpath_from_path+0x5fd/0x640 [ 706.342741][T11113] ? tomoyo_path_number_perm+0x219/0x5f0 [ 706.342766][T11113] tomoyo_path_number_perm+0x246/0x5f0 [ 706.342793][T11113] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 706.342816][T11113] ? __lock_acquire+0x747/0x2de0 [ 706.342864][T11113] ? do_futex+0x3e7/0x4e0 [ 706.342904][T11113] ? __fget_files+0x29/0x3f0 [ 706.342933][T11113] ? __fget_files+0x29/0x3f0 [ 706.342956][T11113] security_file_ioctl+0xc3/0x2a0 [ 706.342981][T11113] __se_sys_ioctl+0x47/0x170 [ 706.343008][T11113] do_syscall_64+0x171/0x540 [ 706.343034][T11113] ? trace_irq_disable+0x3b/0x140 [ 706.343051][T11113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.343070][T11113] ? clear_bhb_loop+0x70/0xc0 [ 706.343094][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.343113][T11113] RIP: 0033:0x00007f07a1ba94d9 [ 706.343133][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.343149][T11113] RSP: 002b:00007f07a2ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.343170][T11113] RAX: ffffffffffffffda RBX: 00007f07a1e25fa0 RCX: 00007f07a1ba94d9 [ 706.343183][T11113] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 706.343195][T11113] RBP: 00007f07a1c3804e R08: 0000000000000000 R09: 0000000000000000 [ 706.343208][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.343219][T11113] R13: 00007f07a1e26038 R14: 00007f07a1e25fa0 R15: 00007ffea45496c8 [ 706.343251][T11113] [ 706.343384][T11113] ERROR: Out of memory at tomoyo_realpath_from_path. [ 706.359056][T11113] FAULT_INJECTION: forcing a failure. [ 706.359056][T11113] name failslab, interval 1, probability 5, space 0, times 9997 [ 706.359086][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.0.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.359112][T11113] Tainted: [L]=SOFTLOCKUP [ 706.359119][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 706.359131][T11113] Call Trace: [ 706.359139][T11113] [ 706.359146][T11113] dump_stack_lvl+0xe8/0x150 [ 706.359183][T11113] should_fail_ex+0x3eb/0x540 [ 706.359208][T11113] should_failslab+0xa8/0x100 [ 706.359232][T11113] ? mempool_init_node+0x1f4/0x510 [ 706.359256][T11113] kmem_cache_alloc_noprof+0x9c/0x600 [ 706.359287][T11113] ? mempool_init_noprof+0x3a/0x50 [ 706.359307][T11113] ? mempool_init_node+0x1f4/0x510 [ 706.359331][T11113] ? kasan_save_free_info+0x40/0x50 [ 706.359360][T11113] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 706.359384][T11113] mempool_init_node+0x1f4/0x510 [ 706.359415][T11113] ? __pfx_mempool_free_slab+0x10/0x10 [ 706.359437][T11113] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 706.359459][T11113] mempool_init_noprof+0x3a/0x50 [ 706.359486][T11113] bioset_init+0x2ee/0x7e0 [ 706.359510][T11113] ? __pfx_bioset_init+0x10/0x10 [ 706.359529][T11113] ? __kasan_kmalloc+0x93/0xb0 [ 706.359552][T11113] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 706.359572][T11113] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 706.359589][T11113] ? dm_table_complete+0x19a3/0x22d0 [ 706.359616][T11113] ? dm_table_complete+0x19a3/0x22d0 [ 706.359654][T11113] dm_table_complete+0x1d6e/0x22d0 [ 706.359691][T11113] ? kfree+0x1c7/0x650 [ 706.359714][T11113] ? dm_table_add_target+0x598/0xc70 [ 706.359746][T11113] ? dm_table_add_target+0x758/0xc70 [ 706.359776][T11113] ? __pfx_dm_table_complete+0x10/0x10 [ 706.359814][T11113] table_load+0x3b4/0x8a0 [ 706.359849][T11113] ? __pfx_table_load+0x10/0x10 [ 706.359887][T11113] ? __might_fault+0xaf/0x130 [ 706.359918][T11113] dm_ctl_ioctl+0x9ec/0xe10 [ 706.359950][T11113] ? __pfx_table_load+0x10/0x10 [ 706.359974][T11113] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 706.360028][T11113] ? __fget_files+0x29/0x3f0 [ 706.360050][T11113] ? bpf_lsm_file_ioctl+0x9/0x20 [ 706.360070][T11113] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 706.360096][T11113] __se_sys_ioctl+0xfc/0x170 [ 706.360123][T11113] do_syscall_64+0x171/0x540 [ 706.360149][T11113] ? trace_irq_disable+0x3b/0x140 [ 706.360167][T11113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.360186][T11113] ? clear_bhb_loop+0x70/0xc0 [ 706.360210][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.360230][T11113] RIP: 0033:0x00007f07a1ba94d9 [ 706.360249][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.360265][T11113] RSP: 002b:00007f07a2ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.360285][T11113] RAX: ffffffffffffffda RBX: 00007f07a1e25fa0 RCX: 00007f07a1ba94d9 [ 706.360300][T11113] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 706.360313][T11113] RBP: 00007f07a1c3804e R08: 0000000000000000 R09: 0000000000000000 [ 706.360325][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.360336][T11113] R13: 00007f07a1e26038 R14: 00007f07a1e25fa0 R15: 00007ffea45496c8 [ 706.360368][T11113] [ 706.434899][T11113] device-mapper: table: unable to allocate mempools [ 706.902545][T11125] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 707.259212][T11132] ªªªªª$: renamed from dummy0 [ 707.732864][T11147] xt_cluster: you have exceeded the maximum number of cluster nodes (134217732 > 32) [ 708.012164][T11153] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 708.151365][T11169] net_ratelimit: 20 callbacks suppressed [ 708.151377][T11169] openvswitch: netlink: Actions may not be safe on all matching packets [ 709.182376][T11178] openvswitch: netlink: Missing valid actions attribute. [ 709.182394][T11178] openvswitch: netlink: Actions may not be safe on all matching packets [ 709.350996][T11183] loop3: detected capacity change from 0 to 512 [ 709.421189][T11186] loop0: detected capacity change from 0 to 8 [ 709.506387][T11186] SQUASHFS: Entered squashfs_iget [ 709.506399][T11186] SQUASHFS: Entered squashfs_read_inode [ 709.506406][T11186] SQUASHFS: Entered squashfs_read_metadata [4e8:87] [ 709.506415][T11186] SQUASHFS: Got metadata 0, start block 1256, refcount 1, error 0 [ 709.506427][T11186] SQUASHFS: Entered squashfs_read_metadata [6ec:0] [ 709.506435][T11186] SQUASHFS: Got metadata 1, start block 1772, refcount 1, error 0 [ 709.506446][T11186] SQUASHFS: Entered squashfs_read_metadata [6ec:0] [ 709.506453][T11186] SQUASHFS: Got metadata 1, start block 1772, refcount 1, error 0 [ 709.506463][T11186] SQUASHFS: Entered squashfs_read_metadata [4e8:87] [ 709.506471][T11186] SQUASHFS: Got metadata 0, start block 1256, refcount 1, error 0 [ 709.506481][T11186] SQUASHFS error: Unable to read inode 0x87 [ 709.506663][T11186] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 709.592023][T11186] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 709.600440][T11186] CPU: 1 UID: 0 PID: 11186 Comm: syz.0.1174 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.608758][ C0] virtqueue callback for ffff88802a38de00 (ffffffff86dc05a0) [ 709.608824][ C0] No more buffers in queue [ 709.608874][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 709.608895][ C0] No more buffers in queue [ 709.633237][T11186] Tainted: [L]=SOFTLOCKUP [ 709.637543][T11186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 709.647579][T11186] RIP: 0010:security_d_instantiate+0x2f/0x1d0 [ 709.653632][T11186] Code: 41 57 41 56 53 48 89 f3 49 89 fe e8 bb 2c 20 fd 48 85 db 74 42 4c 8d 7b 04 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 9d 00 00 00 41 8b 2f 89 ee 81 e6 00 02 00 [ 709.657304][ C0] eth0: xmit ffff888076c76500 42:01:0a:80:00:01 [ 709.657332][ C0] Added buffer head 26 to ffff88802a38dc00 [ 709.657365][ C0] virtqueue callback for ffff88802a38dc00 (ffffffff86dc06e0) [ 709.657390][ C0] Sent skb ffff888076c76500 [ 709.657428][ C0] No more buffers in queue [ 709.701396][T11186] RSP: 0018:ffffc90003de7898 EFLAGS: 00010203 [ 709.707441][T11186] RAX: 0000000000000004 RBX: 0000000000000020 RCX: dffffc0000000000 [ 709.715401][T11186] RDX: ffffc90004649000 RSI: 000000000000363c RDI: 000000000000363d [ 709.723352][T11186] RBP: ffffc90003de7ae8 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 709.731313][T11186] R10: dffffc0000000000 R11: fffffbfff237d918 R12: 0000000000000000 [ 709.739261][T11186] R13: dffffc0000000000 R14: ffff888054959ba0 R15: 0000000000000024 [ 709.747207][T11186] FS: 00007f07a2ade6c0(0000) GS:ffff8881234cd000(0000) knlGS:0000000000000000 [ 709.756111][T11186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.762667][T11186] CR2: 00007fa2abc97000 CR3: 00000000489c4000 CR4: 00000000003526f0 [ 709.770616][T11186] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 709.778575][T11186] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 709.786547][T11186] Call Trace: [ 709.789812][T11186] [ 709.792736][T11186] d_splice_alias_ops+0x72/0x440 [ 709.797663][T11186] ? d_splice_alias+0x12/0x30 [ 709.802325][T11186] squashfs_lookup+0xc5e/0x14e0 [ 709.807161][T11186] ? __d_alloc_parallel+0x3a4/0x1740 [ 709.812426][T11186] ? __d_alloc_parallel+0x3a4/0x1740 [ 709.817687][T11186] ? __pfx_squashfs_lookup+0x10/0x10 [ 709.822965][T11186] ? __pfx___d_alloc_parallel+0x10/0x10 [ 709.828489][T11186] __lookup_slow+0x24b/0x360 [ 709.833060][T11186] lookup_slow+0x59/0x80 [ 709.837275][T11186] path_lookupat+0x3f5/0x8c0 [ 709.841243][ C0] virtqueue callback for ffff88801ff9d200 (ffffffff857b8bd0) [ 709.841324][ C0] virtqueue interrupt with no work for ffff88801ff9d400 [ 709.841337][ C0] virtqueue interrupt with no work for ffff88801ff9d600 [ 709.841439][ T9812] Added buffer head 0 to ffff88801ff9d200 [ 709.868696][T11186] filename_lookup+0x265/0x5d0 [ 709.873448][T11186] ? __pfx_filename_lookup+0x10/0x10 [ 709.878736][T11186] ? strncpy_from_user+0x150/0x2c0 [ 709.883830][T11186] path_listxattrat+0x13b/0x3f0 [ 709.888676][T11186] ? __pfx_path_listxattrat+0x10/0x10 [ 709.894034][T11186] do_syscall_64+0x171/0x540 [ 709.898609][T11186] ? trace_irq_disable+0x3b/0x140 [ 709.903611][T11186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.909679][T11186] ? clear_bhb_loop+0x70/0xc0 [ 709.914362][T11186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.920240][T11186] RIP: 0033:0x00007f07a1ba94d9 [ 709.924991][T11186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.944577][T11186] RSP: 002b:00007f07a2ade028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 709.952975][T11186] RAX: ffffffffffffffda RBX: 00007f07a1e25fa0 RCX: 00007f07a1ba94d9 [ 709.960926][T11186] RDX: 00000000000000e3 RSI: 0000200000000840 RDI: 0000200000000800 [ 709.968873][T11186] RBP: 00007f07a1c3804e R08: 0000000000000000 R09: 0000000000000000 [ 709.976835][T11186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.984780][T11186] R13: 00007f07a1e26038 R14: 00007f07a1e25fa0 R15: 00007ffea45496c8 [ 709.992739][T11186] [ 709.995747][T11186] Modules linked in: [ 710.000157][T11186] ---[ end trace 0000000000000000 ]--- [ 710.006962][T11058] inotify_handle_inode_event: group=ffff88801ef2e800 mark=ffff88802943dc80 mask=8000 [ 710.006982][T11058] fsnotify_insert_event: group=ffff88801ef2e800 event=ffff88802ff79240 [ 710.015248][T11184] kobject: 'syztnl2' (ffff8880137187e0): kobject_uevent_env [ 710.015315][T11184] kobject: 'syztnl2' (ffff8880137187e0): fill_kobj_path: path = '/devices/virtual/net/syztnl2' [ 710.148059][ T4999] get_one_event: group=ffff88801ef2e800 event=ffff88802ff79240 [ 710.148078][ T4999] fsnotify_remove_first_event: group=ffff88801ef2e800 event=ffff88802ff79240 [ 710.148087][ T4999] inotify_read: group=ffff88801ef2e800 kevent=ffff88802ff79240 [ 710.148095][ T4999] copy_event_to_user: group=ffff88801ef2e800 event=ffff88802ff79240 [ 710.148109][ T4999] inotify_read: group=ffff88801ef2e800 kevent=0000000000000000 [ 710.197478][T11184] kcov: kcov_task_exit: t = ffff8880217d8000, kcov->t = ffff8880217d8000 [ 710.222823][T11188] kcov: kcov_start: t = ffff888030278000, size = 524288, area = ffffc90005211000 [ 710.224775][T11183] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 710.225997][T11183] kcov: kcov_task_exit: t = ffff88802a360000, kcov->t = ffff88802a360000 [ 710.241008][ T6032] sd 0:0:1:0: cmd ffff88802dbae990 CDB: 0x2a [ 710.241061][ T6032] Added buffer head 464 to ffff8880278f5200 [ 710.241118][ T6032] sd 0:0:1:0: cmd ffff88802dbaed50 CDB: 0x2a [ 710.241136][ T6032] Added buffer head 433 to ffff8880278f5200 [ 710.241187][T11188] kcov: kcov_task_exit: t = ffff888030278000, kcov->t = ffff888030278000 [ 710.252506][ C1] virtqueue callback for ffff8880278f5200 (ffffffff868a2290) [ 710.252536][ C1] sd 0:0:1:0: cmd ffff88802dbaed50 response 0 status 0x0 sense_len 0 [ 710.252559][ C1] No more buffers in queue [ 710.264874][ T5630] kernfs backing_file: removing [ 710.264912][ T5630] kernfs offset: removing [ 710.264936][ T5630] kernfs sizelimit: removing [ 710.264959][ T5630] kernfs autoclear: removing [ 710.264982][ T5630] kernfs partscan: removing [ 710.265005][ T5630] kernfs dio: removing [ 710.265027][ T5630] kernfs loop: removing [ 710.265049][ T5630] kobject: 'loop3' (ffff88802548afe0): kobject_uevent_env [ 710.265081][ T5630] kobject: 'loop3' (ffff88802548afe0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 710.265211][ T5630] kobject: 'loop3' (ffff88802548afe0): kobject_uevent_env [ 710.265591][ T5630] kobject: 'loop3' (ffff88802548afe0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 710.274703][T11189] kcov: kcov_start: t = ffff888033271f40, size = 524288, area = ffffc90011bd9000 [ 710.292401][ C1] virtqueue callback for ffff8880278f5200 (ffffffff868a2290) [ 710.292433][ C1] sd 0:0:1:0: cmd ffff88802dbae990 response 0 status 0x0 sense_len 0 [ 710.292500][ C1] No more buffers in queue [ 710.637116][ C1] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 710.841130][ C0] virtqueue callback for ffff88801ff9d200 (ffffffff857b8bd0) [ 710.841200][ C0] virtqueue interrupt with no work for ffff88801ff9d400 [ 710.841215][ C0] virtqueue interrupt with no work for ffff88801ff9d600 [ 710.841283][ T9812] Added buffer head 0 to ffff88801ff9d200 [ 710.868447][ C0] virtqueue callback for ffff88802a38de00 (ffffffff86dc05a0) [ 710.868559][ C0] No more buffers in queue [ 710.868812][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 710.868833][ C0] No more buffers in queue [ 710.868943][ C0] eth0: xmit ffff88803394ac80 42:01:0a:80:00:01 [ 710.868968][ C0] Added buffer head 26 to ffff88802a38dc00 [ 710.868993][ C0] virtqueue callback for ffff88802a38dc00 (ffffffff86dc06e0) [ 710.869033][ C0] Sent skb ffff88803394ac80 [ 710.869061][ C0] No more buffers in queue [ 710.945120][T11189] kobject: 'loop8' (ffff8880254a8d60): kobject_uevent_env [ 710.945135][T11189] kobject: 'loop8' (ffff8880254a8d60): kobject_uevent_env: uevent_suppress caused the event to drop! [ 710.945242][T11189] loop8: detected capacity change from 0 to 33280 [ 710.945250][T11189] kobject: 'loop8' (ffff8880254a8d60): kobject_uevent_env [ 710.945259][T11189] kobject: 'loop8' (ffff8880254a8d60): kobject_uevent_env: uevent_suppress ** replaying previous printk message ** [ 710.945259][T11189] kobject: 'loop8' (ffff8880254a8d60): kobject_uevent_env: uevent_suppress caused the event to drop! [ 710.945267][T11189] kobject: 'loop8' (ffff8880254a8d60): kobject_uevent_env [ 710.945285][T11189] kobject: 'loop8' (ffff8880254a8d60): fill_kobj_path: path = '/devices/virtual/block/loop8' [ 710.945362][T11189] send_to_group: group=ffff88801ef2e800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807fa7c400 data_type=2 dir=0000000000000000 cookie=0 [ 710.945380][T11189] inotify_handle_inode_event: group=ffff88801ef2e800 mark=ffff88802943de10 mask=8 [ 710.945396][T11189] fsnotify_insert_event: group=ffff88801ef2e800 event=ffff88802ff79540 [ 710.957042][T11189] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 710.957058][T11189] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 710.961255][ T4999] get_one_event: group=ffff88801ef2e800 event=ffff88802ff79540 [ 710.961277][ T4999] fsnotify_remove_first_event: group=ffff88801ef2e800 event=ffff88802ff79540 [ 710.961293][ T4999] inotify_read: group=ffff88801ef2e800 kevent=ffff88802ff79540 [ 710.961307][ T4999] copy_event_to_user: group=ffff88801ef2e800 event=ffff88802ff79540 [ 710.961331][ T4999] inotify_read: group=ffff88801ef2e800 kevent=0000000000000000 [ 710.967192][ T4999] kobject: 'loop8' (ffff8880254a8d60): kobject_uevent_env [ 710.967227][ T4999] kobject: 'loop8' (ffff8880254a8d60): fill_kobj_path: path = '/devices/virtual/block/loop8' [ 710.969421][T11058] inotify_handle_inode_event: group=ffff88801ef2e800 mark=ffff88802943d0c8 mask=8000 [ 710.969450][T11058] fsnotify_insert_event: group=ffff88801ef2e800 event=ffff88802ff794c0 [ 710.976394][T10961] inotify_handle_inode_event: group=ffff88801ef2e800 mark=ffff88802943de10 mask=8000 [ 710.976423][T10961] fsnotify_insert_event: group=ffff88801ef2e800 event=ffff88802ff79400 [ 710.977530][ T4999] get_one_event: group=ffff88801ef2e800 event=ffff88802ff794c0 [ 710.977548][ T4999] fsnotify_remove_first_event: group=ffff88801ef2e800 event=ffff88802ff794c0 [ 710.977564][ T4999] inotify_read: group=ffff88801ef2e800 kevent=ffff88802ff794c0 [ 710.977579][ T4999] copy_event_to_user: group=ffff88801ef2e800 event=ffff88802ff794c0 [ 710.977603][ T4999] get_one_event: group=ffff88801ef2e800 event=ffff88802ff79400 [ 710.977618][ T4999] fsnotify_remove_first_event: group=ffff88801ef2e800 event=ffff88802ff79400 [ 710.977633][ T4999] inotify_read: group=ffff88801ef2e800 kevent=ffff88802ff79400 [ 710.977647][ T4999] copy_event_to_user: group=ffff88801ef2e800 event=ffff88802ff79400 [ 710.977668][ T4999] inotify_read: group=ffff88801ef2e800 kevent=0000000000000000 [ 710.978527][T11058] inotify_handle_inode_event: group=ffff88801ef2e800 mark=ffff88802943d000 mask=8000 [ 710.978553][T11058] fsnotify_insert_event: group=ffff88801ef2e800 event=ffff88802ff79080 [ 710.981640][ T4999] get_one_event: group=ffff88801ef2e800 event=ffff88802ff79080 [ 710.981658][ T4999] fsnotify_remove_first_event: group=ffff88801ef2e800 event=ffff88802ff79080 [ 710.981674][ T4999] inotify_read: group=ffff88801ef2e800 kevent=ffff88802ff79080 [ 710.981689][ T4999] copy_event_to_user: group=ffff88801ef2e800 event=ffff88802ff79080 [ 710.981711][ T4999] inotify_read: group=ffff88801ef2e800 kevent=0000000000000000 [ 710.987602][T11186] RIP: 0010:security_d_instantiate+0x2f/0x1d0 [ 710.987643][T11186] Code: 41 57 41 56 53 48 89 f3 49 89 fe e8 bb 2c 20 fd 48 85 db 74 42 4c 8d 7b 04 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 9d 00 00 00 41 8b 2f 89 ee 81 e6 00 02 00 [ 710.987661][T11186] RSP: 0018:ffffc90003de7898 EFLAGS: 00010203 [ 710.987678][T11186] RAX: 0000000000000004 RBX: 0000000000000020 RCX: dffffc0000000000 [ 710.987692][T11186] RDX: ffffc90004649000 RSI: 000000000000363c RDI: 000000000000363d [ 710.987705][T11186] RBP: ffffc90003de7ae8 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 710.987720][T11186] R10: dffffc0000000000 R11: fffffbfff237d918 R12: 0000000000000000 [ 710.987734][T11186] R13: dffffc0000000000 R14: ffff888054959ba0 R15: 0000000000000024 [ 710.987748][T11186] FS: 00007f07a2ade6c0(0000) GS:ffff8881234cd000(0000) knlGS:0000000000000000 [ 710.987764][T11186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.987778][T11186] CR2: 00007f9bff81b000 CR3: 00000000489c4000 CR4: 00000000003526f0 [ 710.987795][T11186] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 710.987806][T11186] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 710.987827][T11186] Kernel panic - not syncing: Fatal exception [ 711.409297][T11186] Kernel Offset: disabled [ 711.413612][T11186] Rebooting in 86400 seconds..