last executing test programs: 8.388700357s ago: executing program 1 (id=608): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000140)='1\x00', 0x2) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 8.1343666s ago: executing program 3 (id=611): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 7.732695409s ago: executing program 1 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 7.71366984s ago: executing program 3 (id=613): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000001080)='./proc_dir\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, 0x24}}, 0x40000) lstat(&(0x7f0000000280)='./proc_dir\x00', &(0x7f0000000340)) 7.557222648s ago: executing program 0 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.145185777s ago: executing program 3 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 6.763292566s ago: executing program 0 (id=616): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = syz_usb_connect(0x2, 0xab, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000200)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000040)={0x0, 0x0}) io_uring_setup(0x6b14, &(0x7f00000194c0)={0x0, 0x8cb3, 0x1c11, 0x0, 0x4026e}) 6.45956266s ago: executing program 2 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, 0x0) io_setup(0x2, 0x0) connect(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff3, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) 6.319223187s ago: executing program 1 (id=618): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10, &(0x7f0000000040), 0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000180)}) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 4.449568087s ago: executing program 1 (id=619): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) 4.328526922s ago: executing program 3 (id=620): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000280)={[{@utf8}, {@errors_continue}, {}, {@discard}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@namecase}, {@namecase}]}, 0x1, 0x1534, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 4.207239058s ago: executing program 2 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000002, 0x2) 3.34442445s ago: executing program 1 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.151071719s ago: executing program 0 (id=624): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000001080)='./proc_dir\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, 0x24}}, 0x40000) lstat(&(0x7f0000000280)='./proc_dir\x00', &(0x7f0000000340)) 2.223048013s ago: executing program 2 (id=625): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x288001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0xffffffff, 0x21f9, 0x86a9, 0x4, 0x9, 0x9, 0x9e}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.200123814s ago: executing program 3 (id=626): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6368, 0x5, 0x4, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x2, 0x2, 0x3, 0x7, 0x80000001}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x18, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.021583883s ago: executing program 1 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 2.005733834s ago: executing program 0 (id=628): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10, &(0x7f0000000040), 0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000180)}) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 1.511380627s ago: executing program 2 (id=629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) 1.385832084s ago: executing program 0 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, 0x0) io_setup(0x2, 0x0) connect(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff3, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) 1.332239506s ago: executing program 3 (id=631): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x1, 0x0, &(0x7f0000000140)) 152.645643ms ago: executing program 0 (id=632): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = syz_usb_connect(0x2, 0xab, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000040)={0x0, 0x0}) io_uring_setup(0x6b14, &(0x7f00000194c0)={0x0, 0x8cb3, 0x1c11, 0x0, 0x4026e}) 86.962806ms ago: executing program 2 (id=633): setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$incfs_id(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 0s ago: executing program 2 (id=634): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}]}, &(0x7f00000002c0)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 79.272701][ T5763] cgroup: Unknown subsys name 'net' [ 79.396071][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.105909][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.387199][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.395816][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.407866][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.416434][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.418699][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.425156][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.438338][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.446799][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.454821][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.463494][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.467739][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.472346][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.490663][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.499924][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.500801][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.510395][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.522180][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.522450][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.536346][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.546853][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.554138][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.568758][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.577716][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.585270][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.965210][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.137588][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.214930][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.245011][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.256193][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.263745][ T5776] bridge_slave_0: entered allmulticast mode [ 84.271954][ T5776] bridge_slave_0: entered promiscuous mode [ 84.287583][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.296178][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.303804][ T5776] bridge_slave_1: entered allmulticast mode [ 84.311457][ T5776] bridge_slave_1: entered promiscuous mode [ 84.418365][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.469706][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.476871][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.484792][ T5778] bridge_slave_0: entered allmulticast mode [ 84.492347][ T5778] bridge_slave_0: entered promiscuous mode [ 84.504795][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.550284][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.557556][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.564744][ T5778] bridge_slave_1: entered allmulticast mode [ 84.572127][ T5778] bridge_slave_1: entered promiscuous mode [ 84.581517][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.593444][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.600661][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.607904][ T5775] bridge_slave_0: entered allmulticast mode [ 84.614901][ T5775] bridge_slave_0: entered promiscuous mode [ 84.623620][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.630965][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.638265][ T5775] bridge_slave_1: entered allmulticast mode [ 84.645567][ T5775] bridge_slave_1: entered promiscuous mode [ 84.710945][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.755368][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.777292][ T5776] team0: Port device team_slave_0 added [ 84.786381][ T5776] team0: Port device team_slave_1 added [ 84.795335][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.808069][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.820897][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.828191][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.835351][ T5777] bridge_slave_0: entered allmulticast mode [ 84.843450][ T5777] bridge_slave_0: entered promiscuous mode [ 84.893819][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.901137][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.908684][ T5777] bridge_slave_1: entered allmulticast mode [ 84.915601][ T5777] bridge_slave_1: entered promiscuous mode [ 84.936675][ T5778] team0: Port device team_slave_0 added [ 84.967050][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.974173][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.000484][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.024025][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.031274][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.057407][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.072927][ T5775] team0: Port device team_slave_0 added [ 85.080675][ T5778] team0: Port device team_slave_1 added [ 85.100157][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.129579][ T5775] team0: Port device team_slave_1 added [ 85.150513][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.183164][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.193311][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.222513][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.280035][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.287035][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.316552][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.328629][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.335614][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.361908][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.380222][ T5776] hsr_slave_0: entered promiscuous mode [ 85.386676][ T5776] hsr_slave_1: entered promiscuous mode [ 85.396918][ T5777] team0: Port device team_slave_0 added [ 85.406496][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.413946][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.440449][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.462485][ T5777] team0: Port device team_slave_1 added [ 85.547552][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.554537][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.581727][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.593207][ T5784] Bluetooth: hci3: command tx timeout [ 85.600242][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.608839][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.635753][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.667505][ T5784] Bluetooth: hci2: command tx timeout [ 85.673233][ T5784] Bluetooth: hci0: command tx timeout [ 85.679268][ T5086] Bluetooth: hci1: command tx timeout [ 85.713767][ T5778] hsr_slave_0: entered promiscuous mode [ 85.720858][ T5778] hsr_slave_1: entered promiscuous mode [ 85.727853][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.735670][ T5778] Cannot create hsr debugfs directory [ 85.803195][ T5777] hsr_slave_0: entered promiscuous mode [ 85.810881][ T5777] hsr_slave_1: entered promiscuous mode [ 85.817980][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.825620][ T5777] Cannot create hsr debugfs directory [ 85.842826][ T5775] hsr_slave_0: entered promiscuous mode [ 85.849663][ T5775] hsr_slave_1: entered promiscuous mode [ 85.855836][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.863526][ T5775] Cannot create hsr debugfs directory [ 86.274100][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.286087][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.318639][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.329207][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.369613][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.386471][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.398868][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.434322][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.482853][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.522968][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.534049][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.545901][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.629751][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.655120][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.666688][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.685511][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.761449][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.832490][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.870857][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.922429][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.929757][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.946954][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.954203][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.014049][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.032190][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.080896][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.104357][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.111573][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.148183][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.172167][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.179451][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.210015][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.260210][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.267483][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.281267][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.288507][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.332749][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.340010][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.359752][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.405989][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.413209][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.572271][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.582966][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.677500][ T5086] Bluetooth: hci3: command tx timeout [ 87.747776][ T5086] Bluetooth: hci1: command tx timeout [ 87.753245][ T5086] Bluetooth: hci0: command tx timeout [ 87.759387][ T5784] Bluetooth: hci2: command tx timeout [ 87.963410][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.115428][ T5776] veth0_vlan: entered promiscuous mode [ 88.180120][ T5776] veth1_vlan: entered promiscuous mode [ 88.227151][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.244571][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.265355][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.337067][ T5776] veth0_macvtap: entered promiscuous mode [ 88.363243][ T5776] veth1_macvtap: entered promiscuous mode [ 88.412607][ T5778] veth0_vlan: entered promiscuous mode [ 88.452082][ T5778] veth1_vlan: entered promiscuous mode [ 88.471127][ T5775] veth0_vlan: entered promiscuous mode [ 88.481634][ T5777] veth0_vlan: entered promiscuous mode [ 88.493261][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.525318][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.546535][ T5777] veth1_vlan: entered promiscuous mode [ 88.569112][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.581271][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.591101][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.600145][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.613709][ T5775] veth1_vlan: entered promiscuous mode [ 88.676258][ T5778] veth0_macvtap: entered promiscuous mode [ 88.733888][ T5777] veth0_macvtap: entered promiscuous mode [ 88.744052][ T5775] veth0_macvtap: entered promiscuous mode [ 88.754990][ T5778] veth1_macvtap: entered promiscuous mode [ 88.776508][ T5777] veth1_macvtap: entered promiscuous mode [ 88.825490][ T5775] veth1_macvtap: entered promiscuous mode [ 88.835265][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.851281][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.863437][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.903868][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.914833][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.925487][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.936055][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.947702][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.974902][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.991539][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.005820][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.019332][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.032058][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.065330][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.078371][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.089697][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.100990][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.113094][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.124320][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.135861][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.146369][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.159588][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.170233][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.181032][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.193928][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.204452][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.215347][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.224523][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.233448][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.259202][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.279121][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.289180][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.299582][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.311558][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.322600][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.333089][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.343602][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.356130][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.366905][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.379267][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.393451][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.406807][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.422895][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.434264][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.443641][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.452875][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.616590][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.642459][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.742921][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.753148][ T5086] Bluetooth: hci3: command tx timeout [ 89.778986][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.797181][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.827953][ T5086] Bluetooth: hci0: command tx timeout [ 89.834086][ T5784] Bluetooth: hci2: command tx timeout [ 89.840583][ T5789] Bluetooth: hci1: command tx timeout [ 89.843102][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.601515][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.625640][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.051783][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.067711][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.170807][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.208090][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.827846][ T5789] Bluetooth: hci3: command tx timeout [ 91.907675][ T5789] Bluetooth: hci1: command tx timeout [ 91.907726][ T5789] Bluetooth: hci0: command tx timeout [ 91.907787][ T5789] Bluetooth: hci2: command tx timeout [ 92.019364][ T23] cfg80211: failed to load regulatory.db [ 92.498245][ T5868] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.835071][ T5873] netlink: 'syz.3.8': attribute type 11 has an invalid length. [ 93.541778][ T28] audit: type=1800 audit(1789307781.389:2): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 95.551405][ T28] audit: type=1400 audit(1789307783.239:3): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=5889 comm="syz.1.15" name="//o" offset=35 [ 97.303405][ T5903] syz.3.17[5903]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.329017][ T5903] loop3: detected capacity change from 0 to 512 [ 99.197576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.877369][ C0] sched: RT throttling activated [ 100.772570][ T5919] loop1: detected capacity change from 0 to 1024 [ 102.536414][ T5931] tipc: Failed to obtain node identity [ 102.547883][ T5931] tipc: Enabling of bearer rejected, failed to enable media [ 103.027020][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.247588][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 103.277085][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.298458][ T5949] loop1: detected capacity change from 0 to 512 [ 103.327553][ T5820] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 103.342964][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.396536][ T5820] usb 4-1: config 0 descriptor?? [ 105.164052][ T5820] usbhid 4-1:0.0: can't add hid device: -71 [ 105.172365][ T5820] usbhid: probe of 4-1:0.0 failed with error -71 [ 105.216707][ T5820] usb 4-1: USB disconnect, device number 2 [ 106.700922][ T5973] bridge0: entered promiscuous mode [ 106.705522][ T5974] loop3: detected capacity change from 0 to 1024 [ 106.706936][ T5973] vlan2: entered promiscuous mode [ 108.979068][ T5966] loop2: detected capacity change from 0 to 40427 [ 109.889077][ T5988] Zero length message leads to an empty skb [ 109.963850][ T5988] lo: entered promiscuous mode [ 110.177123][ T5988] tunl0: entered promiscuous mode [ 110.221346][ T5988] gre0: entered promiscuous mode [ 110.326385][ T5988] gretap0: entered promiscuous mode [ 110.366443][ T5988] erspan0: entered promiscuous mode [ 110.404289][ T5988] ip_vti0: entered promiscuous mode [ 110.431536][ T5988] ip6_vti0: entered promiscuous mode [ 110.444747][ T5988] sit0: entered promiscuous mode [ 110.466691][ T5988] ip6tnl0: entered promiscuous mode [ 110.485794][ T5988] ip6gre0: entered promiscuous mode [ 110.648549][ T5988] syz_tun: entered promiscuous mode [ 110.695861][ T5988] ip6gretap0: entered promiscuous mode [ 110.746683][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.755353][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.787021][ T5988] bridge0: entered promiscuous mode [ 110.826924][ T28] audit: type=1326 audit(1789307798.679:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85efb9e159 code=0x7ffc0000 [ 110.861212][ T28] audit: type=1326 audit(1789307798.679:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85efb9e159 code=0x7ffc0000 [ 110.891094][ T28] audit: type=1326 audit(1789307798.679:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f85efb9e159 code=0x7ffc0000 [ 110.893178][ T5988] vcan0: entered promiscuous mode [ 110.915829][ T28] audit: type=1326 audit(1789307798.679:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85efb9e159 code=0x7ffc0000 [ 110.944210][ T28] audit: type=1326 audit(1789307798.679:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85efb9e159 code=0x7ffc0000 [ 110.970370][ T5988] bond0: entered promiscuous mode [ 110.980249][ T5988] bond_slave_0: entered promiscuous mode [ 110.982712][ T28] audit: type=1326 audit(1789307798.679:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85efb9e159 code=0x7ffc0000 [ 110.986562][ T5988] bond_slave_1: entered promiscuous mode [ 111.013432][ T28] audit: type=1326 audit(1789307798.679:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85efb9e159 code=0x7ffc0000 [ 111.045291][ T28] audit: type=1326 audit(1789307798.709:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85efb5e98e code=0x7ffc0000 [ 111.070830][ T5988] team0: entered promiscuous mode [ 111.077181][ T5988] team_slave_0: entered promiscuous mode [ 111.083524][ T28] audit: type=1326 audit(1789307798.709:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85efb9ddeb code=0x7ffc0000 [ 111.094258][ T5988] team_slave_1: entered promiscuous mode [ 111.118722][ T28] audit: type=1326 audit(1789307798.709:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85efb9ddeb code=0x7ffc0000 [ 111.148536][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.158063][ T5988] dummy0: entered promiscuous mode [ 111.182398][ T5988] nlmon0: entered promiscuous mode [ 111.208284][ T5988] caif0: entered promiscuous mode [ 111.214347][ T5988] batadv0: entered promiscuous mode [ 111.230140][ T5988] vxcan0: entered promiscuous mode [ 111.238716][ T5988] vxcan1: entered promiscuous mode [ 111.248940][ T5988] veth0: entered promiscuous mode [ 111.262670][ T5988] veth1: entered promiscuous mode [ 111.300431][ T5988] wg0: entered promiscuous mode [ 111.313932][ T5988] wg1: entered promiscuous mode [ 111.329884][ T5988] wg2: entered promiscuous mode [ 111.355179][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.365972][ T788] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 111.383824][ T5988] veth0_to_bridge: entered promiscuous mode [ 111.391657][ T788] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 111.411133][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.427507][ T788] usb 4-1: Product: syz [ 111.431831][ T788] usb 4-1: Manufacturer: syz [ 111.436465][ T788] usb 4-1: SerialNumber: syz [ 111.444072][ T5988] veth1_to_bridge: entered promiscuous mode [ 111.463975][ T788] sisusb 4-1:1.0: Invalid USB2VGA device [ 111.482188][ T788] sisusb: probe of 4-1:1.0 failed with error -22 [ 111.508785][ T5988] veth0_to_bond: entered promiscuous mode [ 111.533651][ T5988] veth1_to_bond: entered promiscuous mode [ 111.555329][ T5988] veth0_to_team: entered promiscuous mode [ 111.608032][ T5988] veth1_to_team: entered promiscuous mode [ 111.630621][ T5988] veth0_to_batadv: entered promiscuous mode [ 111.647761][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.688111][ T5988] batadv_slave_0: entered promiscuous mode [ 111.709229][ T5988] veth1_to_batadv: entered promiscuous mode [ 111.729185][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.748168][ T5988] batadv_slave_1: entered promiscuous mode [ 111.767827][ T6012] usb 4-1: USB disconnect, device number 3 [ 111.796779][ T5988] xfrm0: entered promiscuous mode [ 111.829178][ T5988] veth0_to_hsr: entered promiscuous mode [ 111.888686][ T5988] veth1_to_hsr: entered promiscuous mode [ 111.913717][ T5988] hsr0: entered promiscuous mode [ 111.938084][ T5988] veth1_virt_wifi: entered promiscuous mode [ 111.958649][ T5988] veth0_virt_wifi: entered promiscuous mode [ 111.971047][ T5988] virt_wifi0: entered promiscuous mode [ 112.003748][ T5988] vlan0: entered promiscuous mode [ 112.009487][ T5988] vlan1: entered promiscuous mode [ 112.016709][ T5988] macvlan0: entered promiscuous mode [ 112.131548][ T5988] macvlan1: entered promiscuous mode [ 112.140987][ T5988] ipvlan0: entered promiscuous mode [ 112.146319][ T5988] ipvlan1: entered promiscuous mode [ 112.190046][ T5988] macvtap0: entered promiscuous mode [ 112.216585][ T5988] macsec0: entered promiscuous mode [ 112.241699][ T5988] geneve0: entered promiscuous mode [ 112.252191][ T5988] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.262387][ T5988] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.275263][ T5988] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.297439][ T5988] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.353118][ T5988] geneve1: entered promiscuous mode [ 112.390151][ T5988] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 112.425486][ T5988] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 112.462261][ T5988] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 112.506779][ T5988] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 112.537647][ T5988] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 112.573992][ T5988] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 112.601813][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 112.627520][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 114.268731][ T6045] loop1: detected capacity change from 0 to 1024 [ 115.255471][ T6058] bridge0: port 3(erspan0) entered blocking state [ 115.262360][ T6058] bridge0: port 3(erspan0) entered disabled state [ 115.269225][ T6058] erspan0: entered allmulticast mode [ 115.276989][ T6058] erspan0: entered promiscuous mode [ 115.284057][ T6058] bridge0: port 3(erspan0) entered blocking state [ 115.290853][ T6058] bridge0: port 3(erspan0) entered forwarding state [ 115.346248][ T6058] erspan0: left allmulticast mode [ 115.376829][ T6058] erspan0: left promiscuous mode [ 115.383249][ T6058] bridge0: port 3(erspan0) entered disabled state [ 115.435185][ T6060] proc: Unknown parameter 'trans' [ 116.480711][ T6060] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 116.487809][ T6060] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 116.499742][ T6060] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 116.707690][ T6064] 0x000000000000-0x000000020000 : "" [ 116.932833][ T6064] ftl_cs: FTL header not found. [ 119.254027][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 119.254038][ T28] audit: type=1326 audit(1789307807.109:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c7b9e159 code=0x7ffc0000 [ 119.343199][ T28] audit: type=1326 audit(1789307807.139:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c7b9e159 code=0x7ffc0000 [ 119.424852][ T28] audit: type=1326 audit(1789307807.229:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f14c7b9e159 code=0x7ffc0000 [ 119.451757][ T28] audit: type=1326 audit(1789307807.229:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c7b9e159 code=0x7ffc0000 [ 119.477234][ T28] audit: type=1326 audit(1789307807.229:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c7b9e159 code=0x7ffc0000 [ 119.532193][ T28] audit: type=1326 audit(1789307807.239:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14c7b9e159 code=0x7ffc0000 [ 119.593482][ T28] audit: type=1326 audit(1789307807.239:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c7b9e159 code=0x7ffc0000 [ 119.660963][ T28] audit: type=1326 audit(1789307807.249:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c7b9e159 code=0x7ffc0000 [ 119.686562][ T6076] loop3: detected capacity change from 0 to 40427 [ 119.717114][ T6076] F2FS-fs (loop3): heap/no_heap options were deprecated [ 119.809717][ T28] audit: type=1326 audit(1789307807.259:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14c7b5e98e code=0x7ffc0000 [ 119.889129][ T6097] bridge0: port 3(erspan0) entered blocking state [ 119.895721][ T6097] bridge0: port 3(erspan0) entered disabled state [ 119.902495][ T6097] erspan0: entered allmulticast mode [ 119.909472][ T6097] erspan0: entered promiscuous mode [ 119.915387][ T6097] bridge0: port 3(erspan0) entered blocking state [ 119.922000][ T6097] bridge0: port 3(erspan0) entered forwarding state [ 119.936278][ T6097] erspan0: left allmulticast mode [ 119.941513][ T6097] erspan0: left promiscuous mode [ 119.946748][ T6097] bridge0: port 3(erspan0) entered disabled state [ 120.167471][ T6003] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.831965][ T6076] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.001138][ T28] audit: type=1326 audit(1789307807.259:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.1.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14c7b9ddeb code=0x7ffc0000 [ 121.086879][ T6003] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.103218][ T6003] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 121.137163][ T6003] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 121.153331][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.161748][ T6003] usb 2-1: Product: syz [ 121.166243][ T6003] usb 2-1: Manufacturer: syz [ 121.175879][ T6003] usb 2-1: SerialNumber: syz [ 123.298407][ T6112] loop0: detected capacity change from 0 to 256 [ 123.593400][ T6003] sisusb 2-1:1.0: Invalid USB2VGA device [ 123.599211][ T6003] sisusb: probe of 2-1:1.0 failed with error -22 [ 123.619636][ T6003] usb 2-1: USB disconnect, device number 2 [ 123.655834][ T6076] F2FS-fs (loop3): Start checkpoint disabled! [ 123.694051][ T5792] udevd[5792]: setting mode of /dev/bus/usb/002/002 to 020664 failed: No such file or directory [ 123.724534][ T6109] sctp: failed to load transform for md5: -4 [ 123.788186][ T5792] udevd[5792]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory [ 123.793137][ T6076] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 125.401171][ T6137] loop0: detected capacity change from 0 to 512 [ 126.947419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.668787][ T6115] syz.2.75 (6115) used greatest stack depth: 20232 bytes left [ 129.385066][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 129.385082][ T28] audit: type=1326 audit(1789307817.239:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab4b9e159 code=0x7ffc0000 [ 129.477477][ T28] audit: type=1326 audit(1789307817.239:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab4b9e159 code=0x7ffc0000 [ 129.547658][ T28] audit: type=1326 audit(1789307817.249:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3ab4b9e159 code=0x7ffc0000 [ 129.597260][ T28] audit: type=1326 audit(1789307817.249:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab4b9e159 code=0x7ffc0000 [ 129.631417][ T28] audit: type=1326 audit(1789307817.249:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3ab4b9e159 code=0x7ffc0000 [ 129.657074][ T28] audit: type=1326 audit(1789307817.249:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab4b9e159 code=0x7ffc0000 [ 129.718599][ T28] audit: type=1326 audit(1789307817.249:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab4b9e159 code=0x7ffc0000 [ 129.743239][ T28] audit: type=1326 audit(1789307817.299:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ab4b5e98e code=0x7ffc0000 [ 129.769359][ T6004] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.836710][ T28] audit: type=1326 audit(1789307817.299:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ab4b9ddeb code=0x7ffc0000 [ 129.887526][ T28] audit: type=1326 audit(1789307817.299:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.2.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ab4b9ddeb code=0x7ffc0000 [ 129.981977][ T6004] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.993443][ T6004] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 130.078586][ T6004] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 130.088529][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.096568][ T6004] usb 3-1: Product: syz [ 130.144586][ T6004] usb 3-1: Manufacturer: syz [ 130.151069][ T6004] usb 3-1: SerialNumber: syz [ 130.175773][ T6004] sisusb 3-1:1.0: Invalid USB2VGA device [ 130.182394][ T6004] sisusb: probe of 3-1:1.0 failed with error -22 [ 130.530138][ T6004] usb 3-1: USB disconnect, device number 2 [ 130.878603][ T6174] loop3: detected capacity change from 0 to 512 [ 133.330207][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.339411][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.738074][ T6189] warning: `syz.2.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.280867][ T6202] proc: Unknown parameter 'trans' [ 136.783173][ T6202] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 136.791836][ T6202] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 136.801893][ T6202] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 139.259597][ T6220] loop3: detected capacity change from 0 to 512 [ 144.080392][ T6250] loop1: detected capacity change from 0 to 512 [ 145.723752][ T6246] loop0: detected capacity change from 0 to 32768 [ 145.743884][ T6246] ======================================================= [ 145.743884][ T6246] WARNING: The mand mount option has been deprecated and [ 145.743884][ T6246] and is ignored by this kernel. Remove the mand [ 145.743884][ T6246] option from the mount to silence this warning. [ 145.743884][ T6246] ======================================================= [ 145.891525][ T6246] JBD2: Ignoring recovery information on journal [ 146.108386][ T6246] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 146.824587][ T5777] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 146.891390][ T5777] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 146.950047][ T5777] OCFS2: File system is now read-only. [ 146.955590][ T5777] (syz-executor,5777,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 146.993780][ T5777] (syz-executor,5777,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 147.003561][ T5777] (syz-executor,5777,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 147.015962][ T5777] (syz-executor,5777,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 147.029438][ T6272] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 147.427393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 148.377559][ T5777] (syz-executor,5777,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 148.489158][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 148.586789][ T6280] loop3: detected capacity change from 0 to 512 [ 153.897487][ T6295] loop0: detected capacity change from 0 to 32768 [ 154.108632][ T6307] loop1: detected capacity change from 0 to 2048 [ 154.131451][ T6295] JBD2: Ignoring recovery information on journal [ 154.472838][ T6295] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 154.566314][ T5086] Bluetooth: hci2: link tx timeout [ 154.572187][ T5086] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.597045][ T6320] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.629966][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 156.942133][ T6295] syz.0.125 (6295) used greatest stack depth: 19352 bytes left [ 156.967850][ T5777] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 156.984310][ T5777] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 156.994767][ T5777] OCFS2: File system is now read-only. [ 157.000954][ T5777] (syz-executor,5777,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 157.013242][ T5777] (syz-executor,5777,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 157.022147][ T5777] (syz-executor,5777,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 157.031234][ T5777] (syz-executor,5777,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 157.040200][ T5777] (syz-executor,5777,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 157.064804][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 159.075520][ T6344] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 159.743826][ T6346] 0x000000000000-0x000000020000 : "" [ 160.927650][ T6346] ftl_cs: FTL header not found. [ 165.276236][ T6386] loop1: detected capacity change from 0 to 1024 [ 168.221953][ T6409] loop3: detected capacity change from 0 to 40427 [ 168.236094][ T6409] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 168.242609][ T6409] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 168.259204][ T6409] F2FS-fs (loop3): invalid crc value [ 168.343891][ T6414] 0x000000000000-0x000000020000 : "" [ 168.362465][ T6409] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 168.369636][ T6409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.675128][ T6417] syz.3.148: attempt to access beyond end of device [ 168.675128][ T6417] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 169.530577][ T6414] ftl_cs: FTL header not found. [ 169.760432][ T5778] syz-executor: attempt to access beyond end of device [ 169.760432][ T5778] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 169.809650][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 169.816664][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 177.111965][ T6461] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 177.316989][ T6468] loop1: detected capacity change from 0 to 1024 [ 178.574028][ T6478] loop3: detected capacity change from 0 to 128 [ 178.890934][ T6478] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 179.128506][ T6478] hpfs: filesystem error: improperly stopped [ 179.236560][ T6478] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 179.338293][ T6478] hpfs: You really don't want any checks? You are crazy... [ 179.346402][ T6478] hpfs: hpfs_map_sector(): read error [ 179.352193][ T6478] hpfs: code page support is disabled [ 179.358628][ T6478] hpfs: hpfs_map_4sectors(): unaligned read [ 179.364881][ T6478] hpfs: hpfs_map_4sectors(): unaligned read [ 179.370875][ T6478] hpfs: filesystem error: unable to find root dir [ 180.030438][ T6489] 0x000000000000-0x000000020000 : "" [ 180.040083][ T6489] ftl_cs: FTL header not found. [ 185.187571][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 185.187590][ T28] audit: type=1800 audit(1789307873.019:215): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.185" name="syzkaller0" dev="sda1" ino=2044 res=0 errno=0 [ 188.387428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 192.297820][ T6559] process 'syz.2.196' launched './file1' with NULL argv: empty string added [ 194.628718][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.636203][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.316845][ T6597] loop0: detected capacity change from 0 to 256 [ 196.458296][ T6597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 196.542355][ T28] audit: type=1800 audit(1789307884.399:216): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.209" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 196.847118][ T6608] loop3: detected capacity change from 0 to 1024 [ 198.214955][ T6622] kvm: pic: non byte write [ 200.993938][ T6639] loop1: detected capacity change from 0 to 128 [ 201.019080][ T6639] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 201.047794][ T6639] hpfs: filesystem error: improperly stopped [ 201.057985][ T6004] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 201.076943][ T6639] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 201.095389][ T6639] hpfs: You really don't want any checks? You are crazy... [ 201.114983][ T6639] hpfs: hpfs_map_sector(): read error [ 201.120704][ T6639] hpfs: code page support is disabled [ 201.126497][ T6639] hpfs: hpfs_map_4sectors(): unaligned read [ 201.134746][ T6639] hpfs: hpfs_map_4sectors(): unaligned read [ 201.140920][ T6639] hpfs: filesystem error: unable to find root dir [ 201.461101][ T6644] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 201.834201][ T6004] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 201.844337][ T6004] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 201.854390][ T6004] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 201.864273][ T6004] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 201.874146][ T6004] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 201.884057][ T6004] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 201.900929][ T6004] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 201.912968][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 201.921758][ T6004] usb 3-1: Product: syz [ 201.926058][ T6004] usb 3-1: Manufacturer: syz [ 201.980176][ T6635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.994878][ T6635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.006920][ T6635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.032580][ T6635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.071216][ T6635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.096517][ T6635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.132673][ T6004] usb 3-1: USB2VGA dongle found at address 3 [ 202.171320][ T6004] usb 3-1: Allocated 8 output buffers [ 202.187107][ T6004] usb 3-1: Failed to early initialize device [ 203.082222][ T6655] syzkaller0: entered promiscuous mode [ 203.103100][ T6655] syzkaller0: entered allmulticast mode [ 203.674129][ T6016] usb 3-1: USB disconnect, device number 3 [ 204.538339][ T6673] loop1: detected capacity change from 0 to 128 [ 205.048493][ T6676] loop0: detected capacity change from 0 to 1024 [ 206.711263][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 206.711276][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.723847][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 206.789111][ T6687] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 208.742934][ T6705] loop2: detected capacity change from 0 to 256 [ 209.771733][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.300019][ T6718] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 221.035051][ T6764] loop3: detected capacity change from 0 to 1024 [ 226.787350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.405660][ T6810] vlan2: entered promiscuous mode [ 229.896150][ T6837] kvm: pic: non byte read [ 229.909008][ T6837] kvm: pic: non byte read [ 229.948199][ T6837] kvm: pic: non byte read [ 229.980826][ T6837] kvm: pic: non byte read [ 229.996087][ T6837] kvm: pic: non byte read [ 230.007699][ T6837] kvm: pic: non byte read [ 230.012107][ T6837] kvm: pic: non byte read [ 230.016479][ T6837] kvm: pic: non byte read [ 230.025665][ T6837] kvm: pic: non byte read [ 230.039785][ T6837] kvm: pic: non byte read [ 230.154994][ T6848] loop2: detected capacity change from 0 to 1024 [ 230.907487][ T6862] syzkaller0: entered promiscuous mode [ 230.947129][ T6862] syzkaller0: entered allmulticast mode [ 231.956105][ T6876] loop2: detected capacity change from 0 to 512 [ 236.264520][ T6913] loop0: detected capacity change from 0 to 1024 [ 236.508810][ T6916] loop2: detected capacity change from 0 to 128 [ 236.587007][ T6916] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 236.759848][ T6918] loop0: detected capacity change from 0 to 512 [ 236.867761][ T6853] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.486386][ T34] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.942112][ T6925] loop3: detected capacity change from 0 to 64 [ 237.993708][ T6925] syz.3.317: attempt to access beyond end of device [ 237.993708][ T6925] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 238.064360][ T6925] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 238.142454][ T6925] Trying to free block not in datazone [ 242.767039][ T6958] loop3: detected capacity change from 0 to 1024 [ 243.508130][ T6966] syzkaller0: entered promiscuous mode [ 243.517998][ T6966] syzkaller0: entered allmulticast mode [ 245.038850][ T6979] 0x000000000000-0x000000020000 : "" [ 245.048052][ T6979] ftl_cs: FTL header not found. [ 248.351522][ T6987] loop0: detected capacity change from 0 to 32768 [ 248.445438][ T6987] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.336 (6987) [ 248.585583][ T6998] (null): rxe_set_mtu: Set mtu to 4096 [ 248.615501][ T6998] lo speed is unknown, defaulting to 1000 [ 248.657047][ T6998] lo speed is unknown, defaulting to 1000 [ 248.686989][ T6998] lo speed is unknown, defaulting to 1000 [ 248.737012][ T6987] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 248.885709][ T6987] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 249.062402][ T6987] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 249.296107][ T6987] BTRFS info (device loop0): use zstd compression, level 3 [ 249.366255][ T6987] BTRFS info (device loop0): using free space tree [ 249.413631][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 249.434321][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 249.504405][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 249.514722][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 249.525753][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 249.536094][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 249.546655][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 249.571764][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 249.623765][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 249.694383][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 249.859201][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 250.118273][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 250.224078][ T7024] syzkaller0: entered promiscuous mode [ 250.270571][ T6987] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 250.390031][ T6987] BTRFS error (device loop0): open_ctree failed: -12 [ 250.433328][ T7024] syzkaller0: entered allmulticast mode [ 250.750780][ T6998] infiniband syz0: set down [ 250.752347][ T7032] netlink: 116 bytes leftover after parsing attributes in process `syz.1.344'. [ 250.755654][ T6998] infiniband syz0: added lo [ 250.769912][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.344'. [ 250.779756][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'. [ 250.840599][ T6998] syz0: rxe_create_cq: returned err = -12 [ 250.860167][ T6003] lo speed is unknown, defaulting to 1000 [ 250.875439][ T6998] infiniband syz0: Couldn't create ib_mad CQ [ 250.902766][ T6998] infiniband syz0: Couldn't open port 1 [ 251.032037][ T6998] RDS/IB: syz0: added [ 251.058325][ T6998] smc: adding ib device syz0 with port count 1 [ 251.064713][ T6998] smc: ib device syz0 port 1 has pnetid [ 251.162978][ T6998] lo speed is unknown, defaulting to 1000 [ 251.209993][ T6003] lo speed is unknown, defaulting to 1000 [ 251.470079][ T7044] loop3: detected capacity change from 0 to 1024 [ 251.954804][ T6998] lo speed is unknown, defaulting to 1000 [ 253.375672][ T6998] lo speed is unknown, defaulting to 1000 [ 253.986984][ T7053] loop0: detected capacity change from 0 to 8192 [ 254.140535][ T6998] lo speed is unknown, defaulting to 1000 [ 255.712099][ T7063] syzkaller0: entered promiscuous mode [ 255.762431][ T7063] syzkaller0: entered allmulticast mode [ 255.867692][ T7068] bridge0: entered promiscuous mode [ 257.738620][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.748717][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.146879][ T7093] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 262.138993][ T7100] syz.1.366 (7100): /proc/7098/oom_adj is deprecated, please use /proc/7098/oom_score_adj instead. [ 263.434814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 267.410616][ T7129] syzkaller0: entered promiscuous mode [ 267.416230][ T7129] syzkaller0: entered allmulticast mode [ 267.762711][ T7131] 0x000000000000-0x000000020000 : "" [ 267.904866][ T7131] ftl_cs: FTL header not found. [ 268.750576][ T7135] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 268.781470][ T7123] loop0: detected capacity change from 0 to 32768 [ 268.798418][ T7123] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.374 (7123) [ 268.830077][ T7123] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.859434][ T7123] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 268.879713][ T7123] BTRFS info (device loop0): force clearing of disk cache [ 268.892516][ T7123] BTRFS info (device loop0): enabling auto defrag [ 268.910013][ T7123] BTRFS info (device loop0): max_inline at 0 [ 268.931077][ T7123] BTRFS info (device loop0): enabling disk space caching [ 268.949212][ T7123] BTRFS info (device loop0): disk space caching is enabled [ 269.037393][ T7123] BTRFS info (device loop0): enabling ssd optimizations [ 269.054609][ T7123] BTRFS info (device loop0): rebuilding free space tree [ 269.670313][ T7123] BTRFS info (device loop0): disabling free space tree [ 269.866112][ T7123] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 270.112871][ T7123] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 270.243618][ T7159] loop1: detected capacity change from 0 to 512 [ 270.306504][ T7159] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.368854][ T7159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 270.404931][ T7159] EXT4-fs (loop1): orphan cleanup on readonly fs [ 270.443580][ T5777] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.449913][ T7159] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.379: Allocating blocks 41-42 which overlap fs metadata [ 271.366688][ T7159] Quota error (device loop1): write_blk: dquota write failed [ 271.374672][ T7159] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 271.401906][ T7159] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.379: Failed to acquire dquot type 0 [ 271.452026][ T7159] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 271.510718][ T7159] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #12: comm syz.1.379: corrupted inode contents [ 271.550575][ T7159] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #12: comm syz.1.379: mark_inode_dirty error [ 271.634450][ T7159] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #12: comm syz.1.379: corrupted inode contents [ 271.678137][ T7159] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #12: comm syz.1.379: mark_inode_dirty error [ 271.703774][ T7159] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #12: comm syz.1.379: corrupted inode contents [ 271.756786][ T7159] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 271.941741][ T7159] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #12: comm syz.1.379: corrupted inode contents [ 271.997227][ T7159] EXT4-fs error (device loop1): ext4_truncate:4302: inode #12: comm syz.1.379: mark_inode_dirty error [ 272.055042][ T7159] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 272.121736][ T7159] EXT4-fs (loop1): 1 truncate cleaned up [ 272.128091][ T7159] EXT4-fs (loop1): pa ffff888076a63828: logic 1, phys. 41, len 23 [ 272.136325][ T7159] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 272.219955][ T7159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.565897][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.981118][ T7182] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.168542][ T28] audit: type=1800 audit(1789307963.157:217): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.391" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 277.220273][ T7198] FAULT_INJECTION: forcing a failure. [ 277.220273][ T7198] name failslab, interval 1, probability 0, space 0, times 1 [ 277.244137][ T7198] CPU: 1 PID: 7198 Comm: syz.3.392 Not tainted syzkaller #0 [ 277.251533][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.261659][ T7198] Call Trace: [ 277.264966][ T7198] [ 277.267940][ T7198] dump_stack_lvl+0x18c/0x250 [ 277.272689][ T7198] ? show_regs_print_info+0x20/0x20 [ 277.277936][ T7198] ? load_image+0x420/0x420 [ 277.282473][ T7198] ? __lock_acquire+0x7d80/0x7d80 [ 277.287629][ T7198] should_fail_ex+0x394/0x4c0 [ 277.292353][ T7198] should_failslab+0x9/0x20 [ 277.296892][ T7198] slab_pre_alloc_hook+0x59/0x300 [ 277.301956][ T7198] ? __lock_acquire+0x7d80/0x7d80 [ 277.307035][ T7198] ? security_sk_alloc+0x4b/0x130 [ 277.312087][ T7198] ? security_sk_alloc+0x4b/0x130 [ 277.317134][ T7198] __kmem_cache_alloc_node+0x53/0x250 [ 277.322576][ T7198] ? security_sk_alloc+0x4b/0x130 [ 277.327622][ T7198] __kmalloc+0xa7/0x240 [ 277.331838][ T7198] security_sk_alloc+0x4b/0x130 [ 277.336739][ T7198] sk_prot_alloc+0x101/0x210 [ 277.341367][ T7198] sk_alloc+0x3a/0x350 [ 277.345478][ T7198] inet_create+0x7a9/0xfe0 [ 277.349963][ T7198] ? inet_create+0x9d/0xfe0 [ 277.354517][ T7198] __sock_create+0x49e/0x940 [ 277.359148][ T7198] __sys_socket+0xd7/0x1b0 [ 277.363596][ T7198] __x64_sys_socket+0x7a/0x90 [ 277.368299][ T7198] do_syscall_64+0x55/0xb0 [ 277.372741][ T7198] ? clear_bhb_loop+0x40/0x90 [ 277.377446][ T7198] ? clear_bhb_loop+0x40/0x90 [ 277.382197][ T7198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.388158][ T7198] RIP: 0033:0x7f85efb9e159 [ 277.392621][ T7198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.412263][ T7198] RSP: 002b:00007f85f0b0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 277.420714][ T7198] RAX: ffffffffffffffda RBX: 00007f85efe25fa0 RCX: 00007f85efb9e159 [ 277.428719][ T7198] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 277.436719][ T7198] RBP: 00007f85efc3503b R08: 0000000000000000 R09: 0000000000000000 [ 277.444723][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.452747][ T7198] R13: 00007f85efe26038 R14: 00007f85efe25fa0 R15: 00007ffe411bf658 [ 277.460776][ T7198] [ 277.527395][ T7186] loop2: detected capacity change from 0 to 32768 [ 277.557568][ T7186] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop2 scanned by syz.2.388 (7186) [ 277.622313][ T7186] BTRFS info (device loop2): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 277.645222][ T7186] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 277.698154][ T7186] BTRFS info (device loop2): using free space tree [ 277.989586][ T7186] BTRFS info (device loop2): enabling ssd optimizations [ 278.154575][ T7186] BTRFS info (device loop2): auto enabling async discard [ 278.748171][ T5775] BTRFS info (device loop2): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 279.492537][ T7229] loop0: detected capacity change from 0 to 2048 [ 280.170020][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.777985][ T7241] FAULT_INJECTION: forcing a failure. [ 280.777985][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 280.830575][ T7241] CPU: 0 PID: 7241 Comm: syz.2.402 Not tainted syzkaller #0 [ 280.837957][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.848066][ T7241] Call Trace: [ 280.851394][ T7241] [ 280.854379][ T7241] dump_stack_lvl+0x18c/0x250 [ 280.859141][ T7241] ? show_regs_print_info+0x20/0x20 [ 280.864399][ T7241] ? load_image+0x420/0x420 [ 280.868963][ T7241] ? __lock_acquire+0x7d80/0x7d80 [ 280.874050][ T7241] should_fail_ex+0x394/0x4c0 [ 280.878803][ T7241] should_failslab+0x9/0x20 [ 280.883364][ T7241] slab_pre_alloc_hook+0x59/0x300 [ 280.888464][ T7241] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 280.894143][ T7241] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 280.899823][ T7241] __kmem_cache_alloc_node+0x53/0x250 [ 280.905261][ T7241] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 280.910952][ T7241] __kmalloc_node+0xa6/0x240 [ 280.915607][ T7241] memcg_alloc_slab_cgroups+0x85/0x120 [ 280.921119][ T7241] new_slab+0xc3/0x2d0 [ 280.925242][ T7241] ___slab_alloc+0xc5c/0x12f0 [ 280.929973][ T7241] ? sk_prot_alloc+0x57/0x210 [ 280.934711][ T7241] kmem_cache_alloc+0x109/0x2c0 [ 280.939634][ T7241] ? sk_prot_alloc+0x57/0x210 [ 280.944376][ T7241] sk_prot_alloc+0x57/0x210 [ 280.948945][ T7241] ? sk_alloc+0x24/0x350 [ 280.953243][ T7241] sk_alloc+0x3a/0x350 [ 280.957371][ T7241] kcm_create+0xfe/0x550 [ 280.961682][ T7241] __sock_create+0x49e/0x940 [ 280.966333][ T7241] __sys_socket+0xd7/0x1b0 [ 280.970810][ T7241] __x64_sys_socket+0x7a/0x90 [ 280.975549][ T7241] do_syscall_64+0x55/0xb0 [ 280.980035][ T7241] ? clear_bhb_loop+0x40/0x90 [ 280.984762][ T7241] ? clear_bhb_loop+0x40/0x90 [ 280.989520][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.995472][ T7241] RIP: 0033:0x7f3ab4b9e159 [ 280.999937][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.019597][ T7241] RSP: 002b:00007f3ab5a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 281.028091][ T7241] RAX: ffffffffffffffda RBX: 00007f3ab4e25fa0 RCX: 00007f3ab4b9e159 [ 281.036204][ T7241] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 281.044223][ T7241] RBP: 00007f3ab4c3503b R08: 0000000000000000 R09: 0000000000000000 [ 281.052251][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.060268][ T7241] R13: 00007f3ab4e26038 R14: 00007f3ab4e25fa0 R15: 00007ffe56d327c8 [ 281.068304][ T7241] [ 281.656561][ T7239] loop3: detected capacity change from 0 to 32768 [ 281.718930][ T7239] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.907041][ T7228] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 282.191787][ T7228] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 282.363696][ T7228] EXT4-fs (loop0): This should not happen!! Data will be lost [ 282.363696][ T7228] [ 282.421732][ T7228] EXT4-fs (loop0): Total free blocks count 0 [ 282.459373][ T7228] EXT4-fs (loop0): Free/Dirty block details [ 282.465801][ T7228] EXT4-fs (loop0): free_blocks=4096 [ 282.471737][ T7228] EXT4-fs (loop0): dirty_blocks=64 [ 282.476906][ T7228] EXT4-fs (loop0): Block reservation details [ 282.483045][ T7228] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 282.500017][ T7239] XFS (loop3): Ending clean mount [ 282.567956][ T7239] XFS (loop3): Quotacheck needed: Please wait. [ 282.703461][ T7239] XFS (loop3): Quotacheck: Done. [ 282.923110][ T34] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 283.085690][ T7271] loop0: detected capacity change from 0 to 128 [ 283.131286][ T7271] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 283.208618][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.463864][ T7265] loop2: detected capacity change from 0 to 32768 [ 284.514725][ T7265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.406 (7265) [ 285.040054][ T7265] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.067443][ T7265] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 285.097474][ T7265] BTRFS info (device loop2): force clearing of disk cache [ 285.131283][ T7265] BTRFS info (device loop2): setting nodatacow, compression disabled [ 285.157747][ T7265] BTRFS info (device loop2): enabling auto defrag [ 285.169095][ T7265] BTRFS info (device loop2): max_inline at 0 [ 285.186377][ T7265] BTRFS info (device loop2): enabling disk space caching [ 285.196035][ T7265] BTRFS info (device loop2): disk space caching is enabled [ 285.369748][ T7265] BTRFS info (device loop2): enabling ssd optimizations [ 285.392027][ T7265] BTRFS info (device loop2): rebuilding free space tree [ 285.669345][ T7265] BTRFS info (device loop2): disabling free space tree [ 285.676950][ T7265] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 285.732603][ T7265] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 286.020891][ T7300] FAULT_INJECTION: forcing a failure. [ 286.020891][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 286.043367][ T7300] CPU: 0 PID: 7300 Comm: syz.0.413 Not tainted syzkaller #0 [ 286.050727][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.060838][ T7300] Call Trace: [ 286.064164][ T7300] [ 286.067146][ T7300] dump_stack_lvl+0x18c/0x250 [ 286.071888][ T7300] ? show_regs_print_info+0x20/0x20 [ 286.077143][ T7300] ? load_image+0x420/0x420 [ 286.081702][ T7300] ? __might_sleep+0xe0/0xe0 [ 286.086362][ T7300] ? __lock_acquire+0x7d80/0x7d80 [ 286.091441][ T7300] should_fail_ex+0x394/0x4c0 [ 286.096171][ T7300] should_failslab+0x9/0x20 [ 286.100770][ T7300] slab_pre_alloc_hook+0x59/0x300 [ 286.105876][ T7300] ? sock_update_netprioidx+0x4e/0x390 [ 286.111410][ T7300] kmem_cache_alloc+0x5a/0x2c0 [ 286.116225][ T7300] ? kcm_create+0x11b/0x550 [ 286.120758][ T7300] kcm_create+0x11b/0x550 [ 286.125125][ T7300] __sock_create+0x49e/0x940 [ 286.129772][ T7300] __sys_socket+0xd7/0x1b0 [ 286.134242][ T7300] __x64_sys_socket+0x7a/0x90 [ 286.138937][ T7300] do_syscall_64+0x55/0xb0 [ 286.143374][ T7300] ? clear_bhb_loop+0x40/0x90 [ 286.148074][ T7300] ? clear_bhb_loop+0x40/0x90 [ 286.152792][ T7300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.158737][ T7300] RIP: 0033:0x7ff99079e159 [ 286.163191][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.182941][ T7300] RSP: 002b:00007ff991635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 286.191407][ T7300] RAX: ffffffffffffffda RBX: 00007ff990a25fa0 RCX: 00007ff99079e159 [ 286.199403][ T7300] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 286.207392][ T7300] RBP: 00007ff99083503b R08: 0000000000000000 R09: 0000000000000000 [ 286.215417][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.223436][ T7300] R13: 00007ff990a26038 R14: 00007ff990a25fa0 R15: 00007ffeae0053f8 [ 286.231452][ T7300] [ 286.409795][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 288.458356][ T7318] syzkaller0: entered promiscuous mode [ 288.470218][ T7318] syzkaller0: entered allmulticast mode [ 289.603730][ T7330] trusted_key: encrypted_key: insufficient parameters specified [ 290.977701][ T6011] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 291.107670][ T7336] 0x000000000000-0x000000020000 : "" [ 291.344113][ T7336] ftl_cs: FTL header not found. [ 291.457433][ T6011] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.598475][ T6011] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 291.642107][ T6011] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.673329][ T6011] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 291.682829][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.700013][ T7341] loop2: detected capacity change from 0 to 128 [ 291.718399][ T6011] pl2303 2-1:1.0: required endpoints missing [ 291.754555][ T6011] pl2303 2-1:1.1: required endpoints missing [ 291.761829][ T7341] FAT-fs (loop2): invalid media value (0x07) [ 291.767863][ T7341] FAT-fs (loop2): Can't find a valid FAT filesystem [ 293.292746][ T6011] usb 2-1: USB disconnect, device number 3 [ 294.496251][ T7351] FAULT_INJECTION: forcing a failure. [ 294.496251][ T7351] name failslab, interval 1, probability 0, space 0, times 0 [ 294.696322][ T7351] CPU: 0 PID: 7351 Comm: syz.1.426 Not tainted syzkaller #0 [ 294.703741][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.713881][ T7351] Call Trace: [ 294.717219][ T7351] [ 294.720212][ T7351] dump_stack_lvl+0x18c/0x250 [ 294.724969][ T7351] ? show_regs_print_info+0x20/0x20 [ 294.730233][ T7351] ? load_image+0x420/0x420 [ 294.734794][ T7351] ? __might_sleep+0xe0/0xe0 [ 294.739447][ T7351] ? __lock_acquire+0x7d80/0x7d80 [ 294.744538][ T7351] should_fail_ex+0x394/0x4c0 [ 294.749285][ T7351] should_failslab+0x9/0x20 [ 294.753851][ T7351] slab_pre_alloc_hook+0x59/0x300 [ 294.758942][ T7351] ? sock_update_netprioidx+0x4e/0x390 [ 294.764476][ T7351] kmem_cache_alloc+0x5a/0x2c0 [ 294.769293][ T7351] ? kcm_create+0x11b/0x550 [ 294.773841][ T7351] kcm_create+0x11b/0x550 [ 294.778197][ T7351] __sock_create+0x49e/0x940 [ 294.782799][ T7351] __sys_socket+0xd7/0x1b0 [ 294.787226][ T7351] __x64_sys_socket+0x7a/0x90 [ 294.791928][ T7351] do_syscall_64+0x55/0xb0 [ 294.796357][ T7351] ? clear_bhb_loop+0x40/0x90 [ 294.801046][ T7351] ? clear_bhb_loop+0x40/0x90 [ 294.805769][ T7351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.811713][ T7351] RIP: 0033:0x7f14c7b9e159 [ 294.816168][ T7351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.835856][ T7351] RSP: 002b:00007f14c8b4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 294.844304][ T7351] RAX: ffffffffffffffda RBX: 00007f14c7e25fa0 RCX: 00007f14c7b9e159 [ 294.852286][ T7351] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 294.860295][ T7351] RBP: 00007f14c7c3503b R08: 0000000000000000 R09: 0000000000000000 [ 294.868301][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.876282][ T7351] R13: 00007f14c7e26038 R14: 00007f14c7e25fa0 R15: 00007ffca6adc358 [ 294.884309][ T7351] [ 295.067218][ T7369] syzkaller0: entered promiscuous mode [ 295.073029][ T7369] syzkaller0: entered allmulticast mode [ 295.225966][ T6010] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 295.410302][ T6010] usb 3-1: device descriptor read/64, error -71 [ 295.957074][ T6010] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 296.304420][ T6016] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 296.312154][ T6010] usb 3-1: device descriptor read/64, error -71 [ 296.453510][ T6010] usb usb3-port1: attempt power cycle [ 297.610481][ T6010] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 297.650426][ T6010] usb 3-1: device descriptor read/8, error -71 [ 298.751693][ T6016] usb 2-1: unable to get BOS descriptor or descriptor too short [ 298.901560][ T6016] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 298.909244][ T6016] usb 2-1: can't read configurations, error -71 [ 299.135594][ T7396] loop2: detected capacity change from 0 to 512 [ 300.826131][ T7407] loop3: detected capacity change from 0 to 128 [ 302.045161][ T6016] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 302.106045][ T7421] syzkaller0: entered promiscuous mode [ 302.133711][ T7421] syzkaller0: entered allmulticast mode [ 302.216471][ T6016] usb 2-1: device descriptor read/64, error -71 [ 302.519860][ T6016] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 302.851968][ T6016] usb 2-1: device descriptor read/64, error -71 [ 303.039616][ T6016] usb usb2-port1: attempt power cycle [ 303.214288][ T7428] loop2: detected capacity change from 0 to 512 [ 303.277682][ T6819] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.558239][ T6016] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 304.614405][ T6016] usb 2-1: device descriptor read/8, error -71 [ 306.418640][ T7446] 0x000000000000-0x000000020000 : "" [ 306.498783][ T7446] ftl_cs: FTL header not found. [ 307.761616][ T7455] loop2: detected capacity change from 0 to 512 [ 308.077308][ T7455] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.457: iget: bad i_size value: 38620345925642 [ 308.160952][ T7455] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.457: couldn't read orphan inode 15 (err -117) [ 308.207519][ T7455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.952229][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.747494][ T7490] loop2: detected capacity change from 0 to 128 [ 314.554483][ T7488] loop3: detected capacity change from 0 to 32768 [ 314.685181][ T7488] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 314.706058][ T6016] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 314.893783][ T7488] XFS (loop3): Ending clean mount [ 314.908815][ T6016] usb 2-1: device descriptor read/64, error -71 [ 314.959269][ T7488] XFS (loop3): Quotacheck needed: Please wait. [ 315.287209][ T6016] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 315.342991][ T7488] XFS (loop3): Quotacheck: Done. [ 315.481849][ T6016] usb 2-1: device descriptor read/64, error -71 [ 315.627726][ T6016] usb usb2-port1: attempt power cycle [ 315.903305][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.132185][ T6016] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 316.201878][ T6016] usb 2-1: device descriptor read/8, error -71 [ 316.522142][ T6016] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 316.603308][ T6016] usb 2-1: device descriptor read/8, error -71 [ 316.750011][ T6016] usb usb2-port1: unable to enumerate USB device [ 317.102755][ T7528] loop3: detected capacity change from 0 to 32768 [ 317.186792][ T7528] JBD2: Ignoring recovery information on journal [ 317.326705][ T7528] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 317.659446][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 320.117270][ T7571] tipc: Started in network mode [ 320.122860][ T7571] tipc: Node identity 4, cluster identity 4711 [ 320.129157][ T7571] tipc: Node number set to 4 [ 321.581535][ T7579] 0x000000000000-0x000000020000 : "" [ 321.609158][ T7579] ftl_cs: FTL header not found. [ 321.821917][ T6004] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 322.179619][ T6004] usb 2-1: device descriptor read/64, error -71 [ 322.577906][ T6004] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 322.650004][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.656572][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.775643][ T6004] usb 2-1: device descriptor read/64, error -71 [ 322.916738][ T6004] usb usb2-port1: attempt power cycle [ 323.360908][ T6004] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 323.405859][ T6004] usb 2-1: device descriptor read/8, error -71 [ 323.707658][ T6004] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 323.751668][ T6004] usb 2-1: device descriptor read/8, error -71 [ 323.892248][ T6004] usb usb2-port1: unable to enumerate USB device [ 324.104622][ T7602] FAULT_INJECTION: forcing a failure. [ 324.104622][ T7602] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 324.118135][ T7602] CPU: 1 PID: 7602 Comm: syz.3.501 Not tainted syzkaller #0 [ 324.125503][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.135627][ T7602] Call Trace: [ 324.138954][ T7602] [ 324.141939][ T7602] dump_stack_lvl+0x18c/0x250 [ 324.146670][ T7602] ? show_regs_print_info+0x20/0x20 [ 324.151908][ T7602] ? load_image+0x420/0x420 [ 324.156468][ T7602] ? __lock_acquire+0x7d80/0x7d80 [ 324.161554][ T7602] should_fail_ex+0x394/0x4c0 [ 324.166296][ T7602] prepare_alloc_pages+0x1e1/0x5b0 [ 324.171462][ T7602] __alloc_pages+0x134/0x460 [ 324.176115][ T7602] ? zone_statistics+0x170/0x170 [ 324.181106][ T7602] ? alloc_pages+0x4e1/0x740 [ 324.186032][ T7602] ? do_raw_spin_unlock+0x121/0x230 [ 324.191301][ T7602] __get_free_pages+0xc/0x30 [ 324.195947][ T7602] kasan_populate_vmalloc_pte+0x35/0x100 [ 324.201662][ T7602] __apply_to_page_range+0x860/0xdd0 [ 324.207027][ T7602] ? kasan_populate_vmalloc+0x70/0x70 [ 324.212479][ T7602] ? apply_to_page_range+0x50/0x50 [ 324.217646][ T7602] ? do_raw_spin_unlock+0x121/0x230 [ 324.222904][ T7602] alloc_vmap_area+0x1d26/0x1e50 [ 324.227923][ T7602] ? vm_map_ram+0xcf0/0xcf0 [ 324.232483][ T7602] ? rcu_is_watching+0x15/0xb0 [ 324.237396][ T7602] __get_vm_area_node+0x162/0x370 [ 324.242508][ T7602] __vmalloc_node_range+0x36f/0x1320 [ 324.247859][ T7602] ? sock_map_alloc+0x1af/0x2c0 [ 324.252796][ T7602] ? __asan_memset+0x22/0x40 [ 324.257454][ T7602] ? free_vm_area+0x50/0x50 [ 324.262010][ T7602] ? bpf_map_area_alloc+0x5e/0x110 [ 324.267184][ T7602] ? rcu_is_watching+0x15/0xb0 [ 324.271992][ T7602] ? bpf_map_area_alloc+0x5e/0x110 [ 324.277169][ T7602] bpf_map_area_alloc+0xf1/0x110 [ 324.282168][ T7602] ? sock_map_alloc+0x1af/0x2c0 [ 324.287073][ T7602] sock_map_alloc+0x1af/0x2c0 [ 324.291806][ T7602] map_create+0x877/0x12f0 [ 324.296286][ T7602] __sys_bpf+0x651/0x890 [ 324.300586][ T7602] ? bpf_link_show_fdinfo+0x390/0x390 [ 324.306034][ T7602] ? lock_chain_count+0x20/0x20 [ 324.310937][ T7602] __x64_sys_bpf+0x7c/0x90 [ 324.315398][ T7602] do_syscall_64+0x55/0xb0 [ 324.319874][ T7602] ? clear_bhb_loop+0x40/0x90 [ 324.324597][ T7602] ? clear_bhb_loop+0x40/0x90 [ 324.329331][ T7602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.335323][ T7602] RIP: 0033:0x7f85efb9e159 [ 324.339841][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.359539][ T7602] RSP: 002b:00007f85f0b0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.368022][ T7602] RAX: ffffffffffffffda RBX: 00007f85efe25fa0 RCX: 00007f85efb9e159 [ 324.376064][ T7602] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000 [ 324.384078][ T7602] RBP: 00007f85efc3503b R08: 0000000000000000 R09: 0000000000000000 [ 324.392094][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.400115][ T7602] R13: 00007f85efe26038 R14: 00007f85efe25fa0 R15: 00007ffe411bf658 [ 324.408153][ T7602] [ 324.411385][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.402828][ T7615] 0x000000000000-0x000000020000 : "" [ 325.601487][ T7615] ftl_cs: FTL header not found. [ 327.780613][ T7630] loop1: detected capacity change from 0 to 128 [ 328.207126][ T6012] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 328.378695][ T6012] usb 4-1: device descriptor read/64, error -71 [ 328.628062][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 328.671509][ T6012] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 328.842636][ T7647] loop1: detected capacity change from 0 to 8 [ 328.885391][ T6012] usb 4-1: device descriptor read/64, error -71 [ 328.999033][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.007062][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.014889][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.024286][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.048752][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.204675][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.357932][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.529399][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.643810][ T6012] usb usb4-port1: attempt power cycle [ 329.665416][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.679598][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.698500][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.706170][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.717111][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.728076][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.735990][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.743528][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.776875][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.784825][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.795867][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.803416][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.810954][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.818391][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.825969][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.833465][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.840973][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.850044][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.861730][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.871665][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.914229][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.932023][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 329.951321][ T5821] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 330.007427][ T5821] hid-generic 0005:10CF:0005.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 330.197383][ T7652] fido_id[7652]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 330.212512][ T6012] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 330.270454][ T6012] usb 4-1: device descriptor read/8, error -71 [ 330.578951][ T6012] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 330.695175][ T6012] usb 4-1: device descriptor read/8, error -71 [ 330.898556][ T6012] usb usb4-port1: unable to enumerate USB device [ 331.586457][ T7663] loop2: detected capacity change from 0 to 128 [ 332.368156][ T7680] 0x000000000000-0x000000020000 : "" [ 332.410602][ T7680] ftl_cs: FTL header not found. [ 333.982126][ T6003] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 334.177197][ T6003] usb 3-1: device descriptor read/64, error -71 [ 334.469427][ T6003] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 334.642907][ T6003] usb 3-1: device descriptor read/64, error -71 [ 334.906668][ T7703] loop3: detected capacity change from 0 to 128 [ 334.982502][ T7695] loop1: detected capacity change from 0 to 32768 [ 335.104382][ T7695] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 335.175865][ T6003] usb usb3-port1: attempt power cycle [ 335.286165][ T7695] XFS (loop1): Ending clean mount [ 335.348116][ T7695] XFS (loop1): User initiated shutdown received. [ 335.369138][ T7695] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 335.390740][ T7695] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 335.472658][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 335.619034][ T6003] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 335.662531][ T6003] usb 3-1: device descriptor read/8, error -71 [ 335.954294][ T6003] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 336.000543][ T6003] usb 3-1: device descriptor read/8, error -71 [ 336.133896][ T6003] usb usb3-port1: unable to enumerate USB device [ 336.321965][ T7721] loop1: detected capacity change from 0 to 32768 [ 336.414357][ T7732] loop3: detected capacity change from 0 to 128 [ 336.477637][ T7721] ialloc: diAlloc returned -5! [ 337.384886][ T28] audit: type=1326 audit(1789308017.707:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.548" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ab4b9e159 code=0x0 [ 337.408219][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.105211][ T6012] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 340.126994][ T7762] loop2: detected capacity change from 0 to 32768 [ 340.167420][ T7774] xt_CONNSECMARK: invalid mode: 66 [ 340.419410][ T6012] usb 1-1: device descriptor read/64, error -71 [ 340.810410][ T7762] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 340.863778][ T6012] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 341.049038][ T6012] usb 1-1: device descriptor read/64, error -71 [ 341.106976][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 341.183226][ T6012] usb usb1-port1: attempt power cycle [ 342.475551][ T6012] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 342.546918][ T6012] usb 1-1: device descriptor read/8, error -71 [ 343.050833][ T7799] misc userio: No port type given on /dev/userio [ 345.036038][ T7811] loop3: detected capacity change from 0 to 8 [ 345.592592][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.600524][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.607979][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.615958][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.623643][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.631058][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.639022][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.646708][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.654475][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.661913][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.705088][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 345.736470][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.693856][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.701435][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.708896][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.716396][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.723820][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.731305][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.738796][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.746228][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.753736][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.761882][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.770039][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.778650][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.786205][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.793744][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.802679][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.810329][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.817783][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.825261][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.832697][ T6003] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 346.857359][ T6003] hid-generic 0005:10CF:0005.0002: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 347.439587][ T7822] fido_id[7822]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 347.445896][ T7829] FAULT_INJECTION: forcing a failure. [ 347.445896][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 347.489468][ T7829] CPU: 1 PID: 7829 Comm: syz.2.576 Not tainted syzkaller #0 [ 347.496827][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.506927][ T7829] Call Trace: [ 347.510247][ T7829] [ 347.513236][ T7829] dump_stack_lvl+0x18c/0x250 [ 347.517972][ T7829] ? show_regs_print_info+0x20/0x20 [ 347.523228][ T7829] ? load_image+0x420/0x420 [ 347.527785][ T7829] ? __might_sleep+0xe0/0xe0 [ 347.532434][ T7829] ? __lock_acquire+0x7d80/0x7d80 [ 347.537508][ T7829] ? mark_lock+0x94/0x320 [ 347.541894][ T7829] should_fail_ex+0x394/0x4c0 [ 347.546638][ T7829] should_failslab+0x9/0x20 [ 347.551218][ T7829] slab_pre_alloc_hook+0x59/0x300 [ 347.556314][ T7829] kmem_cache_alloc+0x5a/0x2c0 [ 347.561138][ T7829] ? mas_alloc_nodes+0x2f8/0x8c0 [ 347.566139][ T7829] mas_alloc_nodes+0x2f8/0x8c0 [ 347.570966][ T7829] mas_preallocate+0xa1f/0x1170 [ 347.575878][ T7829] ? lockdep_softirqs_off+0x440/0x440 [ 347.581303][ T7829] ? mas_destroy+0x20a0/0x20a0 [ 347.586135][ T7829] ? vma_iter_config+0xe6/0x270 [ 347.591076][ T7829] __split_vma+0x2dd/0xc20 [ 347.595600][ T7829] ? mmap_write_unlock+0x160/0x160 [ 347.600786][ T7829] ? split_vma+0x8f/0x110 [ 347.605179][ T7829] mprotect_fixup+0xa3b/0xcd0 [ 347.609926][ T7829] ? change_protection+0x31e0/0x31e0 [ 347.615283][ T7829] ? apparmor_file_mprotect+0xfe/0x120 [ 347.620797][ T7829] ? bpf_lsm_file_mprotect+0x9/0x10 [ 347.626056][ T7829] do_mprotect_pkey+0x7c3/0xcc0 [ 347.630956][ T7829] ? __fget_files+0x3fc/0x460 [ 347.635704][ T7829] ? prot_none_test+0x10/0x10 [ 347.640454][ T7829] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 347.646512][ T7829] __x64_sys_mprotect+0x80/0x90 [ 347.651429][ T7829] do_syscall_64+0x55/0xb0 [ 347.655905][ T7829] ? clear_bhb_loop+0x40/0x90 [ 347.660638][ T7829] ? clear_bhb_loop+0x40/0x90 [ 347.665400][ T7829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.671347][ T7829] RIP: 0033:0x7f3ab4b9e159 [ 347.675806][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.695465][ T7829] RSP: 002b:00007f3ab5a98028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 347.703929][ T7829] RAX: ffffffffffffffda RBX: 00007f3ab4e25fa0 RCX: 00007f3ab4b9e159 [ 347.711939][ T7829] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ffd000 [ 347.719957][ T7829] RBP: 00007f3ab4c3503b R08: 0000000000000000 R09: 0000000000000000 [ 347.727975][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.735986][ T7829] R13: 00007f3ab4e26038 R14: 00007f3ab4e25fa0 R15: 00007ffe56d327c8 [ 347.744016][ T7829] [ 347.832654][ T6012] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 348.038656][ T6012] usb 4-1: device descriptor read/64, error -71 [ 348.387377][ T6012] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 348.573824][ T6012] usb 4-1: device descriptor read/64, error -71 [ 348.711370][ T6012] usb usb4-port1: attempt power cycle [ 349.198294][ T6012] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 349.310796][ T6012] usb 4-1: device descriptor read/8, error -71 [ 349.697413][ T6012] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 349.797808][ T6012] usb 4-1: device descriptor read/8, error -71 [ 349.946018][ T6012] usb usb4-port1: unable to enumerate USB device [ 350.129978][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 350.689171][ T7866] loop0: detected capacity change from 0 to 16 [ 350.721767][ T7866] erofs: (device loop0): mounted with root inode @ nid 36. [ 351.175600][ T7873] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 351.187602][ T7873] syz.0.587: attempt to access beyond end of device [ 351.187602][ T7873] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 351.275435][ T7873] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 351.284961][ T7873] syz.0.587: attempt to access beyond end of device [ 351.284961][ T7873] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 351.300749][ T7873] syz.0.587: attempt to access beyond end of device [ 351.300749][ T7873] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 351.330486][ T28] audit: type=1800 audit(1789308030.578:219): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.587" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 353.407957][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 353.717277][ T6012] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 354.084106][ T6012] usb 4-1: device descriptor read/64, error -71 [ 354.104642][ T7905] 0x000000000000-0x000000020000 : "" [ 354.114135][ T7905] ftl_cs: FTL header not found. [ 354.421888][ T6012] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 354.595269][ T6012] usb 4-1: device descriptor read/64, error -71 [ 354.726050][ T6012] usb usb4-port1: attempt power cycle [ 355.117315][ T7910] loop0: detected capacity change from 0 to 32768 [ 355.277642][ T7910] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 355.614042][ T6012] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 357.392639][ T6012] usb 4-1: device descriptor read/8, error -71 [ 357.650936][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 359.773433][ T7961] loop3: detected capacity change from 0 to 32768 [ 361.141189][ T5842] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 361.197010][ T7961] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 361.429480][ T5842] usb 1-1: device descriptor read/64, error -71 [ 361.765609][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 361.845809][ T5842] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 362.105988][ T5842] usb 1-1: device descriptor read/64, error -71 [ 362.319869][ T5842] usb usb1-port1: attempt power cycle [ 362.837826][ T7997] loop3: detected capacity change from 0 to 256 [ 362.845447][ T7997] exfat: Deprecated parameter 'utf8' [ 362.850929][ T7997] exfat: Deprecated parameter 'namecase' [ 362.857304][ T7997] exfat: Deprecated parameter 'namecase' [ 362.879283][ T7997] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 366.175205][ T8030] loop3: detected capacity change from 0 to 32768 [ 366.188891][ T8030] (syz.3.631,8030,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.208520][ T8030] (syz.3.631,8030,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.237978][ T8030] JBD2: Ignoring recovery information on journal [ 366.245903][ T6004] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 366.297567][ T8030] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 366.408322][ T6004] usb 1-1: device descriptor read/64, error -71 [ 366.464382][ T8030] [ 366.466773][ T8030] ====================================================== [ 366.473823][ T8030] WARNING: possible circular locking dependency detected [ 366.480872][ T8030] syzkaller #0 Not tainted [ 366.485320][ T8030] ------------------------------------------------------ [ 366.492365][ T8030] syz.3.631/8030 is trying to acquire lock: [ 366.498290][ T8030] ffff88805d955c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 366.507709][ T8030] [ 366.507709][ T8030] but task is already holding lock: [ 366.515100][ T8030] ffff88801cf130e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 366.525437][ T8030] [ 366.525437][ T8030] which lock already depends on the new lock. [ 366.525437][ T8030] [ 366.535883][ T8030] [ 366.535883][ T8030] the existing dependency chain (in reverse order) is: [ 366.544932][ T8030] [ 366.544932][ T8030] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 366.553765][ T8030] down_read+0x46/0x2e0 [ 366.558501][ T8030] ocfs2_start_trans+0x3a8/0x6f0 [ 366.564022][ T8030] ocfs2_mknod+0xf33/0x2310 [ 366.569092][ T8030] ocfs2_create+0x196/0x430 [ 366.574167][ T8030] path_openat+0x1705/0x3270 [ 366.579324][ T8030] do_filp_open+0x1f2/0x430 [ 366.584402][ T8030] do_sys_openat2+0x134/0x1d0 [ 366.589647][ T8030] __x64_sys_open+0x11f/0x140 [ 366.594891][ T8030] do_syscall_64+0x55/0xb0 [ 366.599907][ T8030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.606378][ T8030] [ 366.606378][ T8030] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 366.613906][ T8030] ocfs2_start_trans+0x2a9/0x6f0 [ 366.619415][ T8030] ocfs2_dio_end_io+0x7ae/0x1410 [ 366.624923][ T8030] dio_complete+0x24c/0x710 [ 366.629993][ T8030] __blockdev_direct_IO+0x2c42/0x32e0 [ 366.635930][ T8030] ocfs2_direct_IO+0x235/0x2a0 [ 366.641261][ T8030] generic_file_direct_write+0x1c9/0x3e0 [ 366.647477][ T8030] __generic_file_write_iter+0x11b/0x230 [ 366.653677][ T8030] ocfs2_file_write_iter+0x1724/0x1ef0 [ 366.659713][ T8030] do_iter_write+0x747/0xc50 [ 366.664873][ T8030] do_pwritev+0x242/0x3a0 [ 366.669758][ T8030] do_syscall_64+0x55/0xb0 [ 366.674743][ T8030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.681213][ T8030] [ 366.681213][ T8030] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 366.691771][ T8030] down_write+0x97/0x200 [ 366.696578][ T8030] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 366.703068][ T8030] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 366.709985][ T8030] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 366.711983][ T6004] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 366.716169][ T8030] ocfs2_xattr_set+0xc75/0x13a0 [ 366.716197][ T8030] __vfs_setxattr+0x437/0x470 [ 366.734374][ T8030] __vfs_setxattr_noperm+0x12a/0x5e0 [ 366.740237][ T8030] vfs_setxattr+0x16b/0x2f0 [ 366.745314][ T8030] path_setxattr+0x33a/0x590 [ 366.750483][ T8030] __x64_sys_setxattr+0xbb/0xd0 [ 366.755932][ T8030] do_syscall_64+0x55/0xb0 [ 366.760920][ T8030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.767386][ T8030] [ 366.767386][ T8030] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 366.775254][ T8030] __lock_acquire+0x37ef/0x7d80 [ 366.780665][ T8030] lock_acquire+0x19e/0x420 [ 366.785730][ T8030] down_read+0x46/0x2e0 [ 366.790455][ T8030] ocfs2_init_acl+0x30a/0x770 [ 366.795709][ T8030] ocfs2_mknod+0x1427/0x2310 [ 366.800862][ T8030] ocfs2_mkdir+0x196/0x430 [ 366.805837][ T8030] vfs_mkdir+0x2a5/0x470 [ 366.810645][ T8030] do_mkdirat+0x1dc/0x450 [ 366.815533][ T8030] __x64_sys_mkdirat+0x89/0xa0 [ 366.820860][ T8030] do_syscall_64+0x55/0xb0 [ 366.825843][ T8030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.832308][ T8030] [ 366.832308][ T8030] other info that might help us debug this: [ 366.832308][ T8030] [ 366.842570][ T8030] Chain exists of: [ 366.842570][ T8030] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 366.842570][ T8030] [ 366.856532][ T8030] Possible unsafe locking scenario: [ 366.856532][ T8030] [ 366.864023][ T8030] CPU0 CPU1 [ 366.869424][ T8030] ---- ---- [ 366.874832][ T8030] rlock(&journal->j_trans_barrier); [ 366.880247][ T8030] lock(sb_internal#2); [ 366.887063][ T8030] lock(&journal->j_trans_barrier); [ 366.894914][ T8030] rlock(&oi->ip_xattr_sem); [ 366.896177][ T6004] usb 1-1: device descriptor read/64, error -71 [ 366.899618][ T8030] [ 366.899618][ T8030] *** DEADLOCK *** [ 366.899618][ T8030] [ 366.899625][ T8030] 8 locks held by syz.3.631/8030: [ 366.899638][ T8030] #0: ffff888143f6e418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 366.928401][ T8030] #1: ffff88805d955f58 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 366.939102][ T8030] #2: ffff88807b00b498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 366.952844][ T8030] #3: ffff88807b009818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 366.966582][ T8030] #4: ffff88807b00c2d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 366.980579][ T8030] #5: ffff888143f6e608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310 [ 366.989894][ T8030] #6: ffff88801cf130e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 367.000681][ T8030] #7: ffff888143f6c990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 367.010597][ T8030] [ 367.010597][ T8030] stack backtrace: [ 367.016514][ T8030] CPU: 0 PID: 8030 Comm: syz.3.631 Not tainted syzkaller #0 [ 367.023831][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.033917][ T8030] Call Trace: [ 367.037225][ T8030] [ 367.040214][ T8030] dump_stack_lvl+0x18c/0x250 [ 367.044953][ T8030] ? load_image+0x420/0x420 [ 367.049452][ T6004] usb usb1-port1: attempt power cycle [ 367.054898][ T8030] ? show_regs_print_info+0x20/0x20 [ 367.060158][ T8030] ? print_circular_bug+0x12b/0x1a0 [ 367.065416][ T8030] check_noncircular+0x2fc/0x400 [ 367.070415][ T8030] ? print_deadlock_bug+0x5d0/0x5d0 [ 367.075665][ T8030] ? _find_first_zero_bit+0xd6/0x100 [ 367.081016][ T8030] ? add_lock_to_list+0x191/0x280 [ 367.086093][ T8030] __lock_acquire+0x37ef/0x7d80 [ 367.091017][ T8030] ? verify_lock_unused+0x140/0x140 [ 367.096268][ T8030] ? verify_lock_unused+0x140/0x140 [ 367.101528][ T8030] lock_acquire+0x19e/0x420 [ 367.106084][ T8030] ? ocfs2_init_acl+0x30a/0x770 [ 367.110991][ T8030] ? jbd2_write_access_granted+0x69/0x300 [ 367.116768][ T8030] ? __might_sleep+0xe0/0xe0 [ 367.121418][ T8030] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 367.127114][ T8030] ? read_lock_is_recursive+0x20/0x20 [ 367.132534][ T8030] ? mutex_unlock+0x10/0x10 [ 367.137091][ T8030] ? do_raw_spin_lock+0x11f/0x2b0 [ 367.142173][ T8030] down_read+0x46/0x2e0 [ 367.146385][ T8030] ? ocfs2_init_acl+0x30a/0x770 [ 367.151294][ T8030] ocfs2_init_acl+0x30a/0x770 [ 367.156033][ T8030] ? ocfs2_acl_chmod+0x340/0x340 [ 367.161032][ T8030] ? dquot_alloc_inode+0x8ac/0xa40 [ 367.166179][ T8030] ? ocfs2_journal_access+0x40/0x40 [ 367.171419][ T8030] ? ocfs2_block_signals+0x9b/0xe0 [ 367.176559][ T8030] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 367.182649][ T8030] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 367.188412][ T8030] ocfs2_mknod+0x1427/0x2310 [ 367.193036][ T8030] ? ocfs2_mkdir+0x430/0x430 [ 367.197689][ T8030] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 367.203425][ T8030] ? __lock_acquire+0x7d80/0x7d80 [ 367.208460][ T8030] ? do_raw_spin_lock+0x11f/0x2b0 [ 367.213505][ T8030] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 367.219416][ T8030] ? __lock_acquire+0x7d80/0x7d80 [ 367.224501][ T8030] ? __rwlock_init+0x150/0x150 [ 367.229307][ T8030] ? do_raw_spin_unlock+0x121/0x230 [ 367.234526][ T8030] ? put_pid+0xde/0x120 [ 367.238707][ T8030] ocfs2_mkdir+0x196/0x430 [ 367.243240][ T8030] ? make_kgid+0x650/0x650 [ 367.247692][ T8030] ? apparmor_path_mkdir+0x1b0/0x230 [ 367.253005][ T8030] ? ocfs2_symlink+0x2730/0x2730 [ 367.257966][ T8030] ? HAS_UNMAPPED_ID+0x101/0x170 [ 367.262933][ T8030] ? ocfs2_getattr+0x3a0/0x3a0 [ 367.267725][ T8030] ? inode_permission+0xf3/0x480 [ 367.272687][ T8030] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 367.277719][ T8030] ? security_inode_mkdir+0xb7/0x100 [ 367.283043][ T8030] vfs_mkdir+0x2a5/0x470 [ 367.287334][ T8030] do_mkdirat+0x1dc/0x450 [ 367.291699][ T8030] ? vfs_mkdir+0x470/0x470 [ 367.296139][ T8030] __x64_sys_mkdirat+0x89/0xa0 [ 367.300939][ T8030] do_syscall_64+0x55/0xb0 [ 367.305404][ T8030] ? clear_bhb_loop+0x40/0x90 [ 367.310104][ T8030] ? clear_bhb_loop+0x40/0x90 [ 367.314816][ T8030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.320717][ T8030] RIP: 0033:0x7f85efb9cfc7 [ 367.325153][ T8030] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.344785][ T8030] RSP: 002b:00007f85f0b0ce58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 367.353236][ T8030] RAX: ffffffffffffffda RBX: 00007f85f0b0cee0 RCX: 00007f85efb9cfc7 [ 367.361247][ T8030] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 367.369258][ T8030] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000 [ 367.377260][ T8030] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000000c0 [ 367.385265][ T8030] R13: 00007f85f0b0cea0 R14: 0000000000000000 R15: 0000000000000000 [ 367.393304][ T8030] [ 367.407974][ T8030] syz.3.631 (8030) used greatest stack depth: 18840 bytes left [ 367.472616][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 367.492075][ T6004] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 367.536745][ T6004] usb 1-1: device descriptor read/8, error -71 [ 367.828052][ T6004] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 367.861151][ T6004] usb 1-1: device descriptor read/8, error -71 [ 367.990781][ T6004] usb usb1-port1: unable to enumerate USB device