last executing test programs: 34.602294814s ago: executing program 0 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 33.291279015s ago: executing program 0 (id=367): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="00002dbd7000fbdbdf250f001c000800010070636900"], 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x1d3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) write$P9_RSTATu(r0, &(0x7f0000000180)=ANY=[], 0x8c) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x10, 0x0, 0x2}}, 0x14) 31.649520531s ago: executing program 0 (id=374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000021c0)) 31.430343254s ago: executing program 3 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x4}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 30.413981801s ago: executing program 0 (id=379): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="cb182fc5fce9a5d18739d3144aa3d54257aaa88aba27981824f7915295e558edf48135300a75b59beca71f8b59e7261c1719b06171b986f9ce8f2b1050ddb978e5dae7d50b9e5b3dcce6a2fde67a08ed68d86de2ffc5ed943e843e8d87030387c50c40ad42bdf9eaf18102e68040d383c4d56964c9a70077414337a578f1d54ae672036278feff2c0fb602b8e3d982834211596005818769ecb84fca9b5097554bdd603f6addc8660b20ce77c2bd0069fd38056452f68f83a9b2b60bf507299402dca7f1c28ffe914b5e9f0d8a9c5728ff90af757c45a08a9e9b373a13e507e2d461010108", 0xe5) 28.444943873s ago: executing program 0 (id=382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x400) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x8500017e) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x4900) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="05000000010000", 0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 28.346641154s ago: executing program 3 (id=384): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x1b, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x6, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x1, 0x9, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000002, 0x1000242, 0x5460, 0xe, 0x0, 0x8, 0x4, 0x6, 0x3, 0x8, 0x5, 0x3e, 0x8f, 0xfc9, 0x8, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x7d15, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000006, 0xffff, 0xfffffffd, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x10001000, 0x7, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0xfffffffe, 0x4, 0x4, 0x8001, 0x7, 0x1, 0x2401, 0x6, 0x6, 0x2, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0xc, 0x6, 0x6, 0x7, 0x7ffc, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x8000, 0x1, 0x0, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x10000, 0x7, 0xfffffffe, 0x1000, 0x80000001, 0x9, 0x5, 0x7fff, 0x0, 0x4001, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x4001, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x4, 0x3, 0x8, 0x4, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x4, 0x3, 0x4, 0x2950bfb2, 0x3, 0xa2, 0x7, 0x53cf697b, 0x5, 0x100, 0xac8, 0xbf, 0x10002, 0x3, 0x7fe, 0xb, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa, 0x4, 0x26], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xfffffffa, 0x5, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc9, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x8, 0xb, 0xf, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa20, 0x4, 0x7, 0x1, 0x9, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/5, 0x219000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 27.596577716s ago: executing program 0 (id=385): lseek(0xffffffffffffffff, 0x10001, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) writev(0xffffffffffffffff, &(0x7f0000004380)=[{&(0x7f00000007c0)}], 0x1) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) 27.264648432s ago: executing program 3 (id=388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='mmap_lock_acquire_returned\x00', r0}, 0x18) fsopen(0x0, 0x1) 26.825530819s ago: executing program 3 (id=389): chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32], 0x48) r0 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 24.844841s ago: executing program 3 (id=396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 24.634783824s ago: executing program 3 (id=397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() 12.548290668s ago: executing program 32 (id=385): lseek(0xffffffffffffffff, 0x10001, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) writev(0xffffffffffffffff, &(0x7f0000004380)=[{&(0x7f00000007c0)}], 0x1) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) 9.308945551s ago: executing program 33 (id=397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() 4.804119903s ago: executing program 1 (id=450): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r3 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) 4.513779988s ago: executing program 1 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970001400078008000840"], 0x60}}, 0xc000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4049000) 3.674448351s ago: executing program 1 (id=452): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xa, 0x4, 0x4, 0x5, 0x11, "3c16d79e4d269b4607000000665c3900"}) 3.584203022s ago: executing program 1 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.472334794s ago: executing program 2 (id=455): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000140)={0x4, 0x0, 0x1, 0x6, 'syz1\x00', 0x3}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 3.358594316s ago: executing program 2 (id=456): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000001000)=@bpq0, 0x10) 3.213385928s ago: executing program 1 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}, {&(0x7f0000000600)}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8=r4, @ANYRESDEC, @ANYBLOB="00020000203f00001c0012800b00010062726964676500000c000280080002000900efa26205255e6462a02e548aadf8149d000008000a00", @ANYRES16=0x0, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 3.10863392s ago: executing program 2 (id=458): openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000002c0)="3a85") 1.953507889s ago: executing program 2 (id=459): getpid() sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.85377173s ago: executing program 1 (id=460): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000006480)=ANY=[@ANYRES64=0x0], 0x1, 0x6213, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x0, 0x0, &(0x7f0000000d40)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000008900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2236824, 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x802, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xab01, 0x104) writev(r0, &(0x7f0000000780), 0x0) 1.268672579s ago: executing program 2 (id=461): syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x5c6, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) 1.21897934s ago: executing program 4 (id=428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 2 (id=462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) r2 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x7, [], [0x0, 0x0, 0xc, 0x1], [0x46b6], [0x4, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. [ 80.983019][ T5776] cgroup: Unknown subsys name 'net' [ 81.125377][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.887655][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.200880][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.209973][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.219075][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.227081][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.235487][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.243484][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.251044][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.259082][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.260163][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.274894][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.283407][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.291884][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.296371][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.307583][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.315190][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.330760][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.341164][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.349308][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.357283][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.370196][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.377882][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.378709][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.393505][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.401240][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.972208][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 85.983459][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.085565][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.173914][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.212891][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.221078][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.229214][ T5786] bridge_slave_0: entered allmulticast mode [ 86.237141][ T5786] bridge_slave_0: entered promiscuous mode [ 86.251468][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.258810][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.266289][ T5786] bridge_slave_1: entered allmulticast mode [ 86.273348][ T5786] bridge_slave_1: entered promiscuous mode [ 86.280834][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.288192][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.295399][ T5794] bridge_slave_0: entered allmulticast mode [ 86.302787][ T5794] bridge_slave_0: entered promiscuous mode [ 86.334838][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.342266][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.349954][ T5794] bridge_slave_1: entered allmulticast mode [ 86.357135][ T5794] bridge_slave_1: entered promiscuous mode [ 86.436579][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.449324][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.463464][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.491696][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.562073][ T5794] team0: Port device team_slave_0 added [ 86.568422][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.575581][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.583372][ T5789] bridge_slave_0: entered allmulticast mode [ 86.590744][ T5789] bridge_slave_0: entered promiscuous mode [ 86.625462][ T5794] team0: Port device team_slave_1 added [ 86.645493][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.652819][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.661237][ T5789] bridge_slave_1: entered allmulticast mode [ 86.668430][ T5789] bridge_slave_1: entered promiscuous mode [ 86.688869][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.696360][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.703683][ T5788] bridge_slave_0: entered allmulticast mode [ 86.711404][ T5788] bridge_slave_0: entered promiscuous mode [ 86.722014][ T5786] team0: Port device team_slave_0 added [ 86.731560][ T5786] team0: Port device team_slave_1 added [ 86.762112][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.769681][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.777064][ T5788] bridge_slave_1: entered allmulticast mode [ 86.784107][ T5788] bridge_slave_1: entered promiscuous mode [ 86.834065][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.844314][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.871358][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.911435][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.918698][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.945530][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.958284][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.965296][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.991647][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.012145][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.024621][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.037745][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.048067][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.055055][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.081497][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.125490][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.169720][ T5788] team0: Port device team_slave_0 added [ 87.218184][ T5788] team0: Port device team_slave_1 added [ 87.230338][ T5786] hsr_slave_0: entered promiscuous mode [ 87.237712][ T5786] hsr_slave_1: entered promiscuous mode [ 87.248180][ T5789] team0: Port device team_slave_0 added [ 87.295579][ T5789] team0: Port device team_slave_1 added [ 87.356749][ T5801] Bluetooth: hci2: command tx timeout [ 87.421696][ T5794] hsr_slave_0: entered promiscuous mode [ 87.430785][ T5794] hsr_slave_1: entered promiscuous mode [ 87.437158][ T5801] Bluetooth: hci3: command tx timeout [ 87.437209][ T5796] Bluetooth: hci0: command tx timeout [ 87.442771][ T5792] Bluetooth: hci1: command tx timeout [ 87.460138][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.469660][ T5794] Cannot create hsr debugfs directory [ 87.479719][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.487014][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.514406][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.526760][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.533752][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.559878][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.572947][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.580062][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.606086][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.630415][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.639208][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.665450][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.830423][ T5789] hsr_slave_0: entered promiscuous mode [ 87.837551][ T5789] hsr_slave_1: entered promiscuous mode [ 87.843978][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.851702][ T5789] Cannot create hsr debugfs directory [ 87.972151][ T5788] hsr_slave_0: entered promiscuous mode [ 87.983663][ T5788] hsr_slave_1: entered promiscuous mode [ 87.991660][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.999970][ T5788] Cannot create hsr debugfs directory [ 88.223940][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.252637][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.301757][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.314987][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.411661][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.427371][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.442283][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.467449][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.547504][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.590897][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.602494][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.613639][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.677233][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.688839][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.699025][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.727060][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.802030][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.847661][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.879625][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.887052][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.937464][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.944634][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.970595][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.048333][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.068610][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.115283][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.122698][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.171563][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.182969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.190231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.263196][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.277777][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.351966][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.359447][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.388869][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.396631][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.427990][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.436474][ T5792] Bluetooth: hci2: command tx timeout [ 89.477357][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.484618][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.495161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.502499][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.517378][ T5792] Bluetooth: hci0: command tx timeout [ 89.522869][ T5792] Bluetooth: hci1: command tx timeout [ 89.528392][ T5801] Bluetooth: hci3: command tx timeout [ 89.618288][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.829484][ T5786] veth0_vlan: entered promiscuous mode [ 89.869392][ T5786] veth1_vlan: entered promiscuous mode [ 89.937867][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.015002][ T5786] veth0_macvtap: entered promiscuous mode [ 90.040293][ T5786] veth1_macvtap: entered promiscuous mode [ 90.129652][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.145492][ T5794] veth0_vlan: entered promiscuous mode [ 90.164887][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.182941][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.192600][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.202095][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.211616][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.230494][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.260191][ T5794] veth1_vlan: entered promiscuous mode [ 90.291255][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.401585][ T5794] veth0_macvtap: entered promiscuous mode [ 90.449166][ T5794] veth1_macvtap: entered promiscuous mode [ 90.482970][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.501064][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.567487][ T5788] veth0_vlan: entered promiscuous mode [ 90.581264][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.592361][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.605115][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.624092][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.627906][ T5788] veth1_vlan: entered promiscuous mode [ 90.640963][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.650595][ T5789] veth0_vlan: entered promiscuous mode [ 90.659117][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.670267][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.685226][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.708993][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.718762][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.727724][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.736809][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.771279][ T5789] veth1_vlan: entered promiscuous mode [ 90.919510][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.929917][ T5788] veth0_macvtap: entered promiscuous mode [ 90.957958][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.988338][ T5788] veth1_macvtap: entered promiscuous mode [ 91.031684][ T5879] syz.2.3[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.041234][ T5789] veth0_macvtap: entered promiscuous mode [ 91.049227][ T5789] veth1_macvtap: entered promiscuous mode [ 91.075325][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.081058][ T5879] loop2: detected capacity change from 0 to 256 [ 91.092123][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.104473][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.108421][ T5879] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 91.128720][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.141450][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.152623][ T5879] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 91.158738][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.177978][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.187268][ T5879] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 91.194979][ T5879] UDF-fs: Scanning with blocksize 512 failed [ 91.206778][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.221348][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.228267][ T5879] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 91.232198][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.252229][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.254705][ T5879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.264853][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.290084][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.308105][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.321548][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.333378][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.343673][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.370390][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.393232][ T27] audit: type=1804 audit(1753592843.059:2): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/file0/bus" dev="loop2" ino=77 res=1 errno=0 [ 91.420438][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.450590][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.472500][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.484108][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.500039][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.510237][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.521282][ T5801] Bluetooth: hci2: command tx timeout [ 91.527858][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.552700][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.568665][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.580173][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.599404][ T5801] Bluetooth: hci0: command tx timeout [ 91.604934][ T5801] Bluetooth: hci3: command tx timeout [ 91.610545][ T5801] Bluetooth: hci1: command tx timeout [ 91.616631][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.625487][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.674171][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.710734][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.732807][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.752323][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.968017][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.979614][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.987554][ T5888] loop3: detected capacity change from 0 to 1024 [ 91.995424][ T5888] ======================================================= [ 91.995424][ T5888] WARNING: The mand mount option has been deprecated and [ 91.995424][ T5888] and is ignored by this kernel. Remove the mand [ 91.995424][ T5888] option from the mount to silence this warning. [ 91.995424][ T5888] ======================================================= [ 92.030411][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.045040][ T5888] EXT4-fs: Ignoring removed bh option [ 92.063292][ T5888] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.124527][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.138805][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.160846][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.225336][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.233477][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.255087][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.263042][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.471251][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.499796][ T9] cfg80211: failed to load regulatory.db [ 92.511178][ T5893] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.652744][ T5895] loop0: detected capacity change from 0 to 1024 [ 92.688788][ T5897] loop3: detected capacity change from 0 to 256 [ 92.733679][ T5897] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 92.776718][ T5895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.876947][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.090843][ T5903] loop2: detected capacity change from 0 to 4096 [ 93.217588][ T5880] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.248712][ T5880] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 93.260107][ T5880] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 93.270616][ T5880] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.280953][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.318571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.514589][ T5893] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.606632][ T5801] Bluetooth: hci2: command tx timeout [ 93.654878][ T5880] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 93.718029][ T5801] Bluetooth: hci3: command tx timeout [ 93.723531][ T5801] Bluetooth: hci0: command tx timeout [ 93.729594][ T5796] Bluetooth: hci1: command tx timeout [ 93.828902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.083646][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.408445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 94.417246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 94.425953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 94.450752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.465845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.785426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.037815][ T54] usb 2-1: USB disconnect, device number 2 [ 95.136071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.269246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.549847][ T5913] loop0: detected capacity change from 0 to 32768 [ 95.686163][ T5919] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 95.778005][ T5913] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.162561][ T5913] XFS (loop0): Ending clean mount [ 96.179641][ T5913] XFS (loop0): Quotacheck needed: Please wait. [ 96.269474][ T5913] XFS (loop0): Quotacheck: Done. [ 97.092817][ T5934] loop3: detected capacity change from 0 to 512 [ 97.176237][ T5934] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 97.217873][ T5934] syz.3.14: attempt to access beyond end of device [ 97.217873][ T5934] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 97.498627][ T5937] loop1: detected capacity change from 0 to 32768 [ 97.509815][ T5934] EXT4-fs (loop3): couldn't read superblock of external journal [ 97.524284][ T5937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.15 (5937) [ 97.580275][ T5937] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.590971][ T5937] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 97.600526][ T5937] BTRFS info (device loop1): setting nodatacow, compression disabled [ 97.608748][ T5937] BTRFS info (device loop1): max_inline at 0 [ 97.614845][ T5937] BTRFS info (device loop1): enabling disk space caching [ 97.622077][ T5937] BTRFS info (device loop1): turning off barriers [ 97.628951][ T5937] BTRFS info (device loop1): doing ref verification [ 97.635566][ T5937] BTRFS info (device loop1): force clearing of disk cache [ 97.642878][ T5937] BTRFS info (device loop1): enabling ssd optimizations [ 97.650019][ T5937] BTRFS info (device loop1): max_inline at 4096 [ 97.656324][ T5937] BTRFS info (device loop1): disk space caching is enabled [ 97.895133][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.541124][ T5937] BTRFS info (device loop1): auto enabling async discard [ 98.607703][ T5937] BTRFS info (device loop1): rebuilding free space tree [ 98.687460][ T5937] BTRFS info (device loop1): disabling free space tree [ 98.694556][ T5937] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.705903][ T5937] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.046888][ T5959] overlay: Unknown parameter 'hash' [ 99.107068][ T5961] IPVS: length: 83 != 24 [ 99.317056][ T5958] syzkaller0: entered promiscuous mode [ 99.358030][ T5958] syzkaller0: entered allmulticast mode [ 100.265857][ T5970] program syz.0.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.279634][ T5970] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 100.834972][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.257526][ T6023] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 105.264845][ T6023] overlayfs: failed to set xattr on upper [ 105.270750][ T6023] overlayfs: ...falling back to redirect_dir=nofollow. [ 105.280441][ T6023] overlayfs: ...falling back to index=off. [ 105.286387][ T6023] overlayfs: ...falling back to uuid=null. [ 108.648422][ T6030] sched: RT throttling activated [ 109.025849][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.035844][ T5778] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 109.259863][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 109.275923][ T5778] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 109.327151][ T5854] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.335243][ T5854] usb 3-1: config 0 has no interface number 0 [ 109.342131][ T5778] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.375629][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.390364][ T5854] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.424803][ T5854] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.441583][ T5854] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 109.451488][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.486357][ T5854] usb 3-1: config 0 descriptor?? [ 110.531244][ T5854] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0001/input/input6 [ 110.879617][ T5854] uclogic 0003:28BD:0094.0001: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 111.266070][ T5854] usb 3-1: USB disconnect, device number 2 [ 111.933328][ T5778] usb 1-1: USB disconnect, device number 2 [ 111.968134][ T6056] fido_id[6056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.086097][ T5796] Bluetooth: hci3: command tx timeout [ 114.806149][ T5796] Bluetooth: hci3: command tx timeout [ 115.692185][ T6080] Zero length message leads to an empty skb [ 115.888930][ T6082] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 116.002403][ T6084] nbd0: detected capacity change from 0 to 127 [ 116.095552][ T5796] block nbd0: Receive control failed (result -104) [ 116.652675][ T6097] tipc: Started in network mode [ 116.658432][ T6097] tipc: Node identity 4ab9c356453f, cluster identity 4711 [ 116.666387][ T6097] tipc: Enabled bearer , priority 0 [ 116.677976][ T6097] syzkaller0: entered promiscuous mode [ 116.684316][ T6097] syzkaller0: entered allmulticast mode [ 116.724965][ T6097] tipc: Resetting bearer [ 116.751750][ T6096] tipc: Resetting bearer [ 116.812161][ T6096] tipc: Disabling bearer [ 120.464128][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 120.689421][ T6130] tipc: Started in network mode [ 120.694985][ T6130] tipc: Node identity 6afcfa4f5a3f, cluster identity 4711 [ 120.723718][ T6130] tipc: Enabled bearer , priority 0 [ 120.731454][ T6135] syzkaller0: entered promiscuous mode [ 120.751522][ T6135] syzkaller0: entered allmulticast mode [ 120.793886][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 120.922324][ T6135] tipc: Resetting bearer [ 121.001807][ T6129] tipc: Resetting bearer [ 121.087904][ T6129] tipc: Disabling bearer [ 122.798387][ T6152] loop1: detected capacity change from 0 to 40427 [ 122.811409][ T6152] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 122.820095][ T6152] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.846858][ T6152] F2FS-fs (loop1): invalid crc value [ 122.871377][ T6152] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.946078][ T6152] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.953457][ T6152] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.144776][ T27] audit: type=1800 audit(1753592874.999:3): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.69" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 124.716612][ T6174] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.871389][ T12] kworker/u4:1: attempt to access beyond end of device [ 124.871389][ T12] loop1: rw=1, sector=77824, nr_sectors = 2064 limit=40427 [ 125.153107][ T5835] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.380559][ T12] kworker/u4:1: attempt to access beyond end of device [ 125.380559][ T12] loop1: rw=1, sector=79888, nr_sectors = 2032 limit=40427 [ 125.423914][ T6177] tipc: Enabled bearer , priority 0 [ 125.431965][ T6177] syzkaller0: entered promiscuous mode [ 125.450041][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 125.450593][ T12] kworker/u4:1: attempt to access beyond end of device [ 125.450593][ T12] loop1: rw=1, sector=49152, nr_sectors = 2664 limit=40427 [ 125.469402][ T6177] syzkaller0: entered allmulticast mode [ 125.481145][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.511327][ T5835] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 125.519284][ T12] kworker/u4:1: attempt to access beyond end of device [ 125.519284][ T12] loop1: rw=1, sector=51816, nr_sectors = 544 limit=40427 [ 125.567582][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.597592][ T5835] usb 3-1: Product: syz [ 125.615808][ T5835] usb 3-1: Manufacturer: syz [ 125.620500][ T5835] usb 3-1: SerialNumber: syz [ 125.657514][ T5835] usb 3-1: config 0 descriptor?? [ 125.687880][ T6179] tipc: Resetting bearer [ 125.712722][ T5835] rndis_wlan 3-1:0.0: skipping garbage [ 125.729671][ T5835] rndis_wlan: probe of 3-1:0.0 failed with error -22 [ 125.737268][ T5835] rndis_host 3-1:0.0: skipping garbage [ 125.743790][ T5835] rndis_host: probe of 3-1:0.0 failed with error -22 [ 125.755158][ T6176] tipc: Resetting bearer [ 125.815092][ T6176] tipc: Disabling bearer [ 126.961936][ T6190] tipc: Enabling of bearer rejected, failed to enable media [ 126.973036][ T6190] syzkaller0: entered promiscuous mode [ 126.978935][ T6190] syzkaller0: entered allmulticast mode [ 127.315174][ T6199] loop1: detected capacity change from 0 to 256 [ 128.545526][ T5855] usb 3-1: USB disconnect, device number 3 [ 129.607745][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 129.757899][ T5796] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 129.766777][ T5796] Bluetooth: hci1: Injecting HCI hardware error event [ 129.775919][ T5801] Bluetooth: hci1: hardware error 0x00 [ 129.799520][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 130.195125][ T6226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.203137][ T6226] IPv6: NLM_F_CREATE should be set when creating new route [ 130.324768][ T6226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.669052][ T6238] input: syz1 as /devices/virtual/input/input7 [ 131.753933][ T6241] loop1: detected capacity change from 0 to 256 [ 131.798562][ T6241] FAT-fs (loop1): Unrecognized mount option "une=0" or missing value [ 131.838233][ T5801] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 132.148150][ T6241] loop1: detected capacity change from 0 to 4096 [ 132.181900][ T6241] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 132.272340][ T6241] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 132.608312][ T27] audit: type=1800 audit(1753592884.279:4): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.90" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 132.628339][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.673188][ T6254] nbd1: detected capacity change from 0 to 127 [ 133.048773][ T5801] block nbd1: Receive control failed (result -104) [ 133.355903][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.447033][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.455217][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.652392][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 133.693087][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.745453][ T8] usb 2-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 133.765276][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.905280][ T8] usb 2-1: Product: syz [ 133.949264][ T8] usb 2-1: Manufacturer: syz [ 133.996611][ T8] usb 2-1: SerialNumber: syz [ 134.107044][ T8] usb 2-1: config 0 descriptor?? [ 134.125961][ T8] rndis_wlan 2-1:0.0: skipping garbage [ 134.133784][ T8] rndis_wlan: probe of 2-1:0.0 failed with error -22 [ 134.167862][ T8] rndis_host 2-1:0.0: skipping garbage [ 134.173607][ T8] rndis_host: probe of 2-1:0.0 failed with error -22 [ 134.441647][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 135.286533][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 137.362221][ T54] usb 2-1: USB disconnect, device number 3 [ 137.504848][ T6297] syzkaller0: entered promiscuous mode [ 137.512979][ T6297] syzkaller0: entered allmulticast mode [ 137.688852][ T6300] nbd2: detected capacity change from 0 to 127 [ 137.950869][ T6306] loop1: detected capacity change from 0 to 32768 [ 137.977935][ T6306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.105 (6306) [ 138.040178][ T6306] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.050564][ T6306] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 138.059407][ T6306] BTRFS info (device loop1): setting nodatacow, compression disabled [ 138.067564][ T6306] BTRFS info (device loop1): max_inline at 0 [ 138.074542][ T6306] BTRFS info (device loop1): enabling disk space caching [ 138.081656][ T6306] BTRFS info (device loop1): turning off barriers [ 138.088127][ T6306] BTRFS info (device loop1): doing ref verification [ 138.094731][ T6306] BTRFS info (device loop1): force clearing of disk cache [ 138.101892][ T6306] BTRFS info (device loop1): enabling ssd optimizations [ 138.108940][ T6306] BTRFS info (device loop1): max_inline at 4096 [ 138.115196][ T6306] BTRFS info (device loop1): disk space caching is enabled [ 138.232031][ T6306] BTRFS info (device loop1): auto enabling async discard [ 138.267726][ T5801] block nbd2: Receive control failed (result -104) [ 138.274894][ T6306] BTRFS info (device loop1): rebuilding free space tree [ 138.322218][ T6306] BTRFS info (device loop1): disabling free space tree [ 138.329243][ T6306] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.339018][ T6306] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.500938][ T6328] overlay: Unknown parameter 'hash' [ 138.526278][ T6328] IPVS: length: 83 != 24 [ 139.000992][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.682484][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 141.696287][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 142.215340][ T6352] syzkaller0: entered promiscuous mode [ 142.221451][ T6352] syzkaller0: entered allmulticast mode [ 142.246012][ T5854] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.476958][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 142.543473][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.678380][ T5854] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 142.811894][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.843570][ T5854] usb 3-1: Product: syz [ 142.865895][ T5854] usb 3-1: Manufacturer: syz [ 142.870610][ T5854] usb 3-1: SerialNumber: syz [ 142.917672][ T5854] usb 3-1: config 0 descriptor?? [ 142.983277][ T5854] rndis_wlan 3-1:0.0: skipping garbage [ 143.022866][ T5854] rndis_wlan: probe of 3-1:0.0 failed with error -22 [ 143.075184][ T5854] rndis_host 3-1:0.0: skipping garbage [ 143.085156][ T5854] rndis_host: probe of 3-1:0.0 failed with error -22 [ 143.858142][ T6365] loop3: detected capacity change from 0 to 2048 [ 144.010496][ T6365] Alternate GPT is invalid, using primary GPT. [ 144.053201][ T6365] loop3: p2 p3 p7 [ 144.451088][ T5906] udevd[5906]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 144.470040][ T6373] tipc: Enabled bearer , priority 0 [ 144.473672][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 144.489541][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 144.491077][ T6373] syzkaller0: entered promiscuous mode [ 144.521547][ T6373] syzkaller0: entered allmulticast mode [ 144.593403][ T6372] tipc: Resetting bearer [ 144.638317][ T6372] tipc: Disabling bearer [ 145.557527][ T6382] nbd3: detected capacity change from 0 to 127 [ 145.671456][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 145.680940][ T5801] block nbd3: Receive control failed (result -104) [ 145.886316][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 146.835987][ T24] block nbd0: Possible stuck request ffff888021b68000: control (read@0,1024B). Runtime 30 seconds [ 146.847457][ T24] block nbd0: Possible stuck request ffff888021b68200: control (read@1024,1024B). Runtime 30 seconds [ 146.858860][ T24] block nbd0: Possible stuck request ffff888021b68400: control (read@2048,1024B). Runtime 30 seconds [ 146.870224][ T24] block nbd0: Possible stuck request ffff888021b68600: control (read@3072,1024B). Runtime 30 seconds [ 146.939117][ T5854] usb 3-1: USB disconnect, device number 4 [ 147.165207][ T6400] syzkaller0: entered promiscuous mode [ 147.174187][ T6400] syzkaller0: entered allmulticast mode [ 147.403252][ T6408] tipc: Enabled bearer , priority 0 [ 147.411538][ T6408] syzkaller0: entered promiscuous mode [ 147.425614][ T6408] syzkaller0: entered allmulticast mode [ 147.500811][ T6407] tipc: Resetting bearer [ 147.588254][ T6407] tipc: Disabling bearer [ 149.484472][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 149.665064][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 149.734799][ T6428] loop1: detected capacity change from 0 to 4096 [ 149.773737][ T6428] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 150.366370][ T6418] loop2: detected capacity change from 0 to 32768 [ 150.391486][ T6418] XFS: ikeep mount option is deprecated. [ 150.473788][ T6418] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.862207][ T6418] XFS (loop2): Ending clean mount [ 150.879619][ T6418] XFS (loop2): Quotacheck needed: Please wait. [ 151.006607][ T6418] XFS (loop2): Quotacheck: Done. [ 151.018204][ T5854] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.186242][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.245912][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 151.263338][ T5854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.294818][ T5854] usb 2-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 151.317905][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.378461][ T5854] usb 2-1: Product: syz [ 151.407355][ T5854] usb 2-1: Manufacturer: syz [ 151.424375][ T5854] usb 2-1: SerialNumber: syz [ 151.450823][ T5854] usb 2-1: config 0 descriptor?? [ 151.476659][ T5854] rndis_wlan 2-1:0.0: skipping garbage [ 151.501236][ T5854] rndis_wlan: probe of 2-1:0.0 failed with error -22 [ 151.521821][ T5854] rndis_host 2-1:0.0: skipping garbage [ 151.531593][ T5854] rndis_host: probe of 2-1:0.0 failed with error -22 [ 152.213689][ T27] audit: type=1326 audit(1753592903.879:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3398e9a9 code=0x7fc00000 [ 152.689984][ T27] audit: type=1326 audit(1753592904.359:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a3398e9a9 code=0x7fc00000 [ 153.080034][ T6456] tipc: Enabled bearer , priority 0 [ 153.098118][ T6456] syzkaller0: entered promiscuous mode [ 153.111821][ T6456] syzkaller0: entered allmulticast mode [ 153.179153][ T6455] tipc: Resetting bearer [ 153.231601][ T6455] tipc: Disabling bearer [ 154.189012][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 154.377772][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 156.778411][ T6484] tipc: Enabled bearer , priority 10 [ 157.006513][ T6492] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 157.014713][ T6492] netlink: 124 bytes leftover after parsing attributes in process `syz.0.148'. [ 157.522635][ T6484] Bluetooth: MGMT ver 1.22 [ 157.655417][ T6493] netlink: 56 bytes leftover after parsing attributes in process `syz.3.149'. [ 157.760216][ T5855] usb 2-1: USB disconnect, device number 4 [ 157.779869][ T5828] tipc: Node number set to 260490070 [ 157.959110][ T6501] nbd4: detected capacity change from 0 to 127 [ 157.987382][ T6500] tipc: Enabled bearer , priority 0 [ 158.010866][ T6500] syzkaller0: entered promiscuous mode [ 158.042123][ T6500] syzkaller0: entered allmulticast mode [ 158.137594][ T5801] block nbd4: Receive control failed (result -104) [ 158.149464][ T6509] loop1: detected capacity change from 0 to 64 [ 158.209776][ T6499] tipc: Resetting bearer [ 158.337822][ T6499] tipc: Disabling bearer [ 158.606530][ T6517] Illegal XDP return value 3932025381 on prog (id 25) dev syz_tun, expect packet loss! [ 158.662483][ T6519] syzkaller0: entered promiscuous mode [ 158.686156][ T6519] syzkaller0: entered allmulticast mode [ 159.185636][ T6526] tipc: Started in network mode [ 159.490016][ T6526] tipc: Node identity ac1414aa, cluster identity 4711 [ 159.700892][ T6526] tipc: Enabled bearer , priority 10 [ 160.005793][ T5828] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 160.177983][ T6546] syzkaller0: entered promiscuous mode [ 160.183656][ T6546] syzkaller0: entered allmulticast mode [ 160.227770][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 160.255205][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.291076][ T5828] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 160.302482][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.311097][ T5828] usb 1-1: Product: syz [ 160.317295][ T5828] usb 1-1: Manufacturer: syz [ 160.321960][ T5828] usb 1-1: SerialNumber: syz [ 160.323272][ T6543] nbd5: detected capacity change from 0 to 127 [ 160.348270][ T5828] usb 1-1: config 0 descriptor?? [ 160.353354][ T5801] block nbd5: Receive control failed (result -104) [ 160.384482][ T5828] rndis_wlan 1-1:0.0: skipping garbage [ 160.406109][ T5828] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 160.413565][ T5828] rndis_host 1-1:0.0: skipping garbage [ 160.419405][ T5828] rndis_host: probe of 1-1:0.0 failed with error -22 [ 160.832389][ T5828] tipc: Node number set to 2886997162 [ 162.322613][ T6551] loop3: detected capacity change from 0 to 32768 [ 162.383428][ T6551] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.898876][ T24] block nbd1: Possible stuck request ffff888021b80000: control (read@0,1024B). Runtime 30 seconds [ 162.925950][ T24] block nbd1: Possible stuck request ffff888021b80200: control (read@1024,1024B). Runtime 30 seconds [ 162.941221][ T24] block nbd1: Possible stuck request ffff888021b80400: control (read@2048,1024B). Runtime 30 seconds [ 162.952884][ T24] block nbd1: Possible stuck request ffff888021b80600: control (read@3072,1024B). Runtime 30 seconds [ 163.198057][ T6571] loop1: detected capacity change from 0 to 64 [ 163.218082][ T6551] XFS (loop3): Ending clean mount [ 163.249484][ T6551] XFS (loop3): Quotacheck needed: Please wait. [ 163.359918][ T6551] XFS (loop3): Quotacheck: Done. [ 163.506911][ T6551] XFS (loop3): User initiated shutdown received. [ 163.553386][ T6551] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 163.604565][ T6551] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 163.720718][ T5794] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 164.010116][ T6586] nbd6: detected capacity change from 0 to 127 [ 164.051779][ T6566] loop2: detected capacity change from 0 to 32768 [ 164.099218][ T8] usb 1-1: USB disconnect, device number 3 [ 164.200549][ T5801] block nbd6: Receive control failed (result -104) [ 164.293651][ T6566] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 164.543436][ T6566] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 164.696778][ T6599] tipc: Enabled bearer , priority 0 [ 164.791034][ T6601] syzkaller0: entered promiscuous mode [ 164.802042][ T27] audit: type=1800 audit(1753592916.469:7): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.172" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 164.846166][ T6601] syzkaller0: entered allmulticast mode [ 164.881191][ T6596] tipc: Resetting bearer [ 164.942147][ T6596] tipc: Disabling bearer [ 165.026031][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 165.846395][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 167.706806][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 168.060133][ T5960] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 30 seconds [ 168.071185][ T5960] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 30 seconds [ 168.083960][ T5960] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 30 seconds [ 168.095172][ T5960] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 30 seconds [ 168.172030][ T6620] loop2: detected capacity change from 0 to 4096 [ 168.203935][ T6620] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 169.055893][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 169.107692][ T6628] nbd7: detected capacity change from 0 to 127 [ 169.176353][ T5801] block nbd7: Receive control failed (result -104) [ 169.255785][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 169.273363][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.291718][ T8] usb 2-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 169.329321][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.346084][ T8] usb 2-1: Product: syz [ 169.361324][ T8] usb 2-1: Manufacturer: syz [ 169.373279][ T8] usb 2-1: SerialNumber: syz [ 169.412946][ T8] usb 2-1: config 0 descriptor?? [ 169.448301][ T8] rndis_wlan 2-1:0.0: skipping garbage [ 169.503846][ T8] rndis_wlan: probe of 2-1:0.0 failed with error -22 [ 169.526306][ T6637] tipc: Enabled bearer , priority 0 [ 169.549785][ T8] rndis_host 2-1:0.0: skipping garbage [ 169.603261][ T8] rndis_host: probe of 2-1:0.0 failed with error -22 [ 169.637870][ T6637] tipc: Resetting bearer [ 169.700468][ T6636] tipc: Disabling bearer [ 170.527531][ T6650] syzkaller0: entered promiscuous mode [ 170.540406][ T6650] syzkaller0: entered allmulticast mode [ 173.561950][ T54] usb 2-1: USB disconnect, device number 5 [ 173.729778][ T6672] nbd8: detected capacity change from 0 to 127 [ 173.766579][ T5801] block nbd8: Receive control failed (result -104) [ 174.121369][ T6683] loop3: detected capacity change from 0 to 64 [ 174.129479][ T6670] 9pnet_fd: Insufficient options for proto=fd [ 174.268687][ T6683] hfs: bad catalog folder thread [ 175.712377][ T24] block nbd3: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 30 seconds [ 175.723156][ T24] block nbd3: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 30 seconds [ 175.734108][ T24] block nbd3: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 30 seconds [ 175.745089][ T24] block nbd3: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 30 seconds [ 176.196161][ T6698] loop3: detected capacity change from 0 to 32768 [ 176.203563][ T6698] XFS: ikeep mount option is deprecated. [ 176.359403][ T6698] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.539594][ T6698] XFS (loop3): Ending clean mount [ 176.548594][ T6698] XFS (loop3): Quotacheck needed: Please wait. [ 176.620225][ T6698] XFS (loop3): Quotacheck: Done. [ 177.032958][ T24] block nbd0: Possible stuck request ffff888021b68000: control (read@0,1024B). Runtime 60 seconds [ 177.043831][ T24] block nbd0: Possible stuck request ffff888021b68200: control (read@1024,1024B). Runtime 60 seconds [ 177.059358][ T24] block nbd0: Possible stuck request ffff888021b68400: control (read@2048,1024B). Runtime 60 seconds [ 177.070483][ T24] block nbd0: Possible stuck request ffff888021b68600: control (read@3072,1024B). Runtime 60 seconds [ 177.111197][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.305834][ T5778] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.359455][ T6715] nbd9: detected capacity change from 0 to 127 [ 177.499898][ T5801] block nbd9: Receive control failed (result -104) [ 177.528472][ T5778] usb 2-1: Using ep0 maxpacket: 32 [ 177.540743][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.570551][ T5778] usb 2-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 177.595997][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.626010][ T5778] usb 2-1: Product: syz [ 177.630277][ T5778] usb 2-1: Manufacturer: syz [ 177.634916][ T5778] usb 2-1: SerialNumber: syz [ 177.673085][ T5778] usb 2-1: config 0 descriptor?? [ 177.690242][ T5778] rndis_wlan 2-1:0.0: skipping garbage [ 177.717384][ T5778] rndis_wlan: probe of 2-1:0.0 failed with error -22 [ 177.724749][ T5778] rndis_host 2-1:0.0: skipping garbage [ 177.736410][ T5778] rndis_host: probe of 2-1:0.0 failed with error -22 [ 179.138695][ T6727] loop2: detected capacity change from 0 to 256 [ 179.288203][ T6727] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.313029][ T6727] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 179.353085][ T6727] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 179.390156][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.177274][ T6731] loop3: detected capacity change from 0 to 32768 [ 180.188276][ T6731] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.212 (6731) [ 180.206926][ T6731] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.217282][ T6731] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 180.226213][ T6731] BTRFS info (device loop3): using free space tree [ 180.344773][ T6731] BTRFS info (device loop3): enabling ssd optimizations [ 180.351993][ T6731] BTRFS info (device loop3): auto enabling async discard [ 180.420517][ T27] audit: type=1800 audit(1753592932.089:8): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.212" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 180.527311][ T27] audit: type=1800 audit(1753592932.139:9): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.212" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 180.763116][ T6758] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 180.781314][ T5794] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.787645][ T6758] netlink: 56 bytes leftover after parsing attributes in process `syz.0.221'. [ 180.968720][ T6762] nbd10: detected capacity change from 0 to 127 [ 181.138056][ T5801] block nbd10: Receive control failed (result -104) [ 182.840378][ T5835] usb 2-1: USB disconnect, device number 6 [ 183.024138][ T6771] loop2: detected capacity change from 0 to 32768 [ 183.274134][ T6784] tipc: Enabled bearer , priority 0 [ 183.345066][ T6784] tipc: Resetting bearer [ 183.441695][ T6782] tipc: Disabling bearer [ 185.192879][ T6796] trusted_key: syz.0.232 sent an empty control message without MSG_MORE. [ 186.778562][ T6812] loop2: detected capacity change from 0 to 256 [ 186.830818][ T6812] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 187.035915][ T5854] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 187.238042][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 187.251831][ T5854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.293284][ T5854] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 187.408228][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.620306][ T5854] usb 4-1: Product: syz [ 187.728334][ T5854] usb 4-1: Manufacturer: syz [ 187.864837][ T5854] usb 4-1: SerialNumber: syz [ 187.897415][ T5854] usb 4-1: config 0 descriptor?? [ 187.956022][ T5854] rndis_wlan 4-1:0.0: skipping garbage [ 188.012573][ T5854] rndis_wlan: probe of 4-1:0.0 failed with error -22 [ 188.056364][ T5854] rndis_host 4-1:0.0: skipping garbage [ 188.092704][ T5854] rndis_host: probe of 4-1:0.0 failed with error -22 [ 188.485962][ T24] block nbd4: Possible stuck request ffff888022088000: control (read@0,4096B). Runtime 30 seconds [ 190.348001][ T6866] syzkaller0: entered promiscuous mode [ 190.353644][ T6866] syzkaller0: entered allmulticast mode [ 190.464609][ T5960] block nbd5: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 30 seconds [ 191.189508][ T6870] tipc: Enabling of bearer rejected, already enabled [ 191.862888][ T28] usb 4-1: USB disconnect, device number 2 [ 193.576350][ T24] block nbd1: Possible stuck request ffff888021b80000: control (read@0,1024B). Runtime 60 seconds [ 193.588592][ T24] block nbd1: Possible stuck request ffff888021b80200: control (read@1024,1024B). Runtime 60 seconds [ 193.600315][ T24] block nbd1: Possible stuck request ffff888021b80400: control (read@2048,1024B). Runtime 60 seconds [ 193.611888][ T24] block nbd1: Possible stuck request ffff888021b80600: control (read@3072,1024B). Runtime 60 seconds [ 194.236209][ T5960] block nbd6: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 30 seconds [ 194.879972][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.886786][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.794575][ T6919] syzkaller0: entered promiscuous mode [ 196.823743][ T6919] syzkaller0: entered allmulticast mode [ 197.122490][ T6908] loop1: detected capacity change from 0 to 32768 [ 197.188069][ T6908] loop1: p1 p2 p3 [ 197.594446][ T6921] loop2: detected capacity change from 0 to 32768 [ 197.808664][ T6921] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 197.881438][ T27] audit: type=1800 audit(1753592949.539:10): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.260" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 198.839775][ T10] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 60 seconds [ 198.850721][ T10] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 60 seconds [ 198.861790][ T10] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 60 seconds [ 198.872837][ T10] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 60 seconds [ 198.990085][ T6921] workqueue: Failed to create a rescuer kthread for wq "dio/loop2": -EINTR [ 199.056033][ T6921] (syz.2.260,6921,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -12 [ 199.370755][ T24] block nbd7: Possible stuck request ffff888022208000: control (read@0,1024B). Runtime 30 seconds [ 199.394024][ T24] block nbd7: Possible stuck request ffff888022208200: control (read@1024,1024B). Runtime 30 seconds [ 199.410426][ T6947] overlayfs: failed to resolve './bus': -2 [ 199.411732][ T24] block nbd7: Possible stuck request ffff888022208400: control (read@2048,1024B). Runtime 30 seconds [ 199.427655][ T24] block nbd7: Possible stuck request ffff888022208600: control (read@3072,1024B). Runtime 30 seconds [ 199.559996][ T6921] syz.2.260 (6921) used greatest stack depth: 18320 bytes left [ 199.941024][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 200.446055][ T6952] tipc: Enabled bearer , priority 0 [ 200.471675][ T6952] syzkaller0: entered promiscuous mode [ 200.485904][ T6952] syzkaller0: entered allmulticast mode [ 200.533763][ T6579] udevd[6579]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 200.546217][ T6950] tipc: Resetting bearer [ 200.657443][ T6955] nbd11: detected capacity change from 0 to 127 [ 200.663586][ T6950] tipc: Disabling bearer [ 200.870859][ T6579] udevd[6579]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 200.892866][ T6957] syzkaller0: entered promiscuous mode [ 200.912653][ T6957] syzkaller0: entered allmulticast mode [ 200.937461][ T6965] loop8: detected capacity change from 0 to 16384 [ 200.957442][ T5801] block nbd11: Receive control failed (result -32) [ 200.989488][ T6579] udevd[6579]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 201.172714][ T6579] udevd[6579]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 201.185055][ T6966] loop8: detected capacity change from 16384 to 0 [ 201.996208][ T10] block nbd11: Dead connection, failed to find a fallback [ 202.003915][ T10] block nbd11: shutting down sockets [ 202.014474][ T10] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.026065][ T10] Buffer I/O error on dev nbd11, logical block 0, async page read [ 202.045925][ T24] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 202.055156][ T24] Buffer I/O error on dev nbd11, logical block 1, async page read [ 202.063559][ T24] Buffer I/O error on dev nbd11, logical block 2, async page read [ 202.071647][ T24] Buffer I/O error on dev nbd11, logical block 3, async page read [ 202.083494][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 202.093078][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 202.101186][ T24] Buffer I/O error on dev nbd11, logical block 1, async page read [ 202.109100][ T24] Buffer I/O error on dev nbd11, logical block 2, async page read [ 202.117056][ T24] Buffer I/O error on dev nbd11, logical block 3, async page read [ 202.125266][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 202.134745][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 202.146778][ T24] Buffer I/O error on dev nbd11, logical block 1, async page read [ 202.155407][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 202.165396][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.196293][ T10] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 202.213079][ T10] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.224304][ T10] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.235398][ T10] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.257922][ T6579] ldm_validate_partition_table(): Disk read failed. [ 202.385779][ T6579] Dev nbd11: unable to read RDB block 0 [ 202.486304][ T6579] nbd11: unable to read partition table [ 202.731908][ T6579] ldm_validate_partition_table(): Disk read failed. [ 202.841816][ T6579] Dev nbd11: unable to read RDB block 0 [ 202.891249][ T6579] nbd11: unable to read partition table [ 202.947169][ T6579] ldm_validate_partition_table(): Disk read failed. [ 203.176157][ T6579] Dev nbd11: unable to read RDB block 0 [ 203.387724][ T6579] nbd11: unable to read partition table [ 203.617297][ T6579] ldm_validate_partition_table(): Disk read failed. [ 203.645811][ T6579] Dev nbd11: unable to read RDB block 0 [ 203.662709][ T6579] nbd11: unable to read partition table [ 203.866456][ T10] block nbd8: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 30 seconds [ 203.877336][ T10] block nbd8: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 30 seconds [ 203.890769][ T10] block nbd8: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 30 seconds [ 203.902075][ T10] block nbd8: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 30 seconds [ 205.775589][ T24] block nbd3: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 60 seconds [ 205.787193][ T24] block nbd3: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 60 seconds [ 205.799891][ T24] block nbd3: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 60 seconds [ 205.811022][ T24] block nbd3: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 60 seconds [ 206.022162][ T7004] tipc: Enabled bearer , priority 0 [ 206.040400][ T7005] syzkaller0: entered promiscuous mode [ 206.057020][ T7005] syzkaller0: entered allmulticast mode [ 206.080644][ T7011] tipc: Resetting bearer [ 206.116119][ T7002] tipc: Resetting bearer [ 206.221655][ T7002] tipc: Disabling bearer [ 206.251967][ T7017] @: renamed from vlan0 (while UP) [ 206.293514][ T7019] syzkaller0: entered promiscuous mode [ 206.306810][ T7019] syzkaller0: entered allmulticast mode [ 207.709041][ T24] block nbd9: Possible stuck request ffff8880222b0000: control (read@0,4096B). Runtime 30 seconds [ 207.709262][ T6327] block nbd0: Possible stuck request ffff888021b68000: control (read@0,1024B). Runtime 90 seconds [ 207.816441][ T6327] block nbd0: Possible stuck request ffff888021b68200: control (read@1024,1024B). Runtime 90 seconds [ 207.828924][ T6327] block nbd0: Possible stuck request ffff888021b68400: control (read@2048,1024B). Runtime 90 seconds [ 207.841644][ T6327] block nbd0: Possible stuck request ffff888021b68600: control (read@3072,1024B). Runtime 90 seconds [ 207.976561][ T7033] syzkaller0: entered promiscuous mode [ 208.032422][ T7033] syzkaller0: entered allmulticast mode [ 211.015833][ T5156] udevd[5156]: worker [5803] /devices/virtual/block/nbd0 is taking a long time [ 211.025145][ T5156] udevd[5156]: worker [5791] /devices/virtual/block/nbd2 is taking a long time [ 211.182506][ T5156] udevd[5156]: worker [5907] /devices/virtual/block/nbd1 is taking a long time [ 211.255572][ T5156] udevd[5156]: worker [5906] /devices/virtual/block/nbd3 is taking a long time [ 211.541740][ T6327] block nbd10: Possible stuck request ffff888022308000: control (read@0,1024B). Runtime 30 seconds [ 211.552650][ T6327] block nbd10: Possible stuck request ffff888022308200: control (read@1024,1024B). Runtime 30 seconds [ 211.565931][ T6327] block nbd10: Possible stuck request ffff888022308400: control (read@2048,1024B). Runtime 30 seconds [ 211.577108][ T6327] block nbd10: Possible stuck request ffff888022308600: control (read@3072,1024B). Runtime 30 seconds [ 212.322296][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 212.328653][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 212.334899][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 213.216024][ T7042] syzkaller0: entered promiscuous mode [ 213.221561][ T7042] syzkaller0: entered allmulticast mode [ 213.464630][ T7059] tipc: Started in network mode [ 213.470013][ T7059] tipc: Node identity 3ad0cd568243, cluster identity 4711 [ 213.477714][ T7059] tipc: Enabled bearer , priority 0 [ 213.493319][ T7059] syzkaller0: entered promiscuous mode [ 213.607597][ T7059] syzkaller0: entered allmulticast mode [ 213.633207][ T7059] tipc: Resetting bearer [ 214.507507][ T28] tipc: Node number set to 3096694102 [ 214.530040][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.296'. [ 214.560563][ T7058] tipc: Resetting bearer [ 214.782572][ T7069] loop1: detected capacity change from 0 to 32768 [ 214.848315][ T7069] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 214.849979][ T7058] tipc: Disabling bearer [ 215.283963][ T27] audit: type=1326 audit(1753592966.759:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.1.298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe14d78e9a9 code=0x0 [ 215.429797][ T7070] tipc: Enabled bearer , priority 0 [ 215.459411][ T7070] tipc: Resetting bearer [ 215.470859][ T7067] tipc: Disabling bearer [ 215.696355][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 216.145316][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 216.256742][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 216.533780][ T7090] loop1: detected capacity change from 0 to 128 [ 218.420349][ T7090] EXT4-fs (loop1): Test dummy encryption mode enabled [ 218.845539][ T7090] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.863629][ T7090] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.430164][ T6327] block nbd4: Possible stuck request ffff888022088000: control (read@0,4096B). Runtime 60 seconds [ 220.149330][ T7110] tipc: Enabled bearer , priority 0 [ 220.176499][ T7110] syzkaller0: entered promiscuous mode [ 220.195958][ T7110] syzkaller0: entered allmulticast mode [ 220.230654][ T7110] tipc: Resetting bearer [ 220.234454][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.279759][ T7109] tipc: Resetting bearer [ 220.297368][ T7114] nbd12: detected capacity change from 0 to 127 [ 220.391695][ T7109] tipc: Disabling bearer [ 220.419928][ T50] block nbd12: Receive control failed (result -104) [ 220.583272][ T7104] loop2: detected capacity change from 0 to 32768 [ 220.619480][ T7104] (syz.2.307,7104,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.660204][ T7104] (syz.2.307,7104,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.736034][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 220.763615][ T7104] JBD2: Ignoring recovery information on journal [ 220.776002][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 220.890673][ T7104] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 220.966364][ T7130] tipc: Enabled bearer , priority 0 [ 221.027385][ T7130] tipc: Resetting bearer [ 221.072259][ T7128] tipc: Disabling bearer [ 221.118451][ T10] block nbd5: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 60 seconds [ 222.179558][ T7141] netlink: 100 bytes leftover after parsing attributes in process `syz.3.320'. [ 222.351694][ T27] audit: type=1326 audit(1753592974.009:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e9a9 code=0x7fc00000 [ 222.416791][ T7147] nbd13: detected capacity change from 0 to 127 [ 222.431349][ T27] audit: type=1326 audit(1753592974.009:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e70d8e9a9 code=0x7fc00000 [ 222.500372][ T27] audit: type=1326 audit(1753592974.009:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70d8e9a9 code=0x7fc00000 [ 222.642437][ T50] block nbd13: Receive control failed (result -32) [ 222.826327][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 222.991269][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 223.953121][ T6327] block nbd1: Possible stuck request ffff888021b80000: control (read@0,1024B). Runtime 90 seconds [ 223.966391][ T6327] block nbd1: Possible stuck request ffff888021b80200: control (read@1024,1024B). Runtime 90 seconds [ 223.977952][ T6327] block nbd1: Possible stuck request ffff888021b80400: control (read@2048,1024B). Runtime 90 seconds [ 223.990590][ T6327] block nbd1: Possible stuck request ffff888021b80600: control (read@3072,1024B). Runtime 90 seconds [ 224.024378][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 224.150422][ T7161] tipc: Enabled bearer , priority 0 [ 224.176441][ T7161] syzkaller0: entered promiscuous mode [ 224.186080][ T7161] syzkaller0: entered allmulticast mode [ 224.268835][ T7160] tipc: Resetting bearer [ 224.326377][ T10] block nbd6: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 60 seconds [ 224.348369][ T7160] tipc: Disabling bearer [ 224.371648][ T7165] tipc: Enabled bearer , priority 0 [ 224.391673][ T7168] syzkaller0: entered promiscuous mode [ 224.411088][ T7168] syzkaller0: entered allmulticast mode [ 224.466696][ T7165] tipc: Resetting bearer [ 224.485523][ T7164] tipc: Resetting bearer [ 224.565107][ T7164] tipc: Disabling bearer [ 226.409871][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 226.419266][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 226.672575][ T7190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.687635][ T7190] bond0: (slave rose0): Enslaving as an active interface with an up link [ 227.308150][ T7197] tipc: Enabled bearer , priority 0 [ 227.472136][ T7196] tipc: Disabling bearer [ 228.958883][ T7225] ALSA: seq fatal error: cannot create timer (-22) [ 229.921352][ T6327] block nbd7: Possible stuck request ffff888022208000: control (read@0,1024B). Runtime 60 seconds [ 229.933539][ T6327] block nbd7: Possible stuck request ffff888022208200: control (read@1024,1024B). Runtime 60 seconds [ 229.944978][ T6327] block nbd7: Possible stuck request ffff888022208400: control (read@2048,1024B). Runtime 60 seconds [ 229.956972][ T6327] block nbd7: Possible stuck request ffff888022208600: control (read@3072,1024B). Runtime 60 seconds [ 229.976427][ T10] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 90 seconds [ 229.987530][ T10] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 90 seconds [ 229.999072][ T10] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 90 seconds [ 230.010409][ T10] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 90 seconds [ 230.052307][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 230.273044][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 230.680877][ T7247] 9pnet_fd: Insufficient options for proto=fd [ 231.848170][ T7252] tipc: Enabled bearer , priority 0 [ 231.959124][ T7252] syzkaller0: entered promiscuous mode [ 231.964713][ T7252] syzkaller0: entered allmulticast mode [ 232.289634][ T7306] loop2: detected capacity change from 0 to 64 [ 232.523480][ T7251] tipc: Resetting bearer [ 232.674822][ T7251] tipc: Disabling bearer [ 233.919420][ T10] block nbd8: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 60 seconds [ 233.930237][ T10] block nbd8: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 60 seconds [ 233.941564][ T10] block nbd8: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 60 seconds [ 233.952813][ T10] block nbd8: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 60 seconds [ 234.096587][ T7331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.844672][ T6327] block nbd3: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 90 seconds [ 235.855590][ T6327] block nbd3: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 90 seconds [ 235.875761][ T6327] block nbd3: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 90 seconds [ 235.886845][ T6327] block nbd3: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 90 seconds [ 235.921021][ T7347] tipc: Enabled bearer , priority 0 [ 236.014557][ T7347] tipc: Resetting bearer [ 236.044693][ T7351] tipc: Enabled bearer , priority 0 [ 236.099217][ T7345] tipc: Disabling bearer [ 236.125211][ T7350] syzkaller0: entered promiscuous mode [ 236.131878][ T7324] loop3: detected capacity change from 0 to 40427 [ 236.138409][ T7350] syzkaller0: entered allmulticast mode [ 236.201260][ T7324] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 236.226118][ T7324] F2FS-fs (loop3): Image doesn't support compression [ 236.292436][ T7324] F2FS-fs (loop3): invalid crc value [ 236.312103][ T7350] tipc: Resetting bearer [ 236.360653][ T7324] F2FS-fs (loop3): Found nat_bits in checkpoint [ 236.435027][ T7349] tipc: Resetting bearer [ 236.880294][ T7349] tipc: Disabling bearer [ 237.946426][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 238.132324][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 238.440201][ T24] block nbd0: Possible stuck request ffff888021b68000: control (read@0,1024B). Runtime 120 seconds [ 238.451095][ T24] block nbd0: Possible stuck request ffff888021b68200: control (read@1024,1024B). Runtime 120 seconds [ 238.462261][ T6327] block nbd9: Possible stuck request ffff8880222b0000: control (read@0,4096B). Runtime 60 seconds [ 238.473018][ T24] block nbd0: Possible stuck request ffff888021b68400: control (read@2048,1024B). Runtime 120 seconds [ 238.485199][ T24] block nbd0: Possible stuck request ffff888021b68600: control (read@3072,1024B). Runtime 120 seconds [ 240.250492][ T7405] loop1: detected capacity change from 0 to 128 [ 240.257659][ T7405] EXT4-fs: Ignoring removed nobh option [ 240.314046][ T7405] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.329681][ T7405] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.652470][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.599849][ T24] block nbd10: Possible stuck request ffff888022308000: control (read@0,1024B). Runtime 60 seconds [ 241.610979][ T24] block nbd10: Possible stuck request ffff888022308200: control (read@1024,1024B). Runtime 60 seconds [ 241.622198][ T24] block nbd10: Possible stuck request ffff888022308400: control (read@2048,1024B). Runtime 60 seconds [ 241.633631][ T24] block nbd10: Possible stuck request ffff888022308600: control (read@3072,1024B). Runtime 60 seconds [ 242.127844][ T7420] tipc: Enabling of bearer rejected, failed to enable media [ 242.323903][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 242.499794][ T7439] Bluetooth: MGMT ver 1.22 [ 243.020790][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 244.161594][ T7458] nbd14: detected capacity change from 0 to 127 [ 244.180592][ T7462] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 244.187734][ T7462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 244.237182][ T7462] vhci_hcd vhci_hcd.0: Device attached [ 244.289795][ T5796] block nbd14: Receive control failed (result -32) [ 244.505804][ T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 244.513444][ T54] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 244.515341][ T7472] tipc: Enabled bearer , priority 0 [ 244.534425][ T7472] syzkaller0: entered promiscuous mode [ 244.541030][ T7472] syzkaller0: entered allmulticast mode [ 244.555824][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.555965][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 244.587653][ T7472] tipc: Resetting bearer [ 244.604877][ T7471] tipc: Resetting bearer [ 244.636166][ T7471] tipc: Disabling bearer [ 244.726227][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 244.747122][ T28] usb 4-1: config 0 has no interfaces? [ 244.762762][ T28] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 244.781828][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.807887][ T28] usb 4-1: config 0 descriptor?? [ 244.822877][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 244.833729][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 245.033127][ T7463] usb 39-1: recv xbuf, 0 [ 245.041252][ T28] usb 4-1: USB disconnect, device number 3 [ 245.063128][ T12] vhci_hcd: stop threads [ 245.089488][ T12] vhci_hcd: release socket [ 245.102009][ T12] vhci_hcd: disconnect device [ 245.136050][ T54] vhci_hcd: vhci_device speed not set [ 248.419872][ T7519] nbd15: detected capacity change from 0 to 127 [ 248.443435][ T5796] block nbd15: Receive control failed (result -32) [ 248.993159][ T7537] loop2: detected capacity change from 0 to 512 [ 249.005355][ T7537] EXT4-fs: Ignoring removed i_version option [ 249.013360][ T7537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 249.042820][ T7537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 249.091634][ T7537] EXT4-fs (loop2): 1 truncate cleaned up [ 249.113130][ T7537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.546042][ T24] block nbd4: Possible stuck request ffff888022088000: control (read@0,4096B). Runtime 90 seconds [ 250.558886][ T10] block nbd12: Possible stuck request ffff8880223f0000: control (read@0,4096B). Runtime 30 seconds [ 250.597626][ T7550] ucma_write: process 291 (syz.2.402) changed security contexts after opening file descriptor, this is not allowed. [ 250.764408][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.860425][ T7554] loop1: detected capacity change from 0 to 24 [ 251.365254][ T10] block nbd5: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 90 seconds [ 253.469237][ T7576] tipc: Enabling of bearer rejected, already enabled [ 254.906228][ T7585] ceph: No mds server is up or the cluster is laggy [ 254.937997][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 254.945077][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 255.212169][ T10] block nbd6: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 90 seconds [ 255.215844][ T24] block nbd1: Possible stuck request ffff888021b80000: control (read@0,1024B). Runtime 120 seconds [ 255.236342][ T24] block nbd1: Possible stuck request ffff888021b80200: control (read@1024,1024B). Runtime 120 seconds [ 255.247841][ T24] block nbd1: Possible stuck request ffff888021b80400: control (read@2048,1024B). Runtime 120 seconds [ 255.260081][ T24] block nbd1: Possible stuck request ffff888021b80600: control (read@3072,1024B). Runtime 120 seconds [ 255.460481][ T7590] loop2: detected capacity change from 0 to 32768 [ 255.483663][ T7590] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 255.546315][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 256.261611][ T7609] tipc: Enabling of bearer rejected, already enabled [ 256.320462][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.329175][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.591816][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.607103][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.617561][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.628635][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.637023][ T5787] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 258.644506][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.845949][ T5787] Bluetooth: hci4: command 0x1003 tx timeout [ 258.853517][ T5796] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 259.751029][ T7630] chnl_net:caif_netlink_parms(): no params data found [ 259.959824][ T7640] tipc: Enabling of bearer rejected, already enabled [ 259.984523][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.992166][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.001426][ T7630] bridge_slave_0: entered allmulticast mode [ 260.019477][ T7630] bridge_slave_0: entered promiscuous mode [ 260.029142][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.038084][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.047220][ T7630] bridge_slave_1: entered allmulticast mode [ 260.055074][ T7630] bridge_slave_1: entered promiscuous mode [ 260.141238][ T7630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.164360][ T24] block nbd7: Possible stuck request ffff888022208000: control (read@0,1024B). Runtime 90 seconds [ 260.164486][ T10] block nbd2: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 120 seconds [ 260.175899][ T24] block nbd7: Possible stuck request ffff888022208200: control (read@1024,1024B). Runtime 90 seconds [ 260.175935][ T24] block nbd7: Possible stuck request ffff888022208400: control (read@2048,1024B). Runtime 90 seconds [ 260.175966][ T24] block nbd7: Possible stuck request ffff888022208600: control (read@3072,1024B). Runtime 90 seconds [ 260.189836][ T7630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.200345][ T10] block nbd2: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 120 seconds [ 260.244895][ T10] block nbd2: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 120 seconds [ 260.256050][ T10] block nbd2: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 120 seconds [ 260.322718][ T7630] team0: Port device team_slave_0 added [ 260.356366][ T7630] team0: Port device team_slave_1 added [ 260.422654][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.440032][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.498950][ T7630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.534257][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.545425][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.595801][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 260.614856][ T7630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.713094][ T7630] hsr_slave_0: entered promiscuous mode [ 260.718924][ T5796] Bluetooth: hci5: command tx timeout [ 260.728767][ T7630] hsr_slave_1: entered promiscuous mode [ 260.735327][ T7630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.744354][ T7630] Cannot create hsr debugfs directory [ 260.787777][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.808166][ T23] usb 2-1: config 0 has no interface number 0 [ 260.828059][ T23] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 260.844758][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.858530][ T23] usb 2-1: Product: syz [ 260.896094][ T23] usb 2-1: Manufacturer: syz [ 260.911051][ T23] usb 2-1: SerialNumber: syz [ 260.932022][ T23] usb 2-1: config 0 descriptor?? [ 261.160622][ T23] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 261.218921][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 261.243122][ T7630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.252171][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 261.270000][ T7630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.295776][ T23] usb 2-1: media controller created [ 261.322579][ T7630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.350039][ T7630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.393046][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.769108][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.872204][ T7630] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.915737][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.923021][ T7291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.962438][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.969857][ T7291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.642836][ T23] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 262.826033][ T5787] Bluetooth: hci5: command tx timeout [ 262.929010][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.954417][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.973336][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.108427][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.118191][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.127284][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.332337][ T23] usb 2-1: USB disconnect, device number 7 [ 263.573337][ T7630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.997526][ T10] block nbd8: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 90 seconds [ 264.008427][ T10] block nbd8: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 90 seconds [ 264.009759][ T7667] chnl_net:caif_netlink_parms(): no params data found [ 264.025799][ T10] block nbd8: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 90 seconds [ 264.037613][ T10] block nbd8: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 90 seconds [ 264.353728][ T7699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 264.408012][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.415229][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.428402][ T7667] bridge_slave_0: entered allmulticast mode [ 264.437300][ T7667] bridge_slave_0: entered promiscuous mode [ 264.446682][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.454202][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.462284][ T7667] bridge_slave_1: entered allmulticast mode [ 264.470254][ T7667] bridge_slave_1: entered promiscuous mode [ 264.624303][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.649988][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.789530][ T7667] team0: Port device team_slave_0 added [ 264.831027][ T7667] team0: Port device team_slave_1 added [ 264.840964][ T7630] veth0_vlan: entered promiscuous mode [ 264.875913][ T5787] Bluetooth: hci5: command tx timeout [ 265.197952][ T5787] Bluetooth: hci4: command tx timeout [ 265.646066][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.682526][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.709043][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.722634][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.730062][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.766132][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.828084][ T7630] veth1_vlan: entered promiscuous mode [ 266.010777][ T7667] hsr_slave_0: entered promiscuous mode [ 266.034014][ T7667] hsr_slave_1: entered promiscuous mode [ 266.056859][ T7667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.085813][ T7667] Cannot create hsr debugfs directory [ 266.092718][ T24] block nbd3: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 120 seconds [ 266.103632][ T24] block nbd3: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 120 seconds [ 266.114931][ T24] block nbd3: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 120 seconds [ 266.126011][ T24] block nbd3: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 120 seconds [ 266.804794][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 266.840685][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 266.956469][ T5787] Bluetooth: hci5: command tx timeout [ 267.133833][ T7725] tipc: Enabled bearer , priority 0 [ 267.172406][ T7630] veth0_macvtap: entered promiscuous mode [ 267.224816][ T7630] veth1_macvtap: entered promiscuous mode [ 267.238327][ T7725] tipc: Resetting bearer [ 267.277002][ T5787] Bluetooth: hci4: command tx timeout [ 267.323101][ T7724] tipc: Disabling bearer [ 267.387029][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.416091][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.443985][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.464999][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.484146][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.494771][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.511003][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.529817][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.544696][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.696396][ T5796] Bluetooth: hci6: sending frame failed (-49) [ 267.706139][ T5787] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 267.735181][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.749451][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.760856][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.777753][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.796749][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.827581][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.839232][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.260966][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.702747][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.763910][ T7630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.797689][ T6327] block nbd9: Possible stuck request ffff8880222b0000: control (read@0,4096B). Runtime 90 seconds [ 268.815777][ T24] block nbd0: Possible stuck request ffff888021b68000: control (read@0,1024B). Runtime 150 seconds [ 268.826657][ T24] block nbd0: Possible stuck request ffff888021b68200: control (read@1024,1024B). Runtime 150 seconds [ 268.839080][ T24] block nbd0: Possible stuck request ffff888021b68400: control (read@2048,1024B). Runtime 150 seconds [ 268.850198][ T24] block nbd0: Possible stuck request ffff888021b68600: control (read@3072,1024B). Runtime 150 seconds [ 268.861938][ T7630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.870840][ T7630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.880661][ T7630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.035325][ T7291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.063649][ T7291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.149081][ T7667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.174547][ T7667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.190833][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.191286][ T7667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.222726][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.234475][ T7667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.366830][ T5796] Bluetooth: hci4: command tx timeout [ 269.498129][ T7751] loop2: detected capacity change from 0 to 512 [ 269.546499][ T7751] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 269.554766][ T7751] UDF-fs: Scanning with blocksize 512 failed [ 269.590836][ T7751] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 269.597013][ T7667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.605830][ T7751] UDF-fs: Scanning with blocksize 1024 failed [ 269.654973][ T7739] loop1: detected capacity change from 0 to 32768 [ 269.675142][ T7751] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 269.683018][ T7751] UDF-fs: Scanning with blocksize 2048 failed [ 269.727089][ T7751] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 269.794205][ T7667] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.801832][ T7739] [ 269.801832][ T7739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.801832][ T7739] [ 269.829226][ T7751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.871511][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.878741][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.108988][ T7739] ERROR: (device loop1): diWrite: ixpxd invalid [ 270.108988][ T7739] [ 270.511821][ T7739] ERROR: (device loop1): remounting filesystem as read-only [ 270.567414][ T7739] ERROR: (device loop1): txCommit: [ 270.567414][ T7739] [ 270.618482][ T7667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.633327][ T7739] BUG: Bad page state in process syz.1.460 pfn:504aa SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.663962][ T7739] page:ffffea0001412a80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x504aa [ 270.687670][ T7667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.707391][ T7739] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 270.718548][ T7739] page_type: 0xffffffff() [ 270.721507][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.722983][ T7739] raw: 00fff0000000800c ffffea0001efc808 ffffc90019f97940 0000000000000000 [ 270.730166][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.747291][ T7739] raw: 000000000000002f ffff88805764c6c8 00000000ffffffff 0000000000000000 [ 270.755975][ T7739] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 270.763315][ T7739] page_owner tracks the page as allocated [ 270.769645][ T7739] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7739, tgid 7738 (syz.1.460), ts 270051006092, free_ts 267489745935 [ 270.789889][ T7739] post_alloc_hook+0x1cd/0x210 [ 270.794754][ T7739] get_page_from_freelist+0x195c/0x19f0 [ 270.842110][ T7739] __alloc_pages+0x1e3/0x460 [ 270.885919][ T7739] folio_alloc+0x1e/0x30 [ 270.890286][ T7739] filemap_alloc_folio+0xdf/0x470 [ 270.895384][ T7739] __filemap_get_folio+0x3ee/0xbc0 [ 270.965761][ T7739] pagecache_get_page+0x2a/0x250 [ 270.970836][ T7739] __get_metapage+0x2a8/0xfa0 [ 270.975577][ T7739] diNewExt+0xa81/0x3120 [ 271.017566][ T7739] diAllocAG+0xe7a/0x1de0 [ 271.022018][ T7739] diAlloc+0x1d5/0x1660 [ 271.037350][ T7739] ialloc+0x8c/0x950 [ 271.041349][ T7739] jfs_mkdir+0x191/0xa30 [ 271.066046][ T7739] vfs_mkdir+0x296/0x440 [ 271.070400][ T7739] do_mkdirat+0x1d4/0x440 [ 271.074778][ T7739] __x64_sys_mkdirat+0x89/0xa0 [ 271.115059][ T7739] page last free stack trace: [ 271.143208][ T7739] free_unref_page_prepare+0x7ce/0x8e0 [ 271.149320][ T7739] free_unref_page_list+0xbe/0x860 [ 271.154628][ T7739] release_pages+0x1fa0/0x2220 [ 271.161885][ T7739] tlb_flush_mmu+0x368/0x4f0 [ 271.167275][ T7739] tlb_finish_mmu+0xc3/0x1d0 [ 271.171934][ T7739] exit_mmap+0x3f0/0xb50 [ 271.176321][ T7739] __mmput+0x118/0x3c0 [ 271.180430][ T7739] exit_mm+0x1da/0x2c0 [ 271.184517][ T7739] do_exit+0x88e/0x23c0 [ 271.189555][ T7739] do_group_exit+0x21b/0x2d0 [ 271.194894][ T7739] get_signal+0x12fc/0x1400 [ 271.199753][ T7739] arch_do_signal_or_restart+0x96/0x780 [ 271.205579][ T7739] exit_to_user_mode_loop+0x70/0x110 [ 271.211114][ T7739] exit_to_user_mode_prepare+0xb1/0x140 [ 271.216817][ T7739] syscall_exit_to_user_mode+0x1a/0x50 [ 271.222430][ T7739] do_syscall_64+0x61/0xb0 [ 271.230456][ T7739] Modules linked in: [ 271.234548][ T7739] CPU: 0 PID: 7739 Comm: syz.1.460 Not tainted 6.6.100-syzkaller #0 [ 271.242585][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.252809][ T7739] Call Trace: [ 271.256131][ T7739] [ 271.259114][ T7739] dump_stack_lvl+0x16c/0x230 [ 271.263837][ T7739] ? show_regs_print_info+0x20/0x20 [ 271.269089][ T7739] ? swiotlb_print_info+0x70/0x70 [ 271.274155][ T7739] ? dump_page+0xba7/0x14d0 [ 271.278743][ T7739] bad_page+0x14b/0x170 [ 271.282968][ T7739] free_unref_page_prepare+0x887/0x8e0 [ 271.288581][ T7739] free_unref_page_list+0xbe/0x860 [ 271.293744][ T7739] ? __folio_memcg+0x63/0x160 [ 271.298462][ T7739] ? folio_memcg+0x127/0x480 [ 271.303080][ T7739] release_pages+0x1fa0/0x2220 [ 271.307885][ T7739] ? lru_cache_disable+0x30/0x30 [ 271.313202][ T7739] ? mlock_drain_local+0x79/0x490 [ 271.318272][ T7739] ? mlock_drain_local+0x79/0x490 [ 271.323330][ T7739] ? mlock_drain_local+0x28d/0x490 [ 271.328471][ T7739] __folio_batch_release+0x71/0xe0 [ 271.333661][ T7739] truncate_inode_pages_range+0x358/0xf00 [ 271.339425][ T7739] ? mapping_evict_folio+0x510/0x510 [ 271.344765][ T7739] ? __static_call_return0+0x9/0x10 [ 271.349997][ T7739] ? shrink_dentry_list+0x685/0x6a0 [ 271.355254][ T7739] ? sync_filesystem+0x107/0x220 [ 271.360341][ T7739] jfs_remount+0x33b/0x5b0 [ 271.364797][ T7739] ? jfs_statfs+0x550/0x550 [ 271.369338][ T7739] reconfigure_super+0x21e/0x880 [ 271.374323][ T7739] path_mount+0xd19/0xfe0 [ 271.378725][ T7739] __se_sys_mount+0x2da/0x3c0 [ 271.383431][ T7739] ? __x64_sys_mount+0xc0/0xc0 [ 271.388231][ T7739] ? lockdep_hardirqs_on+0x98/0x150 [ 271.393459][ T7739] ? __x64_sys_mount+0x20/0xc0 [ 271.398249][ T7739] do_syscall_64+0x55/0xb0 [ 271.402705][ T7739] ? clear_bhb_loop+0x40/0x90 [ 271.407412][ T7739] ? clear_bhb_loop+0x40/0x90 [ 271.412118][ T7739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.418089][ T7739] RIP: 0033:0x7fe14d79014a [ 271.422649][ T7739] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.442287][ T7739] RSP: 002b:00007fe14e61fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.450735][ T7739] RAX: ffffffffffffffda RBX: 00007fe14e61fef0 RCX: 00007fe14d79014a [ 271.458761][ T7739] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 271.466851][ T7739] RBP: 0000200000000f40 R08: 00007fe14e61fef0 R09: 0000000001a4a438 [ 271.474849][ T7739] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 271.482930][ T7739] R13: 00007fe14e61feb0 R14: 0000000000000000 R15: 0000200000000f80 [ 271.491156][ T7739] [ 271.586392][ T5796] Bluetooth: hci4: command tx timeout [ 271.665960][ T7739] Disabling lock debugging due to kernel taint [ 271.672209][ T7739] BUG: Bad page state in process syz.1.460 pfn:7bf20 [ 271.709009][ T24] block nbd10: Possible stuck request ffff888022308000: control (read@0,1024B). Runtime 90 seconds [ 271.716315][ T7739] page:ffffea0001efc800 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2e pfn:0x7bf20 [ 271.720099][ T24] block nbd10: Possible stuck request ffff888022308200: control (read@1024,1024B). Runtime 90 seconds [ 271.741631][ T24] block nbd10: Possible stuck request ffff888022308400: control (read@2048,1024B). Runtime 90 seconds [ 271.755687][ T24] block nbd10: Possible stuck request ffff888022308600: control (read@3072,1024B). Runtime 90 seconds [ 271.781169][ T7739] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 271.825910][ T7739] page_type: 0xffffffff() [ 271.830337][ T7739] raw: 00fff0000000800c ffffea0000914ec8 ffffc90019f97940 0000000000000000 [ 271.893453][ T7739] raw: 000000000000002e ffff88805764c5d0 00000000ffffffff 0000000000000000 [ 271.936488][ T7739] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 271.944090][ T7739] page_owner tracks the page as allocated [ 271.985731][ T7739] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7739, tgid 7738 (syz.1.460), ts 270050487816, free_ts 267489763694 [ 272.035697][ T7739] post_alloc_hook+0x1cd/0x210 [ 272.040655][ T7739] get_page_from_freelist+0x195c/0x19f0 [ 272.055767][ T7739] __alloc_pages+0x1e3/0x460 [ 272.060486][ T7739] folio_alloc+0x1e/0x30 [ 272.064787][ T7739] filemap_alloc_folio+0xdf/0x470 [ 272.086076][ T7739] __filemap_get_folio+0x3ee/0xbc0 [ 272.091328][ T7739] pagecache_get_page+0x2a/0x250 [ 272.114961][ T7739] __get_metapage+0x2a8/0xfa0 [ 272.124225][ T7739] diNewExt+0xa81/0x3120 [ 272.128634][ T7739] diAllocAG+0xe7a/0x1de0 [ 272.133033][ T7739] diAlloc+0x1d5/0x1660 [ 272.137562][ T7739] ialloc+0x8c/0x950 [ 272.141506][ T7739] jfs_mkdir+0x191/0xa30 [ 272.145845][ T7739] vfs_mkdir+0x296/0x440 [ 272.150138][ T7739] do_mkdirat+0x1d4/0x440 [ 272.154488][ T7739] __x64_sys_mkdirat+0x89/0xa0 [ 272.159963][ T7739] page last free stack trace: [ 272.164688][ T7739] free_unref_page_prepare+0x7ce/0x8e0 [ 272.170474][ T7739] free_unref_page_list+0xbe/0x860 [ 272.175950][ T7739] release_pages+0x1fa0/0x2220 [ 272.180764][ T7739] tlb_flush_mmu+0x368/0x4f0 [ 272.185374][ T7739] tlb_finish_mmu+0xc3/0x1d0 [ 272.190412][ T7739] exit_mmap+0x3f0/0xb50 [ 272.194706][ T7739] __mmput+0x118/0x3c0 [ 272.198826][ T7739] exit_mm+0x1da/0x2c0 [ 272.202958][ T7739] do_exit+0x88e/0x23c0 [ 272.207256][ T7739] do_group_exit+0x21b/0x2d0 [ 272.211890][ T7739] get_signal+0x12fc/0x1400 [ 272.217545][ T7739] arch_do_signal_or_restart+0x96/0x780 [ 272.223192][ T7739] exit_to_user_mode_loop+0x70/0x110 [ 272.228694][ T7739] exit_to_user_mode_prepare+0xb1/0x140 [ 272.234295][ T7739] syscall_exit_to_user_mode+0x1a/0x50 [ 272.239981][ T7739] do_syscall_64+0x61/0xb0 [ 272.244460][ T7739] Modules linked in: [ 272.248600][ T7739] CPU: 1 PID: 7739 Comm: syz.1.460 Tainted: G B 6.6.100-syzkaller #0 [ 272.258103][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.268178][ T7739] Call Trace: [ 272.271509][ T7739] [ 272.274442][ T7739] dump_stack_lvl+0x16c/0x230 [ 272.279135][ T7739] ? show_regs_print_info+0x20/0x20 [ 272.284351][ T7739] ? swiotlb_print_info+0x70/0x70 [ 272.289384][ T7739] ? dump_page+0xba7/0x14d0 [ 272.293902][ T7739] bad_page+0x14b/0x170 [ 272.298064][ T7739] free_unref_page_prepare+0x887/0x8e0 [ 272.303539][ T7739] free_unref_page_list+0xbe/0x860 [ 272.308679][ T7739] ? __folio_memcg+0x63/0x160 [ 272.313379][ T7739] ? folio_memcg+0x127/0x480 [ 272.317991][ T7739] release_pages+0x1fa0/0x2220 [ 272.322784][ T7739] ? lru_cache_disable+0x30/0x30 [ 272.327742][ T7739] ? mlock_drain_local+0x79/0x490 [ 272.332787][ T7739] ? mlock_drain_local+0x79/0x490 [ 272.337949][ T7739] ? mlock_drain_local+0x28d/0x490 [ 272.343087][ T7739] __folio_batch_release+0x71/0xe0 [ 272.348219][ T7739] truncate_inode_pages_range+0x358/0xf00 [ 272.354008][ T7739] ? mapping_evict_folio+0x510/0x510 [ 272.359334][ T7739] ? __static_call_return0+0x9/0x10 [ 272.364559][ T7739] ? shrink_dentry_list+0x685/0x6a0 [ 272.369789][ T7739] ? sync_filesystem+0x107/0x220 [ 272.374757][ T7739] jfs_remount+0x33b/0x5b0 [ 272.379200][ T7739] ? jfs_statfs+0x550/0x550 [ 272.383735][ T7739] reconfigure_super+0x21e/0x880 [ 272.388703][ T7739] path_mount+0xd19/0xfe0 [ 272.393140][ T7739] __se_sys_mount+0x2da/0x3c0 [ 272.397905][ T7739] ? __x64_sys_mount+0xc0/0xc0 [ 272.402730][ T7739] ? lockdep_hardirqs_on+0x98/0x150 [ 272.407977][ T7739] ? __x64_sys_mount+0x20/0xc0 [ 272.412800][ T7739] do_syscall_64+0x55/0xb0 [ 272.417274][ T7739] ? clear_bhb_loop+0x40/0x90 [ 272.421999][ T7739] ? clear_bhb_loop+0x40/0x90 [ 272.426708][ T7739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.432636][ T7739] RIP: 0033:0x7fe14d79014a [ 272.437092][ T7739] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.456757][ T7739] RSP: 002b:00007fe14e61fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.465200][ T7739] RAX: ffffffffffffffda RBX: 00007fe14e61fef0 RCX: 00007fe14d79014a [ 272.473197][ T7739] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 272.481209][ T7739] RBP: 0000200000000f40 R08: 00007fe14e61fef0 R09: 0000000001a4a438 [ 272.489206][ T7739] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 272.497204][ T7739] R13: 00007fe14e61feb0 R14: 0000000000000000 R15: 0000200000000f80 [ 272.505208][ T7739] [ 272.508375][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.516718][ T7739] BUG: Bad page state in process syz.1.460 pfn:2453b [ 272.524558][ T7739] page:ffffea0000914ec0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x2453b [ 272.534983][ T7739] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 272.544721][ T7739] page_type: 0xffffffff() [ 272.552077][ T7739] raw: 00fff0000000800c ffffea0000af2548 ffffc90019f97940 0000000000000000 [ 272.562905][ T7739] raw: 000000000000002d ffff88805764c4d8 00000000ffffffff 0000000000000000 [ 272.572201][ T7739] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 272.579913][ T7739] page_owner tracks the page as allocated [ 272.593288][ T7739] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7739, tgid 7738 (syz.1.460), ts 270049776343, free_ts 267489780672 [ 272.611958][ T7739] post_alloc_hook+0x1cd/0x210 [ 272.617699][ T7739] get_page_from_freelist+0x195c/0x19f0 [ 272.623350][ T7739] __alloc_pages+0x1e3/0x460 [ 272.630088][ T7739] folio_alloc+0x1e/0x30 [ 272.634409][ T7739] filemap_alloc_folio+0xdf/0x470 [ 272.640761][ T7739] __filemap_get_folio+0x3ee/0xbc0 [ 272.646152][ T7739] pagecache_get_page+0x2a/0x250 [ 272.651160][ T7739] __get_metapage+0x2a8/0xfa0 [ 272.655955][ T7739] diNewExt+0xa81/0x3120 [ 272.660244][ T7739] diAllocAG+0xe7a/0x1de0 [ 272.664586][ T7739] diAlloc+0x1d5/0x1660 [ 272.668831][ T7739] ialloc+0x8c/0x950 [ 272.672756][ T7739] jfs_mkdir+0x191/0xa30 [ 272.677334][ T7739] vfs_mkdir+0x296/0x440 [ 272.681625][ T7739] do_mkdirat+0x1d4/0x440 [ 272.686181][ T7739] __x64_sys_mkdirat+0x89/0xa0 [ 272.691031][ T7739] page last free stack trace: [ 272.695761][ T7739] free_unref_page_prepare+0x7ce/0x8e0 [ 272.701293][ T7739] free_unref_page_list+0xbe/0x860 [ 272.706573][ T7739] release_pages+0x1fa0/0x2220 [ 272.711404][ T7739] tlb_flush_mmu+0x368/0x4f0 [ 272.716510][ T7739] tlb_finish_mmu+0xc3/0x1d0 [ 272.721270][ T7739] exit_mmap+0x3f0/0xb50 [ 272.725523][ T7739] __mmput+0x118/0x3c0 [ 272.730711][ T7739] exit_mm+0x1da/0x2c0 [ 272.734846][ T7739] do_exit+0x88e/0x23c0 [ 272.739237][ T7739] do_group_exit+0x21b/0x2d0 [ 272.743883][ T7739] get_signal+0x12fc/0x1400 [ 272.748480][ T7739] arch_do_signal_or_restart+0x96/0x780 [ 272.754090][ T7739] exit_to_user_mode_loop+0x70/0x110 [ 272.759495][ T7739] exit_to_user_mode_prepare+0xb1/0x140 [ 272.765080][ T7739] syscall_exit_to_user_mode+0x1a/0x50 [ 272.770829][ T7739] do_syscall_64+0x61/0xb0 [ 272.775332][ T7739] Modules linked in: [ 272.779345][ T7739] CPU: 1 PID: 7739 Comm: syz.1.460 Tainted: G B 6.6.100-syzkaller #0 [ 272.788852][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.798946][ T7739] Call Trace: [ 272.802252][ T7739] [ 272.805188][ T7739] dump_stack_lvl+0x16c/0x230 [ 272.809989][ T7739] ? show_regs_print_info+0x20/0x20 [ 272.815196][ T7739] ? swiotlb_print_info+0x70/0x70 [ 272.820331][ T7739] ? dump_page+0xba7/0x14d0 [ 272.824849][ T7739] bad_page+0x14b/0x170 [ 272.829013][ T7739] free_unref_page_prepare+0x887/0x8e0 [ 272.834621][ T7739] free_unref_page_list+0xbe/0x860 [ 272.839817][ T7739] ? __folio_memcg+0x63/0x160 [ 272.844549][ T7739] ? folio_memcg+0x127/0x480 [ 272.849223][ T7739] release_pages+0x1fa0/0x2220 [ 272.854023][ T7739] ? lru_cache_disable+0x30/0x30 [ 272.859098][ T7739] ? mlock_drain_local+0x79/0x490 [ 272.864159][ T7739] ? mlock_drain_local+0x79/0x490 [ 272.869198][ T7739] ? mlock_drain_local+0x28d/0x490 [ 272.874329][ T7739] __folio_batch_release+0x71/0xe0 [ 272.879555][ T7739] truncate_inode_pages_range+0x358/0xf00 [ 272.885304][ T7739] ? mapping_evict_folio+0x510/0x510 [ 272.890618][ T7739] ? __static_call_return0+0x9/0x10 [ 272.895848][ T7739] ? shrink_dentry_list+0x685/0x6a0 [ 272.901074][ T7739] ? sync_filesystem+0x107/0x220 [ 272.906043][ T7739] jfs_remount+0x33b/0x5b0 [ 272.910506][ T7739] ? jfs_statfs+0x550/0x550 [ 272.915144][ T7739] reconfigure_super+0x21e/0x880 [ 272.920115][ T7739] path_mount+0xd19/0xfe0 [ 272.924470][ T7739] __se_sys_mount+0x2da/0x3c0 [ 272.929168][ T7739] ? __x64_sys_mount+0xc0/0xc0 [ 272.934039][ T7739] ? lockdep_hardirqs_on+0x98/0x150 [ 272.939279][ T7739] ? __x64_sys_mount+0x20/0xc0 [ 272.944098][ T7739] do_syscall_64+0x55/0xb0 [ 272.948546][ T7739] ? clear_bhb_loop+0x40/0x90 [ 272.953246][ T7739] ? clear_bhb_loop+0x40/0x90 [ 272.957946][ T7739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.963872][ T7739] RIP: 0033:0x7fe14d79014a [ 272.968327][ T7739] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.987977][ T7739] RSP: 002b:00007fe14e61fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.996428][ T7739] RAX: ffffffffffffffda RBX: 00007fe14e61fef0 RCX: 00007fe14d79014a [ 273.004441][ T7739] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 273.012427][ T7739] RBP: 0000200000000f40 R08: 00007fe14e61fef0 R09: 0000000001a4a438 [ 273.020415][ T7739] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 273.028402][ T7739] R13: 00007fe14e61feb0 R14: 0000000000000000 R15: 0000200000000f80 [ 273.036401][ T7739] [ 273.039516][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.353110][ T7281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.450741][ T7281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.483273][ T7739] [ 273.483273][ T7739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.483273][ T7739] [ 273.497270][ T7739] [ 273.497270][ T7739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.497270][ T7739] [ 273.513536][ T7281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.612629][ T7281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.353106][ T7281] hsr_slave_0: left promiscuous mode [ 274.359459][ T7281] hsr_slave_1: left promiscuous mode [ 274.365416][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.377073][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.384863][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.392453][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.400310][ T7281] bridge_slave_1: left allmulticast mode [ 274.406119][ T7281] bridge_slave_1: left promiscuous mode [ 274.411810][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.420667][ T7281] bridge_slave_0: left allmulticast mode [ 274.426434][ T7281] bridge_slave_0: left promiscuous mode [ 274.432128][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.444177][ T7281] veth1_macvtap: left promiscuous mode [ 274.449855][ T7281] veth0_macvtap: left promiscuous mode [ 274.455441][ T7281] veth1_vlan: left promiscuous mode [ 274.461306][ T7281] veth0_vlan: left promiscuous mode [ 274.705324][ T7281] team0 (unregistering): Port device team_slave_1 removed [ 274.741429][ T7281] team0 (unregistering): Port device team_slave_0 removed [ 274.770885][ T7281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.804705][ T7281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.892013][ T7281] bond0 (unregistering): Released all slaves [ 275.990316][ T144] hsr_slave_0: left promiscuous mode [ 275.996626][ T144] hsr_slave_1: left promiscuous mode [ 276.002523][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.010721][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.018558][ T144] bridge_slave_1: left allmulticast mode [ 276.024238][ T144] bridge_slave_1: left promiscuous mode [ 276.030224][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.040070][ T144] bridge_slave_0: left allmulticast mode [ 276.046119][ T144] bridge_slave_0: left promiscuous mode [ 276.051934][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.248987][ T144] team0 (unregistering): Port device team_slave_1 removed [ 276.283653][ T144] team0 (unregistering): Port device team_slave_0 removed [ 276.315304][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.350656][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.438825][ T144] bond0 (unregistering): Released all slaves [ 279.816931][ T5156] udevd[5156]: worker [6589] /devices/virtual/block/nbd8 is taking a long time [ 279.827094][ T5156] udevd[5156]: worker [6590] /devices/virtual/block/nbd7 is taking a long time [ 279.837976][ T5156] udevd[5156]: worker [6397] /devices/virtual/block/nbd5 is taking a long time [ 279.847164][ T5156] udevd[5156]: worker [6711] /devices/virtual/block/nbd9 is taking a long time [ 279.856211][ T5156] udevd[5156]: worker [6403] /devices/virtual/block/nbd6 is taking a long time [ 279.865208][ T5156] udevd[5156]: worker [5800] /devices/virtual/block/nbd4 is taking a long time [ 279.874257][ T5156] udevd[5156]: worker [5802] /devices/virtual/block/nbd10 is taking a long time