last executing test programs: 27m31.116426348s ago: executing program 2 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004a40), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004a80)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004d00)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004dc0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000004e00)={0x1, &(0x7f0000004e40)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 27m27.182114675s ago: executing program 2 (id=428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x150a6483, 0xe9b, 0x2, 0xd, 0x3800000000000, 0x44233, 0xb, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0x5000, 0x84340}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xb77}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d'], 0x64}, 0x1, 0x0, 0x0, 0x40881}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27m26.694204365s ago: executing program 2 (id=430): syz_mount_image$nilfs2(&(0x7f0000001700), &(0x7f0000001740)='./file0\x00', 0x90, &(0x7f0000001780)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xda6, &(0x7f0000001880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002640)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000026c0)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0x6a}, {&(0x7f0000002740)=[0x1004, 0x8000000000000001], 0x2, 0x8, 0x3ff, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f0000002780)=[0x9], 0x1, 0x8, 0x98e, 0x40}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0xd0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) ioctl$KVM_RUN(r0, 0xae80, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000027c0), &(0x7f0000002800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000002880)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x85}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000002980)="$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") syz_mount_image$vfat(&(0x7f0000003ec0), &(0x7f0000003f00)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000003f40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 27m24.555713341s ago: executing program 2 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x123) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000380)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000003c0)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000440)='./bus\x00') linkat(r2, &(0x7f00000004c0)='./file1\x00', r2, &(0x7f0000000500)='./file0\x00', 0x1000) write(r0, &(0x7f0000000600)='r:s/p ./file0:0', 0xf) 27m24.159017641s ago: executing program 2 (id=440): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x1b, &(0x7f0000003a80)={0x22, 0x9, 0x9}) prlimit64(r0, 0x4, &(0x7f0000000600)={0x1000000000000171, 0x8}, &(0x7f0000003b80)) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1400) clock_gettime(0x0, &(0x7f0000003a00)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/162, 0xa2}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x5, &(0x7f00000038c0)=""/227, 0xe3}, 0x1}], 0x1, 0x2000, &(0x7f0000003a40)={r3, r4+60000000}) unshare(0x2a020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x440, 0x173) syz_mount_image$squashfs(&(0x7f0000003bc0), &(0x7f0000003c00)='./file1\x00', 0x1, &(0x7f0000003c40)=ANY=[], 0x1e, 0x1b3, &(0x7f0000003c80)="$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") 27m23.754220193s ago: executing program 2 (id=442): prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000a80)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xff, 0x2dc, &(0x7f0000000dc0)="$eJzs3U9rY1UUAPDz0jTJKJIKrkTwgS5cDdPZukmRDgx2pXShLnRwOiBNEVootIqxK7duXLp1Iwju/BJu/AaCW8GF4KADV96/JnGSR4JkRP39Fu3Jffe8e959SUsWOXnvhZPj+3k8uPr4xxgMsuiMYhQPs9iJTjQ+LX/+nlIqg9HnAQD8mz1MKX5JlXXysogYbK4sAGCD1v7//+3GSwIANuzNt95+fe/gYP+NPB/EnZPPzg+Ld/bF74gbEbH3ID6IcRzFrRjGo4h0rYrvpJQm3bywEy+fTM4Pi8yTd7+vz7/38yDK/N0Yxk45NJ9/92B/N6/M5E+KOp6q1x8V+bdjGM8tWP/uwf7tBflx2ItXXpqp/2YM44f348MYx/2yiCo/OhGf7Ob5a+mL3z56pyivyM8m54f9ct5U2pp72H1SdwgAAAAAAAAAAAAAAAAAAAAAgP+im3XvnH6U/XuKobr/ztaj4sF25I2d+f48VX7WnGi2P1A/pUmKL5v+PLfyPE/1xGl+N57v6qIDAAAAAAAAAAAAAAAAAAAAhbOLy+N74/HRaRn0i6ATEdcj6wVNN4DmY/2rpl+dXVx26pxiZDQz58VoT+9P12pO0bJWbDVzsojWwoqLWPna/0iVVTeqG7Mjzy6r+etvVr4FXy2/9hvzh7bb9udvBL16mYvL4yr4NY7vZYv3sB/NyKB5knw3O6cXqy667FBa4+l3etZbeGi4eHLLXe49XQaTlrUiayvs1Z+uXwXPjI9Os79eRbHJS868XQfNi+ixOYOoNvz6NrVuy+N/KzLdOgAAAAAAAAAAAAAAAAAAYKOmH/qdG66+rv+qNbWT+putDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACelOn3/68RTOrkFSb34vTsH75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/gf+DAAA///6SlfK") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./myproc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./myproc/interrupts\x00', 0x20400, 0x0) read$FUSE(r0, &(0x7f0000001800)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000a00)=[{&(0x7f0000003880)=""/4107, 0x100b}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000840)=""/69, 0x45}], 0x3, 0x40475, 0x80000003) 27m23.19638191s ago: executing program 32 (id=442): prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000a80)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xff, 0x2dc, &(0x7f0000000dc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./myproc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./myproc/interrupts\x00', 0x20400, 0x0) read$FUSE(r0, &(0x7f0000001800)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000a00)=[{&(0x7f0000003880)=""/4107, 0x100b}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000840)=""/69, 0x45}], 0x3, 0x40475, 0x80000003) 4m40.794251966s ago: executing program 3 (id=2822): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0/file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x9}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) setns(0xc9, 0x0) socketpair(0x1f, 0x3, 0x1, &(0x7f0000000480)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000700)=0x40) 4m38.975634563s ago: executing program 3 (id=2827): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) io_uring_enter(0xffffffffffffffff, 0x48f6, 0x53de, 0xe1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000480)='Z', 0x1}], 0x100000000000010e) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read(r4, &(0x7f0000001640)=""/4110, 0x100e) 4m38.021072881s ago: executing program 3 (id=2828): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001980)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000019c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001a00)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001ac0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001b80), 0x4000087, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20000004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000001d80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001e00)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f0000002540)="$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") r4 = open(&(0x7f0000003100)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x8000) fallocate(r4, 0x0, 0x0, 0x8800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003140)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x101000, 0x164) getdents64(r5, 0x0, 0x0) memfd_create(0x0, 0x2) syz_create_resource$futex(0x0) 4m33.844927098s ago: executing program 3 (id=2830): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c10000043000701fefffffffcdbdf25017c000004004580041001"], 0x101c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 4m33.63465463s ago: executing program 3 (id=2831): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019800)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019840)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000019880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x1, 0xffffffff, 0x0, r6}}], 0x1, 0x0, 0x0) 4m32.804223935s ago: executing program 3 (id=2832): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/comms/1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x6e, 0x0) bind$unix(r1, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f0000000640)={0x0, 0x33, 0x2, @thr={&(0x7f0000000680)="467de29de66f28a89f043bc670a65f", &(0x7f00000006c0)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e07b8db72bcb03c9063d07526c74"}}, &(0x7f0000000700)=0x0) timer_settime(r2, 0x1, &(0x7f0000000740), &(0x7f0000000780)) r3 = openat$tun(0xffffff9c, &(0x7f00000007c0), 0x0, 0x0) write$tun(r3, &(0x7f0000000800)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x200, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x21, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x5]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0xa, 0x4, 0x5, 0x3, 0x8, 0x50bb}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0xff, 0xf, 0x0, 0x5, 0x6, 0x7ff, 0x2, 0x5}, {0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x232) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000a80)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000b00)="020052487f00000100000000000000000000000100"/128, 0x80) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2', 0x5) openat(0xffffffffffffff9c, 0x0, 0x82, 0x0) 4m15.903237837s ago: executing program 33 (id=2832): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/comms/1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x6e, 0x0) bind$unix(r1, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f0000000640)={0x0, 0x33, 0x2, @thr={&(0x7f0000000680)="467de29de66f28a89f043bc670a65f", &(0x7f00000006c0)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e07b8db72bcb03c9063d07526c74"}}, &(0x7f0000000700)=0x0) timer_settime(r2, 0x1, &(0x7f0000000740), &(0x7f0000000780)) r3 = openat$tun(0xffffff9c, &(0x7f00000007c0), 0x0, 0x0) write$tun(r3, &(0x7f0000000800)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x200, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x21, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x5]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0xa, 0x4, 0x5, 0x3, 0x8, 0x50bb}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0xff, 0xf, 0x0, 0x5, 0x6, 0x7ff, 0x2, 0x5}, {0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x232) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000a80)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000b00)="020052487f00000100000000000000000000000100"/128, 0x80) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2', 0x5) openat(0xffffffffffffff9c, 0x0, 0x82, 0x0) 2m52.470006371s ago: executing program 5 (id=3056): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000002c0)={0x7, 0xe, 0xffff, 0xb, 0x2a, "1b040f00403a4e5ef3ffffffff55cf00", 0x70, 0x1}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000380)={0x9, {"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", 0x1000}}, 0x214) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='loginuid\x00') write$6lowpan_enable(r3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket(0x400000000010, 0x3, 0x0) 2m51.134015099s ago: executing program 5 (id=3058): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES32=0x0], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000400)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000900)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000980)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x6) semget(0x1, 0x5, 0x6b4) fsopen(&(0x7f0000000ac0)='virtiofs\x00', 0x1) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xfffffdef}}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) madvise(0xffffffffffffffff, 0x0, 0xb) 2m50.089980356s ago: executing program 5 (id=3062): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x80, '\x00', r1, 0x0}, 0x50) 2m49.911799885s ago: executing program 5 (id=3065): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000980)="$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") fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x183042, 0x15) creat(&(0x7f00000001c0)='./bus\x00', 0x20) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208c54, &(0x7f0000000e00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="06f137d1881ef185c472b9a9a1088b3c1dcad523b1da404b050822fdf2a8b8f200eae500b099b29abe1f8caf9c23bbc48fc387ffb40992655898", @ANYRESOCT], 0x3f, 0x2bd, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r2 = creat(&(0x7f00000015c0)='./bus\x00', 0x119) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101501, 0x0) ioctl$DM_LIST_DEVICES(r3, 0xc138fd02, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {}, "b7fa6296ef7ef64c9f6a846f18c50b9d8879efe015d41ba01b78eb46156ee4b9a91fdc6f056cac16e240789df5b6720db59d34c56707316f0c3ee678137ab20705a3eab159cb82437e262ab24eabe6b536b4ce99896659ee611cbe4c8309569229d5950ee8c7854d1ec5df17f1df1ec552606c24d4b0d0f51b976ba727e7ba7ace08d0175353dbdc8f283d2b"}) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r3, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0xa1001, 0x0, 0x0, @by_dev={r4}, {0x2000, @stats_create={'@stats_create ', '8+16', 0x20, '8', ' 1 precise_timestamps'}}}) write$cgroup_int(r2, &(0x7f0000001600), 0xfffffdd8) pwrite64(r0, 0x0, 0x0, 0xe7c) 2m45.87427762s ago: executing program 5 (id=3075): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000600)) 2m42.698235396s ago: executing program 5 (id=3081): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x9) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) socket(0x15, 0x5, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x7e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m42.136473664s ago: executing program 34 (id=3081): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x9) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) socket(0x15, 0x5, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x7e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m28.994831916s ago: executing program 4 (id=3119): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1, 0x0, 0x0, 0x4008000}, 0x20000880) 2m28.399537097s ago: executing program 4 (id=3120): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x305, &(0x7f0000000000)={[{@rescue={'rescue', 0x3d, 'nologreplay'}}]}, 0x1, 0x55c2, &(0x7f0000005640)="$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") 2m26.52634418s ago: executing program 4 (id=3123): r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SOCKET={0x2d, 0x55, 0x0, 0x1, 0xb, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x1000}}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 2m26.310294002s ago: executing program 4 (id=3125): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000980)="$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") fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x183042, 0x15) creat(&(0x7f00000001c0)='./bus\x00', 0x20) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208c54, &(0x7f0000000e00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="06f137d1881ef185c472b9a9a1088b3c1dcad523b1da404b050822fdf2a8b8f200eae500b099b29abe1f8caf9c23bbc48fc387ffb40992655898", @ANYRESOCT], 0x3f, 0x2bd, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r2 = creat(&(0x7f00000015c0)='./bus\x00', 0x119) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101501, 0x0) ioctl$DM_LIST_DEVICES(r3, 0xc138fd02, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {}, "b7fa6296ef7ef64c9f6a846f18c50b9d8879efe015d41ba01b78eb46156ee4b9a91fdc6f056cac16e240789df5b6720db59d34c56707316f0c3ee678137ab20705a3eab159cb82437e262ab24eabe6b536b4ce99896659ee611cbe4c8309569229d5950ee8c7854d1ec5df17f1df1ec552606c24d4b0d0f51b976ba727e7ba7ace08d0175353dbdc8f283d2b"}) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r3, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0xa1001, 0x0, 0x0, @by_dev={r4}, {0x2000, @stats_create={'@stats_create ', '8+16', 0x20, '8', ' 1 precise_timestamps'}}}) write$cgroup_int(r2, &(0x7f0000001600), 0xfffffdd8) pwrite64(r0, 0x0, 0x0, 0xe7c) 2m25.678251627s ago: executing program 4 (id=3127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8940, 0x0) 2m23.60213197s ago: executing program 4 (id=3129): prlimit64(0x0, 0xe, &(0x7f0000002000)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000002080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002100)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000021c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x6) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000002400), &(0x7f0000002440)='./file0\x00', 0x2000400, &(0x7f0000002480)=ANY=[], 0x6, 0x237, &(0x7f00000024c0)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x6a) 2m20.88599178s ago: executing program 35 (id=3129): prlimit64(0x0, 0xe, &(0x7f0000002000)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000002080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002100)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000021c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x6) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000002400), &(0x7f0000002440)='./file0\x00', 0x2000400, &(0x7f0000002480)=ANY=[], 0x6, 0x237, &(0x7f00000024c0)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x6a) 1m14.415991016s ago: executing program 1 (id=3289): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x80000000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500), 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x14, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)='\x00'/247, &(0x7f00000000c0)='\x00'/50, &(0x7f0000000480)='\x00'/68}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xc6, &(0x7f00000008c0)='\x00'/198}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) 1m14.158220443s ago: executing program 1 (id=3290): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168000000000000000000000000000000000000000000000064", 0x2c) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0xff20, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000440)="a6f5d2d1", 0x4}, {&(0x7f0000001040)="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", 0x25d}], 0x2}, 0x8000) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 1m13.444357596s ago: executing program 1 (id=3291): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 1m13.239105347s ago: executing program 1 (id=3292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x8581) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$9p(r1, &(0x7f0000000200)="ea5bdd6d81780e59c0d687175c769b6529e3534adc4907c047f5fbd2680e897e862a", 0x22) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r2 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x78, 0x25]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000580)={0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001600)={{r2}, 0x0, 0x2, @inherit={0x48, &(0x7f0000000000)={0x0, 0x0, 0x10000005, 0xffff, {0x10, 0xa, 0x0, 0xe}}}, @subvolid=0x1}) socket$netlink(0x10, 0x3, 0x10) 1m12.542854769s ago: executing program 1 (id=3296): r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 1m10.478027531s ago: executing program 1 (id=3299): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000008c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000940)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x60002005}) poll(&(0x7f0000000040)=[{r3, 0x4006}], 0x1, 0xfe89) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x8101, 0x0) unshare(0x22020600) r6 = dup3(0xffffffffffffffff, r5, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 55.170298835s ago: executing program 36 (id=3299): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000008c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000940)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x60002005}) poll(&(0x7f0000000040)=[{r3, 0x4006}], 0x1, 0xfe89) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x8101, 0x0) unshare(0x22020600) r6 = dup3(0xffffffffffffffff, r5, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 26.526282052s ago: executing program 8 (id=3548): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) 26.338442781s ago: executing program 8 (id=3549): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 25.307570857s ago: executing program 8 (id=3550): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) io_uring_enter(0xffffffffffffffff, 0x48f6, 0x53de, 0xe1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000480)='Z', 0x1}], 0x100000000000010e) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read(r4, &(0x7f0000001640)=""/4110, 0x100e) 23.898350131s ago: executing program 8 (id=3552): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x101240, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8220, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x10, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000002c0)=0x3) 23.571348535s ago: executing program 8 (id=3555): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000600)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, 0x0, 0x0, &(0x7f00000006c0), 0x58000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 23.254100818s ago: executing program 8 (id=3559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000007080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000070c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007180)={&(0x7f00000071c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007280)={&(0x7f00000078c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x8, 0xfff8, 0x8, 0xfffffffd}, {0xb5, 0x0, 0x4c, 0x1, 0x5, 0xfffffff3}, 0x80000000, 0xe6, 0x683}}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1af80000, 0x1, 0x4, 0x200, 0x200, 0x6, 0x2, 0x10001, 0x4, 0x3, 0x0, 0x80, 0x401, 0x6, 0xfe, 0xffffff80, 0x40, 0x200, 0x6, 0x1, 0xffffffc1, 0x3ff, 0x40, 0x8, 0x9, 0x5, 0x8, 0x2, 0x3, 0x0, 0x800, 0x4, 0x1, 0x200, 0x4, 0xfffffc01, 0x8, 0x0, 0x0, 0x8001, 0x6809, 0x4, 0x5, 0x80, 0x9, 0x1ff, 0x1000, 0xa681, 0x9, 0x4, 0x1, 0x11a0174c, 0x7, 0x5, 0x3, 0x59085935, 0x1ff, 0x1ff, 0x5e2, 0xf, 0x9, 0x3, 0x3, 0x6, 0x1, 0x2, 0x80, 0x8, 0x5, 0x1000, 0x5, 0x2, 0x2000000, 0x53, 0xfffffe00, 0x9, 0x1, 0x8, 0xffff, 0x4, 0xffff358f, 0x3ff, 0xfffffff9, 0x7, 0x0, 0x4, 0x1, 0x7, 0x100, 0x2c, 0x80, 0x7, 0x4a3, 0x3, 0x1, 0x654, 0x1400000, 0xccb, 0x1, 0xc52cb33, 0x1ff, 0xd87, 0x6, 0x7, 0x6, 0x1ff, 0xffffff0e, 0x49, 0x2, 0xcad, 0x0, 0xa2e, 0xa0, 0x1000, 0xfffe, 0x1, 0x9, 0x0, 0x401, 0x3, 0x6, 0xff, 0x1, 0x1, 0x10, 0x2c17, 0xffffffff, 0x5, 0x0, 0xc, 0xffff, 0x12, 0x1, 0x1, 0x0, 0x1ec4, 0x6, 0x291c9a15, 0x6, 0xf7, 0xa, 0x3, 0x0, 0x5, 0x6, 0xc4, 0x100, 0x9, 0x5, 0xfffff127, 0x6, 0x9, 0x4, 0x5, 0x8, 0x1, 0xfffffffa, 0x5, 0x24, 0xe9, 0x200, 0x800, 0x9, 0x7fffffff, 0xfffffff7, 0x4, 0x5, 0x81, 0xc6e4, 0x2, 0xfffffff8, 0x18b4, 0x0, 0x0, 0x7, 0x8, 0x5, 0x80000000, 0x1, 0x101, 0xd, 0x0, 0x10001, 0xf, 0xcf, 0x8, 0x3ff, 0xff, 0x7, 0x6, 0x31df, 0x0, 0x91fa, 0x2, 0x9, 0x9, 0x9, 0x0, 0x9, 0x800, 0x1, 0x8, 0x9, 0xfffffffd, 0x8, 0x3, 0xf80, 0x2, 0x123, 0x6ca, 0xe, 0x7, 0x7e7, 0x4, 0x6a5, 0x4, 0x10001, 0xcf2, 0xdf, 0xffffffff, 0xfffffffe, 0x7, 0xfffffff4, 0x40, 0xa, 0x7, 0x6, 0x0, 0x80, 0x9cd, 0x6e7, 0xc7, 0x6, 0x6, 0xe, 0x6, 0x5, 0x6, 0xec, 0x8e, 0x7, 0x8, 0x0, 0x10, 0x3, 0x8001, 0x4, 0x3, 0x7, 0x3, 0x7f, 0x9, 0x4, 0x9, 0x7]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x6, 0x7, 0x9, 0xfffffffe, 0x1000004, 0x4, 0xdd, 0x4e66, 0x5, 0x6, 0x80, 0x6, 0x800, 0x27a, 0x7, 0x4, 0x0, 0x1, 0x699, 0x45, 0x6, 0x80, 0x60000, 0x8000, 0x7, 0x7f, 0x1, 0xc71, 0x4c, 0x0, 0x0, 0x3, 0x3, 0x80, 0x18ce6b2a, 0x2, 0x1, 0x3, 0x490, 0x8000c, 0x3, 0x52, 0x8, 0xc, 0x1, 0x3, 0x3ff, 0x800, 0x6, 0xffff, 0xfffff276, 0x6bf1, 0xd7, 0x14, 0x7, 0xe, 0x6, 0xb5, 0x9, 0x10, 0x400, 0x3, 0x5, 0x4, 0x80, 0x0, 0x0, 0x6, 0x9, 0x3, 0x2, 0x10001, 0xadf, 0x5, 0x4, 0x5, 0x4, 0x7, 0x3, 0xc, 0x9, 0x3, 0x1, 0x2, 0x0, 0x8, 0x2, 0x1d0e685c, 0x899, 0x34, 0x4, 0x8, 0x10001, 0x4, 0x8, 0x7ff, 0x0, 0x9, 0x7, 0x9, 0x6, 0x3, 0x4, 0x8, 0x8, 0x7fff, 0x81, 0x6, 0x580000, 0x5, 0x0, 0x9, 0x0, 0x8000, 0x6, 0x2, 0x1, 0xbf, 0xfffffff3, 0x3ff, 0x9, 0xf4, 0x10001, 0x1, 0x3, 0x0, 0x7, 0xb, 0xfffffffd, 0x9d1, 0x5, 0x7, 0x1, 0x401, 0x7, 0x7c, 0x0, 0x8, 0x401, 0x6, 0x4, 0x72, 0x87a, 0x4, 0x7, 0x5, 0x4, 0xf, 0xe, 0x9, 0x6, 0x4, 0x800, 0x28000, 0x5, 0x2, 0x4a, 0x2, 0x2, 0x101, 0xff, 0x7, 0x3, 0xcb8, 0xa0, 0x40, 0x6, 0xfffffffe, 0x3a34, 0x8b, 0x9, 0x6, 0xc6, 0x7, 0x1, 0x7, 0x40, 0x4ecc, 0x9, 0xe7b5, 0x2, 0xfffff5b2, 0x10001, 0x101, 0x2, 0x1, 0x3, 0x6, 0x0, 0xea0a, 0x6, 0x6, 0x1, 0xffffffff, 0xfb, 0x6, 0xffffffff, 0x2, 0x4, 0x0, 0x3612, 0x7, 0x3, 0x1, 0x7f, 0x3, 0x1, 0x1, 0x101, 0x0, 0x5, 0xa, 0x6, 0x7, 0x7, 0x1000, 0x1c65, 0x25, 0x6, 0xe9d9, 0x1, 0x1, 0xffffffff, 0x2, 0x0, 0x8, 0xc806, 0x5, 0x100000, 0x2, 0x6, 0x10001, 0xc3e, 0x5, 0xa1c, 0x2, 0x9, 0x5, 0x400, 0x200, 0xe79, 0x70000000, 0x66, 0x7b1, 0x9, 0x7, 0x0, 0x3, 0xfffffffd, 0x1, 0x5, 0x2, 0xfff, 0x2, 0x1]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000007700)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007740)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f00000077c0)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000007840)=[{&(0x7f0000007880)="80", 0x1}], 0x1}, 0x4) 12.292425295s ago: executing program 0 (id=3588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2], 0x68}}, 0x0) 9.203582713s ago: executing program 7 (id=3596): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xb3b2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000240)=""/102392, 0x18ff8) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000019280)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 8.142322532s ago: executing program 37 (id=3559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000007040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000007080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000070c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007180)={&(0x7f00000071c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007280)={&(0x7f00000078c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x8, 0xfff8, 0x8, 0xfffffffd}, {0xb5, 0x0, 0x4c, 0x1, 0x5, 0xfffffff3}, 0x80000000, 0xe6, 0x683}}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1af80000, 0x1, 0x4, 0x200, 0x200, 0x6, 0x2, 0x10001, 0x4, 0x3, 0x0, 0x80, 0x401, 0x6, 0xfe, 0xffffff80, 0x40, 0x200, 0x6, 0x1, 0xffffffc1, 0x3ff, 0x40, 0x8, 0x9, 0x5, 0x8, 0x2, 0x3, 0x0, 0x800, 0x4, 0x1, 0x200, 0x4, 0xfffffc01, 0x8, 0x0, 0x0, 0x8001, 0x6809, 0x4, 0x5, 0x80, 0x9, 0x1ff, 0x1000, 0xa681, 0x9, 0x4, 0x1, 0x11a0174c, 0x7, 0x5, 0x3, 0x59085935, 0x1ff, 0x1ff, 0x5e2, 0xf, 0x9, 0x3, 0x3, 0x6, 0x1, 0x2, 0x80, 0x8, 0x5, 0x1000, 0x5, 0x2, 0x2000000, 0x53, 0xfffffe00, 0x9, 0x1, 0x8, 0xffff, 0x4, 0xffff358f, 0x3ff, 0xfffffff9, 0x7, 0x0, 0x4, 0x1, 0x7, 0x100, 0x2c, 0x80, 0x7, 0x4a3, 0x3, 0x1, 0x654, 0x1400000, 0xccb, 0x1, 0xc52cb33, 0x1ff, 0xd87, 0x6, 0x7, 0x6, 0x1ff, 0xffffff0e, 0x49, 0x2, 0xcad, 0x0, 0xa2e, 0xa0, 0x1000, 0xfffe, 0x1, 0x9, 0x0, 0x401, 0x3, 0x6, 0xff, 0x1, 0x1, 0x10, 0x2c17, 0xffffffff, 0x5, 0x0, 0xc, 0xffff, 0x12, 0x1, 0x1, 0x0, 0x1ec4, 0x6, 0x291c9a15, 0x6, 0xf7, 0xa, 0x3, 0x0, 0x5, 0x6, 0xc4, 0x100, 0x9, 0x5, 0xfffff127, 0x6, 0x9, 0x4, 0x5, 0x8, 0x1, 0xfffffffa, 0x5, 0x24, 0xe9, 0x200, 0x800, 0x9, 0x7fffffff, 0xfffffff7, 0x4, 0x5, 0x81, 0xc6e4, 0x2, 0xfffffff8, 0x18b4, 0x0, 0x0, 0x7, 0x8, 0x5, 0x80000000, 0x1, 0x101, 0xd, 0x0, 0x10001, 0xf, 0xcf, 0x8, 0x3ff, 0xff, 0x7, 0x6, 0x31df, 0x0, 0x91fa, 0x2, 0x9, 0x9, 0x9, 0x0, 0x9, 0x800, 0x1, 0x8, 0x9, 0xfffffffd, 0x8, 0x3, 0xf80, 0x2, 0x123, 0x6ca, 0xe, 0x7, 0x7e7, 0x4, 0x6a5, 0x4, 0x10001, 0xcf2, 0xdf, 0xffffffff, 0xfffffffe, 0x7, 0xfffffff4, 0x40, 0xa, 0x7, 0x6, 0x0, 0x80, 0x9cd, 0x6e7, 0xc7, 0x6, 0x6, 0xe, 0x6, 0x5, 0x6, 0xec, 0x8e, 0x7, 0x8, 0x0, 0x10, 0x3, 0x8001, 0x4, 0x3, 0x7, 0x3, 0x7f, 0x9, 0x4, 0x9, 0x7]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x6, 0x7, 0x9, 0xfffffffe, 0x1000004, 0x4, 0xdd, 0x4e66, 0x5, 0x6, 0x80, 0x6, 0x800, 0x27a, 0x7, 0x4, 0x0, 0x1, 0x699, 0x45, 0x6, 0x80, 0x60000, 0x8000, 0x7, 0x7f, 0x1, 0xc71, 0x4c, 0x0, 0x0, 0x3, 0x3, 0x80, 0x18ce6b2a, 0x2, 0x1, 0x3, 0x490, 0x8000c, 0x3, 0x52, 0x8, 0xc, 0x1, 0x3, 0x3ff, 0x800, 0x6, 0xffff, 0xfffff276, 0x6bf1, 0xd7, 0x14, 0x7, 0xe, 0x6, 0xb5, 0x9, 0x10, 0x400, 0x3, 0x5, 0x4, 0x80, 0x0, 0x0, 0x6, 0x9, 0x3, 0x2, 0x10001, 0xadf, 0x5, 0x4, 0x5, 0x4, 0x7, 0x3, 0xc, 0x9, 0x3, 0x1, 0x2, 0x0, 0x8, 0x2, 0x1d0e685c, 0x899, 0x34, 0x4, 0x8, 0x10001, 0x4, 0x8, 0x7ff, 0x0, 0x9, 0x7, 0x9, 0x6, 0x3, 0x4, 0x8, 0x8, 0x7fff, 0x81, 0x6, 0x580000, 0x5, 0x0, 0x9, 0x0, 0x8000, 0x6, 0x2, 0x1, 0xbf, 0xfffffff3, 0x3ff, 0x9, 0xf4, 0x10001, 0x1, 0x3, 0x0, 0x7, 0xb, 0xfffffffd, 0x9d1, 0x5, 0x7, 0x1, 0x401, 0x7, 0x7c, 0x0, 0x8, 0x401, 0x6, 0x4, 0x72, 0x87a, 0x4, 0x7, 0x5, 0x4, 0xf, 0xe, 0x9, 0x6, 0x4, 0x800, 0x28000, 0x5, 0x2, 0x4a, 0x2, 0x2, 0x101, 0xff, 0x7, 0x3, 0xcb8, 0xa0, 0x40, 0x6, 0xfffffffe, 0x3a34, 0x8b, 0x9, 0x6, 0xc6, 0x7, 0x1, 0x7, 0x40, 0x4ecc, 0x9, 0xe7b5, 0x2, 0xfffff5b2, 0x10001, 0x101, 0x2, 0x1, 0x3, 0x6, 0x0, 0xea0a, 0x6, 0x6, 0x1, 0xffffffff, 0xfb, 0x6, 0xffffffff, 0x2, 0x4, 0x0, 0x3612, 0x7, 0x3, 0x1, 0x7f, 0x3, 0x1, 0x1, 0x101, 0x0, 0x5, 0xa, 0x6, 0x7, 0x7, 0x1000, 0x1c65, 0x25, 0x6, 0xe9d9, 0x1, 0x1, 0xffffffff, 0x2, 0x0, 0x8, 0xc806, 0x5, 0x100000, 0x2, 0x6, 0x10001, 0xc3e, 0x5, 0xa1c, 0x2, 0x9, 0x5, 0x400, 0x200, 0xe79, 0x70000000, 0x66, 0x7b1, 0x9, 0x7, 0x0, 0x3, 0xfffffffd, 0x1, 0x5, 0x2, 0xfff, 0x2, 0x1]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000007700)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007740)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000007780)={&(0x7f00000077c0)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000007840)=[{&(0x7f0000007880)="80", 0x1}], 0x1}, 0x4) 8.088019198s ago: executing program 7 (id=3598): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) 6.348991777s ago: executing program 7 (id=3599): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) io_uring_enter(0xffffffffffffffff, 0x48f6, 0x53de, 0xe1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000480)='Z', 0x1}], 0x100000000000010e) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read(r4, &(0x7f0000001640)=""/4110, 0x100e) 5.204637604s ago: executing program 0 (id=3600): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'ovf\x00', 0x1, 0x400000, 0x5e}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.933882233s ago: executing program 0 (id=3602): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x80000000) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500), 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)='\x00'/247, &(0x7f00000000c0)='\x00'/50, &(0x7f0000000480)='\x00'/68}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xc6, &(0x7f00000008c0)='\x00'/198}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) 4.699040956s ago: executing program 7 (id=3603): r0 = syz_open_dev$sndctrl(0x0, 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000380)) syz_open_dev$dmmidi(&(0x7f00000003c0), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000006ac0), 0x2, 0x20c02) 4.592421297s ago: executing program 0 (id=3605): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xb3b2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000240)=""/102392, 0x18ff8) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000019280)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 4.442900133s ago: executing program 7 (id=3606): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) 3.30255456s ago: executing program 6 (id=3607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2], 0x68}}, 0x0) 2.456249477s ago: executing program 7 (id=3608): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) write(r0, &(0x7f0000000380)='27', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.249712758s ago: executing program 0 (id=3609): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r3, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000"], 0x18, 0x20000000}}], 0x1, 0x4018080) 2.047434639s ago: executing program 6 (id=3610): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380), 0x4) io_uring_enter(0xffffffffffffffff, 0x48f6, 0x53de, 0xe1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)='Z', 0x1}], 0x100000000000010e) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read(r3, &(0x7f0000001640)=""/4110, 0x100e) 1.058172991s ago: executing program 6 (id=3611): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000600)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, 0x0, 0x0, &(0x7f00000006c0), 0x58000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 627.073885ms ago: executing program 6 (id=3612): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x80000000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500), 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)='\x00'/247, &(0x7f00000000c0)='\x00'/50, &(0x7f0000000480)='\x00'/68}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xc6, &(0x7f00000008c0)='\x00'/198}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) 222.270797ms ago: executing program 6 (id=3613): r0 = syz_open_dev$sndctrl(0x0, 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000380)) syz_open_dev$dmmidi(&(0x7f00000003c0), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000006ac0), 0x2, 0x20c02) 206.789538ms ago: executing program 0 (id=3614): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f00000003c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTVtFTxUPIhgoaBn27DZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7aXabbM3uhubzgck+z8xsnue7z8wzz+wMOwHsWWPpn0zEoYj4MIkYqc1PImKgkuqPOFld787aai6dklhff+P3pLLO7bXVXDS8J3WglnkyIn54L+JwZnO5peWVuelCIb9Yy0+U5y9MlJZXjpyfn57Nz+YXjk9OTR09cezE8Z2L9c+fVw7e+OjVZ78++fe7T1z74MckTsbB2rLGOHbKWIzVPpOB9CPc4JWdLqzHko3Zfb2qB+1Jd82+6l4eh2Ik+iqpFoa6WTMAoFPWAYC9651eVwAA6Jb69wC311Zz9am330h0182XI2J/Nf769c3qkv7aNbv9leugw7eTDVdGkogY3YHyxyLi82/f+jKdotYOyQ78X4CtXL4SEWdHxzb3/8mmexba9dyDFq4PVl7G7pu9144/0EvfpeOfF5qN/zJ3xz/RZPwz2GTffRhb7/+Z67VE3w4Ut0k6/nup4d62Ow3x14z21XL/q4z5BpJz5wv5tG/7f0SMx8Bgmp+srNp85DZ+659brcpvHP/98fHbX6Tlp6/31shc7x/c+J6Z6fL0f4277uaViKf6m8Wf3G3/pMX49/Q2y3jtxfc/a7UsjT+Ntz5tjr+z1q9GPNO0/e+1ZdLy/sT+YyeOT1Q2h4n6RtHEN798Otyq/Mb2T6e0/Pq5QDek7T/84PhHk8b7NUvtl/HT1ZHvWy3bOv7m2/++5M1Kun6j4aXpcnlxMmJf8vrm+Ufvvbeer6+fxj/+dPP9v1ps8+0/PSc8u834+2/89tXDx99ZafwzbbV/+4lrd+Za9t3ba/+pSmq8Nmc7/d8W9bocD701AwAAAAAAAAAAAAAAAAAAAAAAAED7MhFxMJJM9m46k8lmq8/wfjyGM4ViqXz4XHFpYSYqz8oejYFM/acuRxp+D3Wy9nv49fzR+/LPR8RjEfHJ4FAln80VCzO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAag60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3tHf8H+pYPQCA7nH+DwB7z7aP/2c7Ww8AoHvaPf/v61A9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGSdPnUqndb/WlvNpfmZi8tLc8WLR2bypbns/FIumysuXsjOFouzhXw2V5xv+Y8uV18KxeKFqVhYujRRzpfKE6XllTPzxaWF8pnz89Oz+TP5ga5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbV1pemZsuFPKLEg9MDO2OauyaRH/simo8Com+2BXVuD/R2EsM9a6DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/g0AAP//3BEuHw==") pwrite64(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x2cf5) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000c00), 0x103902, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0xc4042, 0x1ff) sendfile(r6, r5, 0x0, 0xfffa83) r7 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 0s ago: executing program 6 (id=3615): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = timerfd_create(0x1, 0x0) read(r0, &(0x7f0000000740)=""/262, 0x106) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) timerfd_settime(r0, 0x3, &(0x7f0000000880)={{}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): code 0x0406 failed: -4 [ 1593.295958][ T5801] Bluetooth: hci1: command tx timeout [ 1593.301541][T15354] Bluetooth: hci4: command 0x0c1a tx timeout [ 1593.310200][T16384] hsr_slave_1: entered promiscuous mode [ 1595.468349][T16470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1595.508833][T16470] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1595.525207][T16384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1595.544579][T16470] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1595.578450][T16384] Cannot create hsr debugfs directory [ 1595.651640][T16470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1595.687444][T15354] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1595.756110][T16470] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1595.801996][T16470] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1596.521406][T16470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1596.558494][T16470] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1596.591247][T16470] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1596.853027][T16496] FAULT_INJECTION: forcing a failure. [ 1596.853027][T16496] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.886857][T16496] CPU: 0 PID: 16496 Comm: syz.0.2833 Not tainted syzkaller #0 [ 1596.894360][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1596.904605][T16496] Call Trace: [ 1596.907883][T16496] [ 1596.910814][T16496] dump_stack_lvl+0x18c/0x250 [ 1596.915609][T16496] ? show_regs_print_info+0x20/0x20 [ 1596.920887][T16496] ? load_image+0x420/0x420 [ 1596.925480][T16496] ? __might_sleep+0xe0/0xe0 [ 1596.930087][T16496] ? __lock_acquire+0x7eb0/0x7eb0 [ 1596.935190][T16496] should_fail_ex+0x394/0x4c0 [ 1596.939948][T16496] should_failslab+0x9/0x20 [ 1596.944626][T16496] slab_pre_alloc_hook+0x59/0x300 [ 1596.949736][T16496] ? __kernfs_new_node+0xaa/0x7f0 [ 1596.954893][T16496] ? __kernfs_new_node+0xaa/0x7f0 [ 1596.959932][T16496] __kmem_cache_alloc_node+0x53/0x260 [ 1596.965325][T16496] ? __kernfs_new_node+0xaa/0x7f0 [ 1596.970364][T16496] __kmalloc_node_track_caller+0xa4/0x230 [ 1596.976104][T16496] kstrdup+0x3b/0x80 [ 1596.980021][T16496] __kernfs_new_node+0xaa/0x7f0 [ 1596.984880][T16496] ? kernfs_new_node+0x260/0x260 [ 1596.989994][T16496] ? make_kgid+0x1c8/0x650 [ 1596.994405][T16496] ? from_kuid_munged+0x6e0/0x6e0 [ 1596.999449][T16496] kernfs_new_node+0x14c/0x260 [ 1597.004240][T16496] kernfs_create_dir_ns+0x44/0x120 [ 1597.009467][T16496] sysfs_create_dir_ns+0x130/0x2a0 [ 1597.014697][T16496] ? __lock_acquire+0x7eb0/0x7eb0 [ 1597.019886][T16496] ? sysfs_warn_dup+0xa0/0xa0 [ 1597.024742][T16496] ? trace_contention_end+0x39/0xe0 [ 1597.029954][T16496] ? do_raw_spin_unlock+0x121/0x230 [ 1597.035152][T16496] kobject_add_internal+0x617/0xc90 [ 1597.040759][T16496] kobject_add+0x164/0x240 [ 1597.045253][T16496] ? __rwlock_init+0x150/0x150 [ 1597.050063][T16496] ? kobject_init+0x1d0/0x1d0 [ 1597.054727][T16496] ? kobject_put+0x41a/0x450 [ 1597.059305][T16496] ? get_device_parent+0x366/0x390 [ 1597.064446][T16496] device_add+0x3fa/0xc40 [ 1597.068882][T16496] netdev_register_kobject+0x188/0x320 [ 1597.074411][T16496] register_netdevice+0x12aa/0x1ba0 [ 1597.079697][T16496] ? netif_stacked_transfer_operstate+0x210/0x210 [ 1597.086127][T16496] ? __lock_acquire+0x7eb0/0x7eb0 [ 1597.091168][T16496] ? kvmalloc_node+0x70/0x180 [ 1597.095860][T16496] ? rcu_is_watching+0x15/0xb0 [ 1597.100653][T16496] ? net_generic+0x1e/0x240 [ 1597.105316][T16496] ip6_tnl_create2+0x80/0x140 [ 1597.110027][T16496] ip6_tnl_locate+0x735/0x830 [ 1597.114720][T16496] ? ip6_tnl_parm_from_user+0x340/0x340 [ 1597.120277][T16496] ? __might_fault+0xaa/0x120 [ 1597.125133][T16496] ? __might_fault+0xc6/0x120 [ 1597.129813][T16496] ? __might_fault+0xaa/0x120 [ 1597.134496][T16496] ? ip6_tnl_siocdevprivate+0x5ed/0xab0 [ 1597.140037][T16496] ip6_tnl_siocdevprivate+0x61b/0xab0 [ 1597.145528][T16496] ? ip6_tnl_start_xmit+0x1230/0x1230 [ 1597.150896][T16496] ? dev_ioctl+0x83c/0x1140 [ 1597.155475][T16496] ? dev_ifsioc+0x957/0xc40 [ 1597.159977][T16496] dev_ioctl+0x84c/0x1140 [ 1597.164527][T16496] sock_ioctl+0x74c/0x7e0 [ 1597.168949][T16496] ? sock_poll+0x460/0x460 [ 1597.173386][T16496] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1597.178338][T16496] ? security_file_ioctl+0x80/0xa0 [ 1597.183657][T16496] ? sock_poll+0x460/0x460 [ 1597.188087][T16496] __se_sys_ioctl+0xfd/0x170 [ 1597.192786][T16496] do_syscall_64+0x55/0xb0 [ 1597.197196][T16496] ? clear_bhb_loop+0x40/0x90 [ 1597.201937][T16496] ? clear_bhb_loop+0x40/0x90 [ 1597.206757][T16496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.212688][T16496] RIP: 0033:0x7fa70e9a8f19 [ 1597.217151][T16496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.236859][T16496] RSP: 002b:00007fa70f7a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1597.245350][T16496] RAX: ffffffffffffffda RBX: 00007fa70ec25fa0 RCX: 00007fa70e9a8f19 [ 1597.253323][T16496] RDX: 00002000000001c0 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1597.261312][T16496] RBP: 00007fa70ea37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1597.269391][T16496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.277365][T16496] R13: 00007fa70ec26038 R14: 00007fa70ec25fa0 R15: 00007ffdd07849f8 [ 1597.285353][T16496] [ 1597.489194][T15354] Bluetooth: hci4: command 0x0c1a tx timeout [ 1597.676138][T15354] Bluetooth: hci2: command 0x0c1a tx timeout [ 1598.539038][T15354] Bluetooth: hci1: command 0x0c1a tx timeout [ 1598.558364][T16496] kobject: kobject_add_internal failed for syztnl1 (error: -12 parent: net) [ 1599.498691][T15354] Bluetooth: hci4: command 0x0c1a tx timeout [ 1599.547176][T16525] loop1: detected capacity change from 0 to 16 [ 1599.589872][T16525] erofs: (device loop1): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block) [ 1599.748662][T15354] Bluetooth: hci2: command 0x0c1a tx timeout [ 1599.754973][T15354] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1599.765288][T15354] Bluetooth: hci3: Injecting HCI hardware error event [ 1599.775842][ T5801] Bluetooth: hci3: hardware error 0x00 [ 1600.729543][T15354] Bluetooth: hci1: command 0x0c1a tx timeout [ 1602.484526][T15354] Bluetooth: hci2: command 0x0c1a tx timeout [ 1602.490711][ T5801] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1602.781606][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 1602.966340][ T1098] hsr_slave_0: left promiscuous mode [ 1602.998626][ T1098] hsr_slave_1: left promiscuous mode [ 1603.028571][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1603.036200][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1603.077063][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1603.104319][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1603.120073][ T1098] bridge_slave_1: left allmulticast mode [ 1603.130196][ T1098] bridge_slave_1: left promiscuous mode [ 1603.146145][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.168122][ T1098] bridge_slave_0: left allmulticast mode [ 1603.188802][ T1098] bridge_slave_0: left promiscuous mode [ 1603.206501][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.327651][ T1098] veth1_macvtap: left promiscuous mode [ 1603.357595][ T1098] veth0_macvtap: left promiscuous mode [ 1603.382459][ T1098] veth1_vlan: left promiscuous mode [ 1603.387757][ T1098] veth0_vlan: left promiscuous mode [ 1605.025378][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 1605.087658][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 1605.155237][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.222533][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.834342][ T1098] bond0 (unregistering): Released all slaves [ 1605.914452][T16575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2848'. [ 1605.958292][T16384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1606.013160][T16384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1606.021466][T16574] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1606.104264][T16384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1606.170329][T16384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1606.452744][T16384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.555212][T16384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.628049][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.635227][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.744913][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.752089][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.464282][T16384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.676186][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.684785][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.231597][T16384] veth0_vlan: entered promiscuous mode [ 1609.027638][T16384] veth1_vlan: entered promiscuous mode [ 1610.101477][T16384] veth0_macvtap: entered promiscuous mode [ 1610.135880][T16384] veth1_macvtap: entered promiscuous mode [ 1610.204142][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.250520][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.290924][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.327907][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.363238][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.402621][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.537533][T16384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.593405][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.644404][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.991182][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.061684][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.101384][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.170721][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.219627][T16384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.357873][T16384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.423640][T16384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.488407][T16384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.497235][T16384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.692993][T16653] FAULT_INJECTION: forcing a failure. [ 1614.692993][T16653] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.821336][T16653] CPU: 0 PID: 16653 Comm: syz.1.2859 Not tainted syzkaller #0 [ 1614.828832][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1614.838894][T16653] Call Trace: [ 1614.842187][T16653] [ 1614.845115][T16653] dump_stack_lvl+0x18c/0x250 [ 1614.849792][T16653] ? show_regs_print_info+0x20/0x20 [ 1614.854984][T16653] ? load_image+0x420/0x420 [ 1614.859573][T16653] ? __might_sleep+0xe0/0xe0 [ 1614.864345][T16653] ? __lock_acquire+0x7eb0/0x7eb0 [ 1614.869359][T16653] should_fail_ex+0x394/0x4c0 [ 1614.874030][T16653] should_failslab+0x9/0x20 [ 1614.878520][T16653] slab_pre_alloc_hook+0x59/0x300 [ 1614.883530][T16653] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1614.889518][T16653] ? debugfs_file_get+0x118/0x460 [ 1614.894583][T16653] __kmem_cache_alloc_node+0x53/0x260 [ 1614.899950][T16653] ? __asan_memset+0x22/0x40 [ 1614.904538][T16653] ? debugfs_file_get+0x118/0x460 [ 1614.909568][T16653] kmalloc_trace+0x2a/0xe0 [ 1614.914065][T16653] debugfs_file_get+0x118/0x460 [ 1614.918935][T16653] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1614.925181][T16653] ? debugfs_real_fops+0xa0/0xa0 [ 1614.930113][T16653] ? open_proxy_open+0x23/0x4d0 [ 1614.934998][T16653] open_proxy_open+0x4d/0x4d0 [ 1614.939789][T16653] do_dentry_open+0x880/0x14b0 [ 1614.944557][T16653] ? debugfs_file_put+0xb0/0xb0 [ 1614.949422][T16653] path_openat+0x284f/0x3270 [ 1614.954012][T16653] ? do_sys_openat2+0xda/0x1d0 [ 1614.958765][T16653] ? __x64_sys_openat+0x139/0x160 [ 1614.963780][T16653] ? verify_lock_unused+0x140/0x140 [ 1614.968985][T16653] ? do_filp_open+0x430/0x430 [ 1614.973660][T16653] do_filp_open+0x1f2/0x430 [ 1614.978191][T16653] ? vfs_tmpfile+0x620/0x620 [ 1614.982836][T16653] ? _raw_spin_unlock+0x28/0x40 [ 1614.988100][T16653] ? alloc_fd+0x590/0x640 [ 1614.992462][T16653] do_sys_openat2+0x134/0x1d0 [ 1614.997175][T16653] ? do_sys_open+0xe0/0xe0 [ 1615.001618][T16653] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1615.007605][T16653] ? lock_chain_count+0x20/0x20 [ 1615.012630][T16653] __x64_sys_openat+0x139/0x160 [ 1615.017711][T16653] do_syscall_64+0x55/0xb0 [ 1615.022331][T16653] ? clear_bhb_loop+0x40/0x90 [ 1615.027114][T16653] ? clear_bhb_loop+0x40/0x90 [ 1615.031870][T16653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1615.037794][T16653] RIP: 0033:0x7fbdcd3a8f19 [ 1615.042211][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1615.062023][T16653] RSP: 002b:00007fbdce208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1615.070441][T16653] RAX: ffffffffffffffda RBX: 00007fbdcd625fa0 RCX: 00007fbdcd3a8f19 [ 1615.078403][T16653] RDX: 0000000000000002 RSI: 00002000000046c0 RDI: ffffffffffffff9c [ 1615.086400][T16653] RBP: 00007fbdcd437f6d R08: 0000000000000000 R09: 0000000000000000 [ 1615.094471][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1615.102445][T16653] R13: 00007fbdcd626038 R14: 00007fbdcd625fa0 R15: 00007ffea3071868 [ 1615.110424][T16653] [ 1615.205212][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.220019][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.227880][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.241776][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.361524][T15354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1615.464803][T15354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1615.533375][T15354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1615.732676][T15354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1615.782999][T15354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1615.826905][T15354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1616.052244][T16679] team0 (unregistering): Port device team_slave_0 removed [ 1616.106087][T16679] team0 (unregistering): Port device team_slave_1 removed [ 1616.207693][T16657] rxe_eth0 speed is unknown, defaulting to 1000 [ 1617.087355][T16700] loop4: detected capacity change from 0 to 128 [ 1617.127343][T16657] chnl_net:caif_netlink_parms(): no params data found [ 1617.172701][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1617.172712][ T28] audit: type=1326 audit(1794422482.791:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2872" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70e9a8f19 code=0x7ffc0000 [ 1617.288580][T16700] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1617.331005][T16700] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1617.352764][ T28] audit: type=1326 audit(1794422482.791:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2872" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70e9a8f19 code=0x7ffc0000 [ 1617.394285][T16700] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.2871: No space for directory leaf checksum. Please run e2fsck -D. [ 1617.415829][T16712] syz_tun: entered allmulticast mode [ 1617.433160][T16657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.447008][T16657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.466268][ T28] audit: type=1326 audit(1794422482.841:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2872" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fa70e9a8f19 code=0x7ffc0000 [ 1617.490783][T16700] EXT4-fs error (device loop4): __ext4_find_entry:1698: inode #2: comm syz.4.2871: checksumming directory block 0 [ 1617.512061][T16657] bridge_slave_0: entered allmulticast mode [ 1617.531877][T16657] bridge_slave_0: entered promiscuous mode [ 1617.562038][T16712] dvmrp6: entered allmulticast mode [ 1617.584371][T16657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.598013][ T28] audit: type=1326 audit(1794422482.841:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2872" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70e9a8f19 code=0x7ffc0000 [ 1617.753655][T16657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.769100][T16657] bridge_slave_1: entered allmulticast mode [ 1617.776108][T16657] bridge_slave_1: entered promiscuous mode [ 1617.785780][T16384] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1618.026204][T15354] Bluetooth: hci0: command tx timeout [ 1618.106040][T16708] syz_tun: left allmulticast mode [ 1618.156962][T16657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.202276][T16657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.329888][T16657] team0: Port device team_slave_0 added [ 1618.376270][T16657] team0: Port device team_slave_1 added [ 1619.633120][T16657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.633132][T16657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.633155][T16657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.639174][T16657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.639186][T16657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.639200][T16657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.676237][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.908393][T16657] hsr_slave_0: entered promiscuous mode [ 1620.294249][T16737] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1621.251234][T15354] Bluetooth: hci0: command tx timeout [ 1621.534366][T16657] hsr_slave_1: entered promiscuous mode [ 1621.582442][T16739] Bluetooth: MGMT ver 1.22 [ 1621.614072][T16657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1621.650565][T16657] Cannot create hsr debugfs directory [ 1621.676680][T16742] loop4: detected capacity change from 0 to 2048 [ 1622.631092][T16751] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1623.364452][T16753] program syz.0.2888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1623.386794][T15354] Bluetooth: hci0: command tx timeout [ 1623.661135][ T8] IPVS: starting estimator thread 0... [ 1623.680841][T16760] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1623.827784][T16759] IPVS: using max 35 ests per chain, 84000 per kthread [ 1624.695805][T16657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1624.840492][T16657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1624.910748][T16657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1624.998187][T16657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1625.379515][T16657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.407330][T15354] Bluetooth: hci0: command tx timeout [ 1625.468077][T16657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.538277][T16766] loop4: detected capacity change from 0 to 32768 [ 1625.550784][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.557954][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.663784][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.670990][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.701665][T16766] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1625.851750][T16766] XFS (loop4): Ending clean mount [ 1625.877627][T16657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1625.911581][T16766] XFS (loop4): Quotacheck needed: Please wait. [ 1627.168474][T16784] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 1627.223382][T16766] XFS (loop4): Quotacheck: Done. [ 1627.442584][T16778] syzkaller0: entered promiscuous mode [ 1627.478052][T16778] syzkaller0: entered allmulticast mode [ 1627.752337][T16384] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1627.990650][T16797] random: crng reseeded on system resumption [ 1628.125951][T16798] jffs2: notice: (16798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1629.631706][ T28] audit: type=1800 audit(1794425076.287:292): pid=16808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2898" name="UDC" dev="configfs" ino=44380 res=0 errno=0 [ 1629.931493][T16810] loop5: detected capacity change from 0 to 4095 [ 1629.980017][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 1630.013136][ C0] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 1630.023217][ C0] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 64 prio class 2 [ 1630.033845][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1630.043267][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1630.065681][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1630.076927][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1630.086360][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 1630.315881][T16813] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1630.322812][T16813] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1630.385782][T16813] vhci_hcd vhci_hcd.0: Device attached [ 1630.502546][T16815] vhci_hcd: connection closed [ 1630.507818][ T7052] vhci_hcd: stop threads [ 1630.544241][ T7052] vhci_hcd: release socket [ 1630.586848][ T7052] vhci_hcd: disconnect device [ 1630.624952][T14343] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1630.635690][T14343] usb 41-1: enqueue for inactive port 0 [ 1630.829101][T14343] vhci_hcd: vhci_device speed not set [ 1631.364509][T16822] loop4: detected capacity change from 0 to 32768 [ 1631.384924][T16822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2903 (16822) [ 1631.402890][T16822] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1631.414085][T16822] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1631.422936][T16822] BTRFS info (device loop4): force clearing of disk cache [ 1631.430331][T16822] BTRFS info (device loop4): enabling auto defrag [ 1631.436933][T16822] BTRFS info (device loop4): max_inline at 0 [ 1631.443177][T16822] BTRFS info (device loop4): enabling disk space caching [ 1631.450494][T16822] BTRFS info (device loop4): disk space caching is enabled [ 1631.585215][T16822] BTRFS info (device loop4): enabling ssd optimizations [ 1631.598303][T16822] BTRFS info (device loop4): rebuilding free space tree [ 1631.651843][T16822] BTRFS info (device loop4): disabling free space tree [ 1631.660086][T16822] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1631.670199][T16822] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1633.223444][T14820] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1633.424670][T16384] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1636.212346][T16856] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 1636.221108][T16856] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 1636.230189][T16856] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 1636.240307][T16856] Error parsing options; rc = [-22] [ 1636.710443][T16867] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1636.819681][ T7052] rtrs_client L1788: : Resolving route failed, err: -19 [ 1636.954877][T16867] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1637.216932][T16869] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1637.386164][T16871] FAULT_INJECTION: forcing a failure. [ 1637.386164][T16871] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.429467][T16871] CPU: 0 PID: 16871 Comm: syz.1.2915 Not tainted syzkaller #0 [ 1637.437068][T16871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1637.447213][T16871] Call Trace: [ 1637.450485][T16871] [ 1637.453434][T16871] dump_stack_lvl+0x18c/0x250 [ 1637.458107][T16871] ? show_regs_print_info+0x20/0x20 [ 1637.463321][T16871] ? load_image+0x420/0x420 [ 1637.467826][T16871] ? __might_sleep+0xe0/0xe0 [ 1637.472410][T16871] ? __lock_acquire+0x7eb0/0x7eb0 [ 1637.477522][T16871] should_fail_ex+0x394/0x4c0 [ 1637.482195][T16871] should_failslab+0x9/0x20 [ 1637.486710][T16871] slab_pre_alloc_hook+0x59/0x300 [ 1637.491812][T16871] ? __rwlock_init+0x150/0x150 [ 1637.496574][T16871] ? snd_rawmidi_open+0x33c/0xb60 [ 1637.501946][T16871] __kmem_cache_alloc_node+0x53/0x260 [ 1637.507665][T16871] ? snd_rawmidi_open+0x33c/0xb60 [ 1637.512691][T16871] kmalloc_trace+0x2a/0xe0 [ 1637.517105][T16871] snd_rawmidi_open+0x33c/0xb60 [ 1637.521969][T16871] ? __lock_acquire+0x7eb0/0x7eb0 [ 1637.527001][T16871] ? __rwlock_init+0x150/0x150 [ 1637.531797][T16871] ? snd_rawmidi_ioctl_compat+0x800/0x800 [ 1637.537534][T16871] chrdev_open+0x58c/0x600 [ 1637.541952][T16871] ? cd_forget+0x160/0x160 [ 1637.546387][T16871] ? fsnotify_perm+0x3ed/0x5e0 [ 1637.551189][T16871] do_dentry_open+0x880/0x14b0 [ 1637.555977][T16871] ? cd_forget+0x160/0x160 [ 1637.560420][T16871] path_openat+0x284f/0x3270 [ 1637.565065][T16871] ? do_sys_openat2+0xda/0x1d0 [ 1637.570014][T16871] ? __x64_sys_openat+0x139/0x160 [ 1637.575042][T16871] ? verify_lock_unused+0x140/0x140 [ 1637.580236][T16871] ? do_filp_open+0x430/0x430 [ 1637.584913][T16871] do_filp_open+0x1f2/0x430 [ 1637.589482][T16871] ? vfs_tmpfile+0x620/0x620 [ 1637.594095][T16871] ? _raw_spin_unlock+0x28/0x40 [ 1637.598950][T16871] ? alloc_fd+0x590/0x640 [ 1637.603302][T16871] do_sys_openat2+0x134/0x1d0 [ 1637.607975][T16871] ? vma_end_read+0x18/0x170 [ 1637.612552][T16871] ? do_sys_open+0xe0/0xe0 [ 1637.616963][T16871] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1637.622937][T16871] ? lock_chain_count+0x20/0x20 [ 1637.627789][T16871] ? lock_chain_count+0x20/0x20 [ 1637.632726][T16871] __x64_sys_openat+0x139/0x160 [ 1637.637570][T16871] do_syscall_64+0x55/0xb0 [ 1637.641989][T16871] ? clear_bhb_loop+0x40/0x90 [ 1637.646657][T16871] ? clear_bhb_loop+0x40/0x90 [ 1637.651337][T16871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.657231][T16871] RIP: 0033:0x7fbdcd36974e [ 1637.661638][T16871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1637.681238][T16871] RSP: 002b:00007fbdce207b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1637.689642][T16871] RAX: ffffffffffffffda RBX: 00007fbdce2086c0 RCX: 00007fbdcd36974e [ 1637.697605][T16871] RDX: 0000000000189083 RSI: 00007fbdce207c00 RDI: ffffffffffffff9c [ 1637.705595][T16871] RBP: 00007fbdce207c00 R08: 0000000000000000 R09: 0000000000000000 [ 1637.713553][T16871] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1637.721601][T16871] R13: 00007fbdcd626038 R14: 00007fbdcd625fa0 R15: 00007ffea3071868 [ 1637.729614][T16871] [ 1639.179242][T14343] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1639.373839][T14343] usb 2-1: Using ep0 maxpacket: 32 [ 1639.407930][T14343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1639.417950][T14343] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1639.427973][T14343] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1639.453076][T14343] usb 2-1: config 14 has no interface number 0 [ 1639.473568][T14343] usb 2-1: config 14 has no interface number 1 [ 1639.495066][T14343] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1639.507497][T14343] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1639.542652][T14343] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1639.569649][T14343] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1639.598261][T14343] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1639.618103][T14343] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1639.638792][T14343] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1639.660889][T14343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.675199][T14343] usb 2-1: Product: syz [ 1639.694479][T14343] usb 2-1: Manufacturer: syz [ 1639.699441][T14343] usb 2-1: SerialNumber: syz [ 1639.874389][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 1639.935473][T16882] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1640.040963][T16657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.128830][T14343] legousbtower 2-1:14.57: interrupt endpoints not found [ 1640.328382][T14343] legousbtower 2-1:14.228: interrupt endpoints not found [ 1640.500287][T16902] netlink: 'syz.0.2925': attribute type 4 has an invalid length. [ 1641.589618][T16908] FAULT_INJECTION: forcing a failure. [ 1641.589618][T16908] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.631556][T16657] veth0_vlan: entered promiscuous mode [ 1641.646294][T16908] CPU: 0 PID: 16908 Comm: syz.0.2927 Not tainted syzkaller #0 [ 1641.653781][T16908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1641.663853][T16908] Call Trace: [ 1641.667649][T16908] [ 1641.670569][T16908] dump_stack_lvl+0x18c/0x250 [ 1641.675286][T16908] ? show_regs_print_info+0x20/0x20 [ 1641.680522][T16908] ? load_image+0x420/0x420 [ 1641.685028][T16908] ? __might_sleep+0xe0/0xe0 [ 1641.689614][T16908] ? __lock_acquire+0x7eb0/0x7eb0 [ 1641.694715][T16908] should_fail_ex+0x394/0x4c0 [ 1641.699386][T16908] should_failslab+0x9/0x20 [ 1641.703979][T16908] slab_pre_alloc_hook+0x59/0x300 [ 1641.709025][T16908] ? kfree+0x31/0x1a0 [ 1641.713000][T16908] ? alloc_fs_context+0x63/0x7a0 [ 1641.717929][T16908] __kmem_cache_alloc_node+0x53/0x260 [ 1641.723302][T16908] ? alloc_fs_context+0x63/0x7a0 [ 1641.728247][T16908] kmalloc_trace+0x2a/0xe0 [ 1641.732663][T16908] alloc_fs_context+0x63/0x7a0 [ 1641.737430][T16908] mq_init_ns+0x10a/0x510 [ 1641.741841][T16908] copy_ipcs+0x309/0x500 [ 1641.746071][T16908] create_new_namespaces+0x212/0x700 [ 1641.751703][T16908] unshare_nsproxy_namespaces+0x11a/0x160 [ 1641.757429][T16908] ksys_unshare+0x4fa/0x8f0 [ 1641.761944][T16908] ? sighand_ctor+0x50/0x50 [ 1641.766514][T16908] ? lock_chain_count+0x20/0x20 [ 1641.771400][T16908] ? syscall_enter_from_user_mode+0x25/0x80 [ 1641.777306][T16908] __x64_sys_unshare+0x38/0x40 [ 1641.782080][T16908] do_syscall_64+0x55/0xb0 [ 1641.786590][T16908] ? clear_bhb_loop+0x40/0x90 [ 1641.791276][T16908] ? clear_bhb_loop+0x40/0x90 [ 1641.796051][T16908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1641.802227][T16908] RIP: 0033:0x7fa70e9a8f19 [ 1641.806628][T16908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.826236][T16908] RSP: 002b:00007fa70f7a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1641.834654][T16908] RAX: ffffffffffffffda RBX: 00007fa70ec25fa0 RCX: 00007fa70e9a8f19 [ 1641.842648][T16908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1641.850744][T16908] RBP: 00007fa70ea37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1641.858730][T16908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.866705][T16908] R13: 00007fa70ec26038 R14: 00007fa70ec25fa0 R15: 00007ffdd07849f8 [ 1641.874711][T16908] [ 1641.895443][T16657] veth1_vlan: entered promiscuous mode [ 1641.936024][T16657] veth0_macvtap: entered promiscuous mode [ 1641.954635][T16657] veth1_macvtap: entered promiscuous mode [ 1641.978190][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.004112][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.024081][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.054134][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.094130][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.135994][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.155576][T14343] usb 2-1: USB disconnect, device number 16 [ 1642.972512][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.017599][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.055296][T16657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.179011][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.234668][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.266088][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.304475][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.344757][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.381749][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.414425][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.447245][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.500706][T16657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.560299][T16657] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.594017][T16657] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.429898][T16657] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.438776][T16657] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.775022][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.813915][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.905473][T16787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.962550][T16787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.066920][T15354] Bluetooth: hci0: command 0x0405 tx timeout [ 1647.229531][T16936] loop4: detected capacity change from 0 to 40427 [ 1647.304487][T16936] F2FS-fs (loop4): invalid crc value [ 1647.357815][T16936] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1647.528866][T16936] F2FS-fs (loop4): Start checkpoint disabled! [ 1647.607562][T16936] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1647.683568][T16947] FAULT_INJECTION: forcing a failure. [ 1647.683568][T16947] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.759507][T16947] CPU: 0 PID: 16947 Comm: syz.1.2935 Not tainted syzkaller #0 [ 1647.767000][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1647.777046][T16947] Call Trace: [ 1647.780314][T16947] [ 1647.783234][T16947] dump_stack_lvl+0x18c/0x250 [ 1647.787940][T16947] ? show_regs_print_info+0x20/0x20 [ 1647.793168][T16947] ? load_image+0x420/0x420 [ 1647.797670][T16947] ? __might_sleep+0xe0/0xe0 [ 1647.802255][T16947] ? __lock_acquire+0x7eb0/0x7eb0 [ 1647.807270][T16947] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1647.813167][T16947] ? is_dynamic_key+0x260/0x260 [ 1647.818037][T16947] should_fail_ex+0x394/0x4c0 [ 1647.822822][T16947] should_failslab+0x9/0x20 [ 1647.827422][T16947] slab_pre_alloc_hook+0x59/0x300 [ 1647.832440][T16947] ? __kernfs_new_node+0xaa/0x7f0 [ 1647.837661][T16947] ? __kernfs_new_node+0xaa/0x7f0 [ 1647.842698][T16947] __kmem_cache_alloc_node+0x53/0x260 [ 1647.848077][T16947] ? __kernfs_new_node+0xaa/0x7f0 [ 1647.853259][T16947] __kmalloc_node_track_caller+0xa4/0x230 [ 1647.859105][T16947] kstrdup+0x3b/0x80 [ 1647.863007][T16947] __kernfs_new_node+0xaa/0x7f0 [ 1647.867876][T16947] ? __asan_memset+0x22/0x40 [ 1647.872462][T16947] ? number+0xc9d/0xf00 [ 1647.876632][T16947] ? kernfs_new_node+0x260/0x260 [ 1647.881670][T16947] ? pointer+0x1150/0x1150 [ 1647.886075][T16947] ? make_kgid+0x1c8/0x650 [ 1647.890516][T16947] ? from_kuid_munged+0x6e0/0x6e0 [ 1647.895530][T16947] kernfs_new_node+0x14c/0x260 [ 1647.900291][T16947] kernfs_create_dir_ns+0x44/0x120 [ 1647.905507][T16947] sysfs_create_dir_ns+0x130/0x2a0 [ 1647.910612][T16947] ? __lock_acquire+0x7eb0/0x7eb0 [ 1647.915648][T16947] ? sysfs_warn_dup+0xa0/0xa0 [ 1647.920354][T16947] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1647.926249][T16947] ? do_raw_spin_unlock+0x121/0x230 [ 1647.931446][T16947] kobject_add_internal+0x617/0xc90 [ 1647.936731][T16947] kobject_init_and_add+0x12c/0x1a0 [ 1647.942034][T16947] ? register_netdevice+0x12aa/0x1ba0 [ 1647.947398][T16947] ? ip6_tnl_create2+0x80/0x140 [ 1647.952307][T16947] ? ip6_tnl_locate+0x735/0x830 [ 1647.957293][T16947] ? ip6_tnl_siocdevprivate+0x61b/0xab0 [ 1647.962853][T16947] ? kobject_add+0x240/0x240 [ 1647.967440][T16947] ? dev_uevent_filter+0x43/0xb0 [ 1647.972389][T16947] ? kobject_uevent_env+0x2ed/0x890 [ 1647.977640][T16947] net_rx_queue_update_kobjects+0x1e0/0x590 [ 1647.983655][T16947] netdev_register_kobject+0x235/0x320 [ 1647.989119][T16947] register_netdevice+0x12aa/0x1ba0 [ 1647.994323][T16947] ? netif_stacked_transfer_operstate+0x210/0x210 [ 1648.000842][T16947] ? __lock_acquire+0x7eb0/0x7eb0 [ 1648.005962][T16947] ? kvmalloc_node+0x70/0x180 [ 1648.010643][T16947] ? rcu_is_watching+0x15/0xb0 [ 1648.015432][T16947] ? net_generic+0x1e/0x240 [ 1648.019952][T16947] ip6_tnl_create2+0x80/0x140 [ 1648.024634][T16947] ip6_tnl_locate+0x735/0x830 [ 1648.029323][T16947] ? ip6_tnl_parm_from_user+0x340/0x340 [ 1648.034856][T16947] ? __might_fault+0xaa/0x120 [ 1648.039522][T16947] ? __might_fault+0xc6/0x120 [ 1648.044184][T16947] ? __might_fault+0xaa/0x120 [ 1648.048868][T16947] ? ip6_tnl_siocdevprivate+0x5ed/0xab0 [ 1648.054424][T16947] ip6_tnl_siocdevprivate+0x61b/0xab0 [ 1648.059790][T16947] ? ip6_tnl_start_xmit+0x1230/0x1230 [ 1648.065166][T16947] ? dev_ioctl+0x83c/0x1140 [ 1648.069663][T16947] ? __lock_acquire+0x7eb0/0x7eb0 [ 1648.074684][T16947] ? dev_ifsioc+0x957/0xc40 [ 1648.079176][T16947] dev_ioctl+0x84c/0x1140 [ 1648.083589][T16947] sock_ioctl+0x74c/0x7e0 [ 1648.087925][T16947] ? sock_poll+0x460/0x460 [ 1648.092331][T16947] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1648.097256][T16947] ? security_file_ioctl+0x80/0xa0 [ 1648.102457][T16947] ? sock_poll+0x460/0x460 [ 1648.106864][T16947] __se_sys_ioctl+0xfd/0x170 [ 1648.111450][T16947] do_syscall_64+0x55/0xb0 [ 1648.115944][T16947] ? clear_bhb_loop+0x40/0x90 [ 1648.120612][T16947] ? clear_bhb_loop+0x40/0x90 [ 1648.125365][T16947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.131264][T16947] RIP: 0033:0x7fbdcd3a8f19 [ 1648.135665][T16947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.155286][T16947] RSP: 002b:00007fbdce208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.163686][T16947] RAX: ffffffffffffffda RBX: 00007fbdcd625fa0 RCX: 00007fbdcd3a8f19 [ 1648.171647][T16947] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1648.179607][T16947] RBP: 00007fbdcd437f6d R08: 0000000000000000 R09: 0000000000000000 [ 1648.187564][T16947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.195533][T16947] R13: 00007fbdcd626038 R14: 00007fbdcd625fa0 R15: 00007ffea3071868 [ 1648.203504][T16947] [ 1648.544843][ T7052] kworker/u4:16: attempt to access beyond end of device [ 1648.544843][ T7052] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1648.594520][ T7052] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1648.630562][ T7052] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1648.672757][ T7052] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1649.046964][T16947] kobject: kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 1650.447390][T16965] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2944'. [ 1651.118704][T14343] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1652.798595][T14343] usb 6-1: config 1 has an invalid interface number: 128 but max is 1 [ 1652.840763][T14343] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.884721][T14343] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1652.959851][T14343] usb 6-1: config 1 has no interface number 0 [ 1652.993269][T14343] usb 6-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1653.036454][ T28] audit: type=1800 audit(1794425099.718:293): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2959" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 1653.128020][T14343] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1653.181354][T14343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.232065][T14343] usb 6-1: Product: syz [ 1653.262139][T14343] usb 6-1: Manufacturer: syz [ 1653.295651][T14343] usb 6-1: SerialNumber: syz [ 1653.338727][T14343] cdc_wdm 6-1:1.128: skipping garbage [ 1653.367663][T17011] syzkaller0: entered promiscuous mode [ 1653.376729][T14343] cdc_wdm: probe of 6-1:1.128 failed with error -22 [ 1653.393587][T17011] syzkaller0: entered allmulticast mode [ 1653.561429][T14343] usb 6-1: USB disconnect, device number 2 [ 1653.667252][T17016] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 1654.644388][T17023] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1654.658466][T17024] loop4: detected capacity change from 0 to 64 [ 1654.719424][T17023] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1654.755749][T17023] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1654.781951][T17023] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1654.844494][T17023] bond1: (slave geneve2): making interface the new active one [ 1654.896790][T17023] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1656.085607][T17036] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1657.316076][T14343] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1658.321676][T14343] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.356892][T14343] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1658.394233][T14343] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1658.463105][T14343] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1658.534313][T14343] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.578327][T14343] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1658.618638][T14343] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1658.666597][T14343] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1658.738005][T14343] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1658.775225][T14343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.823892][T14343] usb 2-1: Product: syz [ 1658.848340][T14343] usb 2-1: Manufacturer: syz [ 1658.852973][T14343] usb 2-1: SerialNumber: syz [ 1658.907364][T14343] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1658.958399][T14343] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1659.018510][T14343] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1659.924668][T17038] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1659.981122][T14343] usb 2-1: USB disconnect, device number 17 [ 1660.030384][T14343] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1660.095912][T14343] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1661.149333][T14343] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1661.762028][T17056] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1661.965795][T17056] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1662.029838][ T8] IPVS: starting estimator thread 0... [ 1662.129898][T17057] IPVS: using max 36 ests per chain, 86400 per kthread [ 1662.384148][T17060] loop5: detected capacity change from 0 to 2048 [ 1662.466194][T17060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1663.390611][T17062] loop4: detected capacity change from 0 to 32768 [ 1663.451816][T17062] (syz.4.2981,17062,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1663.581351][T17062] (syz.4.2981,17062,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1665.272068][T17079] loop4: detected capacity change from 0 to 256 [ 1665.295464][T17079] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1665.306166][T17079] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1665.453280][T17079] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 1665.475139][T17079] exFAT-fs (loop4): failed to load alloc-bitmap [ 1665.481486][T17079] exFAT-fs (loop4): failed to recognize exfat type [ 1665.797981][T17089] loop4: detected capacity change from 0 to 2048 [ 1666.786808][T17089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.989526][T17101] nvme_fabrics: missing parameter 'nqn=%s' [ 1667.331904][T17087] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1667.349172][T17087] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 712 with error 28 [ 1667.361926][T17087] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1667.361926][T17087] [ 1667.371718][T17087] EXT4-fs (loop4): Total free blocks count 0 [ 1667.377692][T17087] EXT4-fs (loop4): Free/Dirty block details [ 1667.384043][T17087] EXT4-fs (loop4): free_blocks=2415919504 [ 1667.390816][T17087] EXT4-fs (loop4): dirty_blocks=720 [ 1667.396066][T17087] EXT4-fs (loop4): Block reservation details [ 1667.402356][T17087] EXT4-fs (loop4): i_reserved_data_blocks=45 [ 1667.446197][ T28] audit: type=1800 audit(1794425113.952:294): pid=17104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2989" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1667.605545][T16384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.894987][T17085] loop5: detected capacity change from 0 to 32768 [ 1667.950314][T17085] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 1667.987843][T17085] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1668.126082][T17085] XFS (loop5): Ending clean mount [ 1668.152088][T15692] XFS (loop5): Corruption warning: Metadata has LSN (1:8192) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1668.219013][T15692] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 1668.268364][T15692] XFS (loop5): Unmount and run xfs_repair [ 1668.288733][T15692] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1668.309762][T15692] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1668.334619][T15692] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 20 00 .............. . [ 1668.358739][T15692] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1668.384447][T15692] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 1668.406895][T15692] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1668.433897][T15692] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1669.156629][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.168570][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.218896][T15692] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1669.273969][T15692] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1669.342450][T17085] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 1669.378417][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.394098][T17085] XFS (loop5): Failed to initialize disk quotas. [ 1669.418153][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.465405][T16657] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1671.410887][T15354] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1672.180275][T17148] loop5: detected capacity change from 0 to 2048 [ 1672.237107][T17148] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 1672.905243][ T8] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1673.128821][ T8] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1673.160473][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.193791][ T8] usb 2-1: config 0 descriptor?? [ 1673.228047][ T8] pwc: Samsung MPC-C10 USB webcam detected. [ 1673.446664][ T8] pwc: send_video_command error -71 [ 1673.462281][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1673.497177][ T8] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 1673.529305][ T8] usb 2-1: USB disconnect, device number 18 [ 1673.596444][T17160] loop5: detected capacity change from 0 to 32768 [ 1673.656761][T17160] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1673.775348][T17160] XFS (loop5): Ending clean mount [ 1673.804211][T17160] XFS (loop5): Quotacheck needed: Please wait. [ 1673.924580][T17160] XFS (loop5): Quotacheck: Done. [ 1673.997992][T16657] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1674.020796][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1674.278301][ T8] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1674.296727][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.333761][ T8] usb 2-1: config 0 descriptor?? [ 1674.376243][ T8] pwc: Samsung MPC-C10 USB webcam detected. [ 1674.780897][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1674.799297][ T8] pwc: recv_control_msg error -71 req 02 val 2700 [ 1674.828402][ T8] pwc: recv_control_msg error -71 req 04 val 1700 [ 1674.849419][T17181] loop5: detected capacity change from 0 to 2048 [ 1674.865948][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1674.883554][T17181] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 1674.901712][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 1674.930068][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 1674.967799][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 1675.008354][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 1675.166320][T17150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1675.180616][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 1675.439826][ T8] pwc: recv_control_msg error -71 req 02 val 2200 [ 1675.538566][ T8] pwc: recv_control_msg error -71 req 06 val 0600 [ 1675.601975][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 1675.639668][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 1675.711717][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 1675.762026][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 1675.819921][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 1676.792363][T17191] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1677.493574][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 1677.530589][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 1677.560748][T17191] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1677.579912][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 1677.839413][T17195] loop4: detected capacity change from 0 to 2048 [ 1678.131732][ T8] pwc: Registered as video103. [ 1678.159154][T17195] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 1678.185327][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 1678.295196][ T8] usb 2-1: USB disconnect, device number 19 [ 1679.153660][T17208] syz_tun: entered allmulticast mode [ 1679.513506][T17210] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1680.584206][T17215] input: syz0 as /devices/virtual/input/input16 [ 1680.894805][T17218] loop4: detected capacity change from 0 to 32768 [ 1681.003344][T17218] JBD2: Ignoring recovery information on journal [ 1681.011549][T17218] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 1681.020122][T17218] JBD2: bad block at offset 32 [ 1681.051079][T17218] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1681.099408][ T28] audit: type=1800 audit(1794425383.812:295): pid=17218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3023" name="file2" dev="loop4" ino=17058 res=0 errno=0 [ 1681.146746][T17218] (syz.4.3023,17218,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -14 [ 1681.238796][T17204] loop5: detected capacity change from 0 to 32768 [ 1681.378381][T17204] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 1681.497592][T17204] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1681.587491][T16384] ocfs2: Unmounting device (7,4) on (node local) [ 1682.024607][T16657] ocfs2: Unmounting device (7,5) on (node local) [ 1683.504382][T17230] loop4: detected capacity change from 0 to 40427 [ 1683.526813][T17230] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1683.572715][T17230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1683.622455][T17230] F2FS-fs (loop4): invalid crc value [ 1683.810303][T17230] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1686.030939][T17260] sctp: [Deprecated]: syz.0.3035 (pid 17260) Use of int in max_burst socket option. [ 1686.030939][T17260] Use struct sctp_assoc_value instead [ 1686.311550][T17265] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 1686.346326][ T8] IPVS: starting estimator thread 0... [ 1687.051136][T17266] IPVS: using max 35 ests per chain, 84000 per kthread [ 1687.180546][T14343] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1688.190573][T14343] usb 6-1: Using ep0 maxpacket: 16 [ 1688.228107][T14343] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1688.257810][T14343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.311155][T14343] usb 6-1: Product: syz [ 1688.315346][T14343] usb 6-1: Manufacturer: syz [ 1688.363372][T14343] usb 6-1: SerialNumber: syz [ 1688.623657][T14343] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1688.665306][T14343] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1688.734113][T14343] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1688.774519][T14343] usb 6-1: media controller created [ 1688.820139][T14343] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1688.933308][T14343] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1689.021509][T17279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.060664][T17279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.069269][T14343] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5 [ 1689.118330][T14343] usb 6-1: USB disconnect, device number 3 [ 1689.465948][T17281] loop4: detected capacity change from 0 to 8192 [ 1690.451492][T17281] loop4: p1[EZD] p2 p3 p4 [ 1690.468803][T17281] loop4: partition table partially beyond EOD, truncated [ 1690.552002][T17281] loop4: p3 start 2147483649 is beyond EOD, truncated [ 1690.558823][T17281] loop4: p4 size 32769 extends beyond EOD, truncated [ 1693.234972][T17294] jffs2: notice: (17294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1693.304042][T17292] loop4: detected capacity change from 0 to 512 [ 1693.320325][T16744] udevd[16744]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1693.331459][T17200] udevd[17200]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1693.342923][T16748] udevd[16748]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1693.370972][T17292] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1693.430348][T17292] EXT4-fs (loop4): 1 truncate cleaned up [ 1693.462407][T17292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1694.306702][T16384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.653156][T17312] loop4: detected capacity change from 0 to 512 [ 1694.911844][T17312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1694.954903][T17312] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1695.003158][T17318] loop5: detected capacity change from 0 to 4096 [ 1695.010826][T15692] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1695.569165][T16384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.597555][T15692] usb 2-1: Using ep0 maxpacket: 16 [ 1695.626464][T15692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1696.762443][T15692] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1696.807639][T15692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.858028][T17325] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1696.869151][T15692] usb 2-1: Product: syz [ 1696.888881][T15692] usb 2-1: Manufacturer: syz [ 1696.912076][T15692] usb 2-1: SerialNumber: syz [ 1696.991485][T15692] usb 2-1: config 0 descriptor?? [ 1697.028736][T15692] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1697.070821][T15692] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1697.126327][T17331] loop4: detected capacity change from 0 to 2048 [ 1697.165444][T17331] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 1697.288966][T17331] loop4: detected capacity change from 0 to 512 [ 1697.348623][T17331] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1697.418497][T17331] EXT4-fs (loop4): 1 truncate cleaned up [ 1697.452592][T17331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1697.740899][T15692] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1698.199883][T17338] loop5: detected capacity change from 0 to 2048 [ 1698.253286][T17338] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 1698.281525][T16384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.442637][T15692] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1698.511479][T15692] em28xx 2-1:0.0: board has no eeprom [ 1698.712775][T15692] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1698.755428][T15692] em28xx 2-1:0.0: dvb set to bulk mode. [ 1698.987398][T14343] em28xx 2-1:0.0: Binding DVB extension [ 1699.007754][T15692] usb 2-1: USB disconnect, device number 20 [ 1699.128527][T15692] em28xx 2-1:0.0: Disconnecting em28xx [ 1699.311481][T14343] em28xx 2-1:0.0: Registering input extension [ 1699.351258][T15692] em28xx 2-1:0.0: Closing input extension [ 1700.279571][T15692] em28xx 2-1:0.0: Freeing device [ 1700.692240][T17353] capability: warning: `syz.0.3063' uses deprecated v2 capabilities in a way that may be insecure [ 1701.366413][T17357] loop5: detected capacity change from 0 to 512 [ 1701.454005][T17357] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1701.525425][T17357] EXT4-fs (loop5): 1 truncate cleaned up [ 1701.563550][T17357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1703.192744][T16657] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 1704.532333][T17384] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.541899][T16657] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 1704.617939][T16657] EXT4-fs error (device loop5): ext4_dirty_inode:6188: inode #2: comm syz-executor: mark_inode_dirty error [ 1705.689794][T16657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.844806][T17390] loop4: detected capacity change from 0 to 16 [ 1705.948199][T17390] erofs: (device loop4): mounted with root inode @ nid 36. [ 1706.226303][T17396] syz.4.3080: attempt to access beyond end of device [ 1706.226303][T17396] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1706.447915][T17399] syz.4.3080: attempt to access beyond end of device [ 1706.447915][T17399] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1706.682010][T17396] syz.4.3080: attempt to access beyond end of device [ 1706.682010][T17396] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1706.868181][T17393] syz.4.3080: attempt to access beyond end of device [ 1706.868181][T17393] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1706.996774][T16787] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.086891][T17404] syz.4.3080: attempt to access beyond end of device [ 1707.086891][T17404] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1707.239132][T17399] syz.4.3080: attempt to access beyond end of device [ 1707.239132][T17399] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1707.324378][T16787] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.623144][T16787] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.861054][T16787] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.157586][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1708.169301][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1708.182714][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1708.197500][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1708.207644][T17432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.217790][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1708.230260][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1708.308071][T17432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.366227][T17428] rxe_eth0 speed is unknown, defaulting to 1000 [ 1708.497687][T17441] loop4: detected capacity change from 0 to 64 [ 1709.709074][T17450] 8021q: VLANs not supported on gre0 [ 1710.173185][T17428] chnl_net:caif_netlink_parms(): no params data found [ 1710.207977][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1710.290714][ T5801] Bluetooth: hci0: command tx timeout [ 1710.488262][T17428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.504219][T17428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.562575][T17428] bridge_slave_0: entered allmulticast mode [ 1711.593780][T17428] bridge_slave_0: entered promiscuous mode [ 1711.625019][T17428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.665566][T17428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.703616][T17428] bridge_slave_1: entered allmulticast mode [ 1711.740686][T17428] bridge_slave_1: entered promiscuous mode [ 1711.986657][T17428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.082812][T17428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.373808][ T5801] Bluetooth: hci0: command tx timeout [ 1713.511166][T17428] team0: Port device team_slave_0 added [ 1713.688457][T17428] team0: Port device team_slave_1 added [ 1713.930232][T17428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.974194][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.076540][T17514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.092783][T17428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.110232][T17514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.166080][T17514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.238425][T17514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.295302][T17428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.317275][T17517] FAULT_INJECTION: forcing a failure. [ 1714.317275][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.340271][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.407269][T17517] CPU: 0 PID: 17517 Comm: syz.4.3109 Not tainted syzkaller #0 [ 1714.414985][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1714.425064][T17517] Call Trace: [ 1714.428354][T17517] [ 1714.431275][T17517] dump_stack_lvl+0x18c/0x250 [ 1714.435985][T17517] ? show_regs_print_info+0x20/0x20 [ 1714.441232][T17517] ? load_image+0x420/0x420 [ 1714.445761][T17517] ? __might_sleep+0xe0/0xe0 [ 1714.450351][T17517] ? __lock_acquire+0x7eb0/0x7eb0 [ 1714.455380][T17517] should_fail_ex+0x394/0x4c0 [ 1714.460065][T17517] should_failslab+0x9/0x20 [ 1714.464770][T17517] slab_pre_alloc_hook+0x59/0x300 [ 1714.469786][T17517] ? dm_split_args+0x88/0x5b0 [ 1714.474540][T17517] __kmem_cache_alloc_node+0x53/0x260 [ 1714.479927][T17517] ? dm_split_args+0x88/0x5b0 [ 1714.484625][T17517] kmalloc_trace+0x2a/0xe0 [ 1714.489048][T17517] dm_split_args+0x88/0x5b0 [ 1714.493655][T17517] dm_table_add_target+0x51c/0xbc0 [ 1714.498781][T17517] table_load+0x2eb/0x7e0 [ 1714.503123][T17517] ? dev_wait+0x2f0/0x2f0 [ 1714.507451][T17517] ? __might_fault+0xaa/0x120 [ 1714.512113][T17517] ? __might_fault+0xc6/0x120 [ 1714.516788][T17517] ? __might_fault+0xaa/0x120 [ 1714.521553][T17517] ? dev_wait+0x2f0/0x2f0 [ 1714.525880][T17517] dm_ctl_ioctl+0x975/0xd00 [ 1714.530383][T17517] ? dev_wait+0x2f0/0x2f0 [ 1714.534713][T17517] ? dm_poll+0x120/0x120 [ 1714.539068][T17517] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1714.544022][T17517] ? security_file_ioctl+0x80/0xa0 [ 1714.549226][T17517] ? dm_poll+0x120/0x120 [ 1714.553478][T17517] __se_sys_ioctl+0xfd/0x170 [ 1714.558122][T17517] do_syscall_64+0x55/0xb0 [ 1714.562539][T17517] ? clear_bhb_loop+0x40/0x90 [ 1714.567484][T17517] ? clear_bhb_loop+0x40/0x90 [ 1714.572332][T17517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.578225][T17517] RIP: 0033:0x7f685e7a8f19 [ 1714.582648][T17517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.602347][T17517] RSP: 002b:00007f685c9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1714.610839][T17517] RAX: ffffffffffffffda RBX: 00007f685ea25fa0 RCX: 00007f685e7a8f19 [ 1714.618803][T17517] RDX: 0000200000000480 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1714.626762][T17517] RBP: 00007f685e837f6d R08: 0000000000000000 R09: 0000000000000000 [ 1714.634733][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1714.642709][T17517] R13: 00007f685ea26038 R14: 00007f685ea25fa0 R15: 00007ffea5e3be58 [ 1714.650693][T17517] [ 1714.686817][T17428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.762972][ T5801] Bluetooth: hci0: command tx timeout [ 1714.811212][T17521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1714.844671][T17428] hsr_slave_0: entered promiscuous mode [ 1714.856833][T17428] hsr_slave_1: entered promiscuous mode [ 1714.884737][T17523] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1714.891972][T17428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1714.899800][T17428] Cannot create hsr debugfs directory [ 1716.907353][ T5801] Bluetooth: hci0: command tx timeout [ 1717.176461][T17517] device-mapper: table: 248:5: multipath: couldn't split parameters (-ENOMEM) [ 1717.228100][T17517] device-mapper: ioctl: error adding target to table [ 1720.423490][T17428] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1720.663085][T17554] syz_tun (unregistering): left allmulticast mode [ 1720.714594][T17428] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1720.788713][T17428] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1720.858845][T17428] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1720.966288][T16787] hsr_slave_0: left promiscuous mode [ 1721.059318][T16787] hsr_slave_1: left promiscuous mode [ 1721.111708][T16787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1721.119168][T16787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.195193][T16787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.243869][T16787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.311295][T16787] bridge_slave_1: left allmulticast mode [ 1721.317069][T16787] bridge_slave_1: left promiscuous mode [ 1721.360857][T16787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.441495][T16787] bridge_slave_0: left allmulticast mode [ 1721.447203][T16787] bridge_slave_0: left promiscuous mode [ 1721.503890][T16787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.751307][T17563] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1721.764925][T16787] veth1_macvtap: left promiscuous mode [ 1721.779871][T17559] loop4: detected capacity change from 0 to 32768 [ 1721.786565][T16787] veth0_macvtap: left promiscuous mode [ 1722.001911][T16787] veth1_vlan: left promiscuous mode [ 1722.007231][T16787] veth0_vlan: left promiscuous mode [ 1722.063345][T17559] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.3120 (17559) [ 1722.168170][T17559] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1722.198137][T17566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.228610][T17559] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1722.249741][T17566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.285410][T17559] BTRFS info (device loop4): disabling log replay at mount time [ 1722.329606][T17559] BTRFS info (device loop4): using free space tree [ 1722.405877][ T1098] BTRFS warning (device loop4: state E): checksum verify failed on logical 5332992 mirror 1 wanted 0x229468c04b6036d81c5b233d3b277cb9824f2afa61a3e8eb0a4163c5aaced5a3 found 0x4f1a8db0926d536e3e3bff5571d92d113fb8e5da0467cdee95d2a567012acf57 level 0 [ 1722.504521][T17559] BTRFS warning (device loop4: state E): couldn't read tree root [ 1722.565661][T17559] BTRFS error (device loop4: state E): open_ctree failed: -5 [ 1723.008896][T17585] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1723.073761][T17587] loop4: detected capacity change from 0 to 512 [ 1723.129923][T17587] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1723.182246][ T4103] rtrs_client L1788: : Resolving route failed, err: -19 [ 1723.239306][T17587] EXT4-fs (loop4): 1 truncate cleaned up [ 1723.254659][T17585] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1723.283998][T17587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1723.613418][T16384] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 1723.639867][T17592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.676236][T17592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.697065][T16384] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 1723.729976][T16384] EXT4-fs error (device loop4): ext4_dirty_inode:6188: inode #2: comm syz-executor: mark_inode_dirty error [ 1723.904940][T16987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1724.600623][T16787] team0 (unregistering): Port device team_slave_1 removed [ 1724.677285][T16787] team0 (unregistering): Port device team_slave_0 removed [ 1724.758262][T16787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.838258][T16787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1725.422697][T16787] bond0 (unregistering): Released all slaves [ 1727.696340][T17599] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 1728.069505][T17428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.127464][T17428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1728.216097][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.223278][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1728.301408][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.308554][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1728.505786][T17428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1728.788199][T16787] IPVS: stop unused estimator thread 0... [ 1729.433128][T16787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.593941][T15354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1729.605348][T15354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1729.614401][T15354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1729.636728][T15354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1729.646761][T15354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1729.665351][T15354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1729.759905][T17428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.889936][T16787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.177509][T16787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.211732][T17635] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1730.218359][T17635] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1730.307527][T17635] vhci_hcd vhci_hcd.0: Device attached [ 1730.447795][T17637] vhci_hcd: connection closed [ 1730.456053][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.470468][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.478472][ T1098] vhci_hcd: stop threads [ 1730.510711][ T1098] vhci_hcd: release socket [ 1730.524114][ T1098] vhci_hcd: disconnect device [ 1730.590893][T15692] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1730.598505][T15692] usb 35-1: enqueue for inactive port 0 [ 1730.721760][T15692] vhci_hcd: vhci_device speed not set [ 1730.754705][T17623] rxe_eth0 speed is unknown, defaulting to 1000 [ 1731.216994][T17428] veth0_vlan: entered promiscuous mode [ 1731.607076][T17428] veth1_vlan: entered promiscuous mode [ 1731.735832][T15354] Bluetooth: hci1: command tx timeout [ 1731.909913][T17428] veth0_macvtap: entered promiscuous mode [ 1731.940414][T17428] veth1_macvtap: entered promiscuous mode [ 1732.007814][T17428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.054430][T17428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.083150][T17428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.100132][T17428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.120264][T17428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.136903][T17428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.147338][T17428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.160997][T17428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.177194][T17428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1732.245641][T17428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.291712][T17428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.303759][T17428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.318255][T17428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.329520][T17428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.343490][T17428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.353537][T17428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.364284][T17428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.379189][T17428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1732.445212][T17428] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.458128][T17428] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.467365][T17428] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.479558][T17428] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.702203][T17623] chnl_net:caif_netlink_parms(): no params data found [ 1732.911171][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.919042][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.999270][T17623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.026241][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.044930][T17623] bridge_slave_0: entered allmulticast mode [ 1733.065575][T17623] bridge_slave_0: entered promiscuous mode [ 1733.178249][T17623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.205622][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.230164][T17623] bridge_slave_1: entered allmulticast mode [ 1733.268331][T17623] bridge_slave_1: entered promiscuous mode [ 1733.371552][T17623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.406899][ T4103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.424590][T16787] hsr_slave_0: left promiscuous mode [ 1733.445271][ T4103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.454116][T16787] hsr_slave_1: left promiscuous mode [ 1733.471177][T16787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.478681][T16787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.504025][T16787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.525332][T16787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.551684][T16787] bridge_slave_1: left allmulticast mode [ 1733.557409][T16787] bridge_slave_1: left promiscuous mode [ 1733.573419][T16787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.585043][T16787] bridge_slave_0: left allmulticast mode [ 1733.592053][T16787] bridge_slave_0: left promiscuous mode [ 1733.597833][T16787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.629759][T16787] veth1_macvtap: left promiscuous mode [ 1733.638386][T16787] veth0_macvtap: left promiscuous mode [ 1733.649002][T16787] veth1_vlan: left promiscuous mode [ 1733.659253][T16787] veth0_vlan: left promiscuous mode [ 1733.819843][T15354] Bluetooth: hci1: command tx timeout [ 1734.723387][T16787] team0 (unregistering): Port device team_slave_1 removed [ 1734.799803][T16787] team0 (unregistering): Port device team_slave_0 removed [ 1734.886874][T16787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1734.959922][T16787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1735.495748][T16787] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1735.590056][T16787] bond0 (unregistering): Released all slaves [ 1735.681769][T17623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.848236][T17623] team0: Port device team_slave_0 added [ 1735.873695][T17623] team0: Port device team_slave_1 added [ 1735.898880][T15354] Bluetooth: hci1: command tx timeout [ 1735.981855][T17623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.049611][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.197155][T17701] loop6: detected capacity change from 0 to 2048 [ 1736.271471][T17623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.320888][T17701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1736.424512][T17623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.434160][T17701] UDF-fs: error (device loop6): udf_read_inode: (ino 1408) failed !bh [ 1736.451451][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.490626][T17701] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 1736.577997][T17623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.710059][T16787] IPVS: stop unused estimator thread 0... [ 1737.764880][T17623] hsr_slave_0: entered promiscuous mode [ 1737.931081][T17623] hsr_slave_1: entered promiscuous mode [ 1738.962193][T15354] Bluetooth: hci1: command tx timeout [ 1739.004098][T17623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1739.013028][T17721] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 1739.048844][T17623] Cannot create hsr debugfs directory [ 1741.226238][T17623] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1741.331975][T17623] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1741.389945][T17623] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1741.431664][T17623] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1741.712201][T17623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.788755][T17623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.853994][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.861255][T16787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.976979][T16787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.984163][T16787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1742.011645][T17746] FAULT_INJECTION: forcing a failure. [ 1742.011645][T17746] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.058444][T17748] FAULT_INJECTION: forcing a failure. [ 1742.058444][T17748] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.090849][T17746] CPU: 0 PID: 17746 Comm: syz.0.3144 Not tainted syzkaller #0 [ 1742.098371][T17746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1742.108609][T17746] Call Trace: [ 1742.111972][T17746] [ 1742.114988][T17746] dump_stack_lvl+0x18c/0x250 [ 1742.120212][T17746] ? show_regs_print_info+0x20/0x20 [ 1742.125548][T17746] ? load_image+0x420/0x420 [ 1742.130076][T17746] ? __might_sleep+0xe0/0xe0 [ 1742.134702][T17746] ? __lock_acquire+0x7eb0/0x7eb0 [ 1742.139773][T17746] should_fail_ex+0x394/0x4c0 [ 1742.144533][T17746] should_failslab+0x9/0x20 [ 1742.149049][T17746] slab_pre_alloc_hook+0x59/0x300 [ 1742.154078][T17746] ? simple_attr_open+0x62/0x180 [ 1742.159113][T17746] __kmem_cache_alloc_node+0x53/0x260 [ 1742.164503][T17746] ? device_event+0x220/0x220 [ 1742.169262][T17746] ? simple_attr_open+0x62/0x180 [ 1742.174189][T17746] ? lowpan_enable_fops_open+0x40/0x40 [ 1742.179656][T17746] kmalloc_trace+0x2a/0xe0 [ 1742.184088][T17746] ? device_event+0x220/0x220 [ 1742.188830][T17746] ? lowpan_enable_get+0x40/0x40 [ 1742.193798][T17746] simple_attr_open+0x62/0x180 [ 1742.198662][T17746] ? device_event+0x220/0x220 [ 1742.203374][T17746] open_proxy_open+0x306/0x4d0 [ 1742.208159][T17746] do_dentry_open+0x880/0x14b0 [ 1742.212944][T17746] ? debugfs_file_put+0xb0/0xb0 [ 1742.217794][T17746] path_openat+0x284f/0x3270 [ 1742.222420][T17746] ? __kfence_alloc+0x2d7/0x3d0 [ 1742.227403][T17746] ? verify_lock_unused+0x140/0x140 [ 1742.232663][T17746] ? do_filp_open+0x430/0x430 [ 1742.237369][T17746] do_filp_open+0x1f2/0x430 [ 1742.241905][T17746] ? vfs_tmpfile+0x620/0x620 [ 1742.246524][T17746] ? _raw_spin_unlock+0x28/0x40 [ 1742.251396][T17746] ? alloc_fd+0x590/0x640 [ 1742.255754][T17746] do_sys_openat2+0x134/0x1d0 [ 1742.260428][T17746] ? do_sys_open+0xe0/0xe0 [ 1742.264947][T17746] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1742.270922][T17746] ? lock_chain_count+0x20/0x20 [ 1742.275778][T17746] __x64_sys_openat+0x139/0x160 [ 1742.280632][T17746] do_syscall_64+0x55/0xb0 [ 1742.285044][T17746] ? clear_bhb_loop+0x40/0x90 [ 1742.289711][T17746] ? clear_bhb_loop+0x40/0x90 [ 1742.294383][T17746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.300272][T17746] RIP: 0033:0x7fa70e9a8f19 [ 1742.304685][T17746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.324298][T17746] RSP: 002b:00007fa70f7a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1742.332708][T17746] RAX: ffffffffffffffda RBX: 00007fa70ec25fa0 RCX: 00007fa70e9a8f19 [ 1742.340792][T17746] RDX: 0000000000000002 RSI: 00002000000046c0 RDI: ffffffffffffff9c [ 1742.348780][T17746] RBP: 00007fa70ea37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1742.356756][T17746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.364723][T17746] R13: 00007fa70ec26038 R14: 00007fa70ec25fa0 R15: 00007ffdd07849f8 [ 1742.372708][T17746] [ 1742.402632][T17748] CPU: 0 PID: 17748 Comm: syz.6.3149 Not tainted syzkaller #0 [ 1742.410218][T17748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1742.420286][T17748] Call Trace: [ 1742.423633][T17748] [ 1742.426556][T17748] dump_stack_lvl+0x18c/0x250 [ 1742.431266][T17748] ? show_regs_print_info+0x20/0x20 [ 1742.436483][T17748] ? load_image+0x420/0x420 [ 1742.440993][T17748] ? __might_sleep+0xe0/0xe0 [ 1742.445596][T17748] ? __lock_acquire+0x7eb0/0x7eb0 [ 1742.450633][T17748] should_fail_ex+0x394/0x4c0 [ 1742.455338][T17748] should_failslab+0x9/0x20 [ 1742.459837][T17748] slab_pre_alloc_hook+0x59/0x300 [ 1742.464931][T17748] ? prepend_path+0x8a7/0x950 [ 1742.469622][T17748] ? tomoyo_encode+0x2ad/0x570 [ 1742.474403][T17748] ? tomoyo_encode+0x2ad/0x570 [ 1742.479258][T17748] __kmem_cache_alloc_node+0x53/0x260 [ 1742.484630][T17748] ? tomoyo_encode+0x2ad/0x570 [ 1742.489438][T17748] __kmalloc+0xa7/0x240 [ 1742.493627][T17748] tomoyo_encode+0x2ad/0x570 [ 1742.498225][T17748] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1742.503851][T17748] ? kmem_cache_free+0xf8/0x290 [ 1742.508696][T17748] tomoyo_realpath_nofollow+0xc4/0x110 [ 1742.514175][T17748] ? tomoyo_get_local_path+0x850/0x850 [ 1742.519631][T17748] tomoyo_find_next_domain+0x25b/0x1a50 [ 1742.525176][T17748] ? read_lock_is_recursive+0x20/0x20 [ 1742.530542][T17748] ? tomoyo_assign_domain+0x790/0x790 [ 1742.535993][T17748] ? common_file_perm+0x198/0x1f0 [ 1742.541003][T17748] ? tomoyo_bprm_check_security+0xea/0x170 [ 1742.546798][T17748] tomoyo_bprm_check_security+0x116/0x170 [ 1742.552517][T17748] security_bprm_check+0x62/0xa0 [ 1742.557443][T17748] bprm_execve+0xa72/0x1730 [ 1742.561968][T17748] ? alloc_bprm+0x9a0/0x9a0 [ 1742.566461][T17748] ? put_arg_page+0xea/0x260 [ 1742.571042][T17748] ? copy_string_kernel+0x1e9/0x220 [ 1742.576232][T17748] do_execveat_common+0x501/0x6b0 [ 1742.581267][T17748] __x64_sys_execveat+0xc4/0xe0 [ 1742.586135][T17748] do_syscall_64+0x55/0xb0 [ 1742.590544][T17748] ? clear_bhb_loop+0x40/0x90 [ 1742.595229][T17748] ? clear_bhb_loop+0x40/0x90 [ 1742.599944][T17748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1742.605849][T17748] RIP: 0033:0x7f9bea7a8f19 [ 1742.610254][T17748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.629875][T17748] RSP: 002b:00007f9beb733028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1742.638299][T17748] RAX: ffffffffffffffda RBX: 00007f9beaa25fa0 RCX: 00007f9bea7a8f19 [ 1742.646260][T17748] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1742.654226][T17748] RBP: 00007f9bea837f6d R08: 0000000000000000 R09: 0000000000000000 [ 1742.662211][T17748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.670189][T17748] R13: 00007f9beaa26038 R14: 00007f9beaa25fa0 R15: 00007ffcaa5cff78 [ 1742.678162][T17748] [ 1744.161008][T17748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1744.259976][T17623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1745.689504][T17623] veth0_vlan: entered promiscuous mode [ 1746.781761][T17623] veth1_vlan: entered promiscuous mode [ 1746.917364][T17774] loop6: detected capacity change from 0 to 32768 [ 1746.941068][T17623] veth0_macvtap: entered promiscuous mode [ 1747.057686][T17623] veth1_macvtap: entered promiscuous mode [ 1747.127314][T17774] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1747.168510][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.275730][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.360750][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.440489][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.450336][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1747.579304][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1748.817426][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1748.858395][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.562933][T17623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1751.656256][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.396613][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.450555][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.500642][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.553145][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.600697][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.660537][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.713099][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.761558][T17623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1752.775713][T17428] ocfs2: Unmounting device (7,6) on (node local) [ 1752.887170][T17623] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.976052][T17623] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.043130][T17623] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.089703][T17623] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.502404][T14820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.558186][T14820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.642780][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.749986][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.842785][T17831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1755.160728][T17840] FAULT_INJECTION: forcing a failure. [ 1755.160728][T17840] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.203249][T17836] device-mapper: table: 248:3: snapshot: Snapshot cow pairing for exception table handover failed (-EINVAL) [ 1756.201807][T17840] CPU: 0 PID: 17840 Comm: syz.0.3162 Not tainted syzkaller #0 [ 1756.209406][T17840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1756.219485][T17840] Call Trace: [ 1756.222768][T17840] [ 1756.225703][T17840] dump_stack_lvl+0x18c/0x250 [ 1756.230570][T17840] ? show_regs_print_info+0x20/0x20 [ 1756.235780][T17840] ? load_image+0x420/0x420 [ 1756.240383][T17840] ? __lock_acquire+0x7eb0/0x7eb0 [ 1756.245434][T17840] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1756.251325][T17840] should_fail_ex+0x394/0x4c0 [ 1756.256002][T17840] should_failslab+0x9/0x20 [ 1756.260496][T17840] slab_pre_alloc_hook+0x59/0x300 [ 1756.265514][T17840] ? string+0x257/0x290 [ 1756.269657][T17840] ? kasprintf+0xe3/0x140 [ 1756.274024][T17840] ? kasprintf+0xe3/0x140 [ 1756.278458][T17840] __kmem_cache_alloc_node+0x53/0x260 [ 1756.283912][T17840] ? kasprintf+0xe3/0x140 [ 1756.288231][T17840] __kmalloc_node_track_caller+0xa4/0x230 [ 1756.293950][T17840] kvasprintf+0xec/0x1a0 [ 1756.298204][T17840] ? bust_spinlocks+0xd0/0xd0 [ 1756.302871][T17840] ? lockdep_lock+0xf5/0x230 [ 1756.307452][T17840] ? lockdep_unlock+0x146/0x2e0 [ 1756.312416][T17840] kasprintf+0xe3/0x140 [ 1756.316570][T17840] ? kvasprintf_const+0x240/0x240 [ 1756.321585][T17840] ? __raw_spin_lock_init+0x45/0x100 [ 1756.326866][T17840] alloc_workqueue+0x57f/0x1380 [ 1756.331712][T17840] ? queue_delayed_work_on+0x1a1/0x200 [ 1756.337167][T17840] ? mutex_unlock+0x10/0x10 [ 1756.341767][T17840] ? round_jiffies_relative+0xcf/0xf0 [ 1756.347153][T17840] ? ceph_get_tree+0x467/0x1800 [ 1756.352038][T17840] ? apply_workqueue_attrs+0x180/0x180 [ 1756.357593][T17840] ? __ceph_monc_want_map+0x101/0x460 [ 1756.362964][T17840] ceph_get_tree+0x4bc/0x1800 [ 1756.367749][T17840] ? bpf_lsm_capable+0x9/0x10 [ 1756.372460][T17840] ? security_capable+0x89/0xb0 [ 1756.377416][T17840] vfs_get_tree+0x8c/0x280 [ 1756.381876][T17840] do_new_mount+0x24a/0xa60 [ 1756.386473][T17840] __se_sys_mount+0x2e7/0x3d0 [ 1756.391255][T17840] ? __x64_sys_mount+0xc0/0xc0 [ 1756.396036][T17840] ? lockdep_hardirqs_on+0x98/0x150 [ 1756.401678][T17840] ? __x64_sys_mount+0x20/0xc0 [ 1756.406635][T17840] do_syscall_64+0x55/0xb0 [ 1756.411047][T17840] ? clear_bhb_loop+0x40/0x90 [ 1756.415850][T17840] ? clear_bhb_loop+0x40/0x90 [ 1756.420532][T17840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1756.426975][T17840] RIP: 0033:0x7fa70e9a8f19 [ 1756.431923][T17840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.451543][T17840] RSP: 002b:00007fa70f7a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1756.459959][T17840] RAX: ffffffffffffffda RBX: 00007fa70ec25fa0 RCX: 00007fa70e9a8f19 [ 1756.467921][T17840] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000200000000500 [ 1756.475881][T17840] RBP: 00007fa70ea37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1756.484017][T17840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1756.491991][T17840] R13: 00007fa70ec26038 R14: 00007fa70ec25fa0 R15: 00007ffdd07849f8 [ 1756.499981][T17840] [ 1756.590476][T17836] device-mapper: ioctl: error adding target to table [ 1758.260759][T15354] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1758.269681][T15354] Bluetooth: hci0: Injecting HCI hardware error event [ 1758.283943][T15354] Bluetooth: hci0: hardware error 0x00 [ 1758.435395][T17864] ip_tables: iptables: counters copy to user failed while replacing table [ 1760.691029][T15595] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1760.734638][T17840] ceph: No mds server is up or the cluster is laggy [ 1760.761854][T15595] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1761.570520][T15354] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1763.057177][T17891] loop6: detected capacity change from 0 to 1024 [ 1763.608659][T17900] loop7: detected capacity change from 0 to 128 [ 1763.681535][T17900] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1763.753653][T17900] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1763.834301][T17900] ext2 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1763.973040][T17900] overlayfs: upper fs needs to support d_type. [ 1764.414355][T17623] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1765.428638][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3188'. [ 1765.618091][T17940] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1765.691713][T17951] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3187'. [ 1765.796901][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1773.158079][T18024] lo: entered allmulticast mode [ 1773.206587][T18024] dvmrp6: entered allmulticast mode [ 1773.526452][T18023] lo: left allmulticast mode [ 1774.528580][T18053] loop7: detected capacity change from 0 to 128 [ 1774.544159][T18053] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 1774.628375][T17811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1775.839989][T18082] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3223'. [ 1775.948143][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1776.348103][T18099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1776.443232][T18101] netlink: 'syz.6.3230': attribute type 72 has an invalid length. [ 1776.487403][T18101] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3230'. [ 1776.557842][T18101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3230'. [ 1776.602192][T18101] netlink: 'syz.6.3230': attribute type 1 has an invalid length. [ 1776.639718][T18101] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3230'. [ 1776.868143][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3235'. [ 1778.071894][T18153] netlink: 'syz.7.3244': attribute type 72 has an invalid length. [ 1778.206938][T18153] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3244'. [ 1778.360929][T18157] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3244'. [ 1778.567963][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1782.524894][T18205] program syz.6.3258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1782.647812][T18208] netlink: 'syz.0.3259': attribute type 72 has an invalid length. [ 1782.708207][T18208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1782.777476][T18210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1782.891370][T18213] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 1786.753664][T18258] netlink: 'syz.6.3271': attribute type 72 has an invalid length. [ 1786.817566][T18258] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3271'. [ 1790.532030][T18289] netlink: 'syz.1.3281': attribute type 72 has an invalid length. [ 1790.585295][T18289] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3281'. [ 1791.895514][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.011700][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.482238][T18339] netlink: 'syz.6.3293': attribute type 72 has an invalid length. [ 1796.490105][T18339] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1803.900278][T18473] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3326'. [ 1805.762408][T18527] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1807.625692][T18576] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1807.787032][T18580] syzkaller0: entered promiscuous mode [ 1807.818975][T18580] syzkaller0: entered allmulticast mode [ 1815.608794][T18730] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1815.624070][T18730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1815.641209][T18730] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1815.650803][T18730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1815.659280][T18730] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1815.667779][T18730] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1816.184740][T18728] rxe_eth0 speed is unknown, defaulting to 1000 [ 1817.033618][T18728] chnl_net:caif_netlink_parms(): no params data found [ 1817.731177][T18730] Bluetooth: hci5: command tx timeout [ 1817.745637][T18728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.786085][T18728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.825164][T18728] bridge_slave_0: entered allmulticast mode [ 1818.901437][T18728] bridge_slave_0: entered promiscuous mode [ 1819.009527][T18728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.093841][T18728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.135505][T18728] bridge_slave_1: entered allmulticast mode [ 1819.182348][T18728] bridge_slave_1: entered promiscuous mode [ 1819.338126][T18728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.395508][T18728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.563560][T18728] team0: Port device team_slave_0 added [ 1819.603265][T18728] team0: Port device team_slave_1 added [ 1819.707983][T18728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.747530][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.827010][T18730] Bluetooth: hci5: command tx timeout [ 1820.007856][T18728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1820.259245][T18728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1820.282722][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.364348][T18728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.537405][T18728] hsr_slave_0: entered promiscuous mode [ 1820.576063][T18728] hsr_slave_1: entered promiscuous mode [ 1820.609366][T18728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1820.648306][T18728] Cannot create hsr debugfs directory [ 1821.554742][T18728] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1821.628190][T18728] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1821.668749][T18728] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1821.832733][T18728] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1822.058998][T18730] Bluetooth: hci5: command tx timeout [ 1822.341834][T18728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.436896][T18728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1822.493042][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.500188][ T4103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.703285][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.710451][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.888396][T18728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1823.638157][T18728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1824.198913][T18730] Bluetooth: hci5: command tx timeout [ 1825.026150][T18728] veth0_vlan: entered promiscuous mode [ 1825.106998][T18728] veth1_vlan: entered promiscuous mode [ 1825.275911][T18728] veth0_macvtap: entered promiscuous mode [ 1825.343458][T18728] veth1_macvtap: entered promiscuous mode [ 1825.448376][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.479543][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.526343][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.570312][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.614679][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.647040][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.677947][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.705211][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.726536][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.752599][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.782973][T18728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1825.834170][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1825.873750][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.936747][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1825.978116][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.017208][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1826.035830][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.046310][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1826.061511][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.074748][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1826.086225][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.142006][T18728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.183563][T18728] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.237177][T18728] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.401276][T18728] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.628969][T18728] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.978615][T14820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.029961][T14820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.226368][T16787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.265557][T16787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.186693][T19162] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1834.385494][ T2957] rtrs_client L1788: : Resolving route failed, err: -19 [ 1834.561687][T19162] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1836.642864][T19203] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1836.797567][ T2957] rtrs_client L1788: : Resolving route failed, err: -19 [ 1836.946580][T19203] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1837.435344][T19187] loop6: detected capacity change from 0 to 32768 [ 1837.530114][T19187] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1838.340961][T19187] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1838.599093][T19187] XFS (loop6): Ending clean mount [ 1838.663606][ T8] XFS (loop6): Corruption warning: Metadata has LSN (1:8192) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1838.750615][ T8] XFS (loop6): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 1838.810024][ T8] XFS (loop6): Unmount and run xfs_repair [ 1838.839325][ T8] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1838.886225][ T8] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1838.932981][ T8] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 20 00 .............. . [ 1838.978304][ T8] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1839.035600][ T8] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 1839.077348][ T8] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1839.129519][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1839.173877][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1839.232889][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1839.287558][T19187] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 1839.351747][T19187] XFS (loop6): Failed to initialize disk quotas. [ 1839.597662][T17428] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1840.738750][T19268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1843.813483][T19303] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1843.944336][ T3525] rtrs_client L1788: : Resolving route failed, err: -19 [ 1844.058309][T19303] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1845.714691][T19323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1847.108332][T19344] overlayfs: failed to resolve './bus': -2 [ 1847.133408][T19340] syzkaller0: entered promiscuous mode [ 1847.163378][T19340] syzkaller0: entered allmulticast mode [ 1847.380925][T19350] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1847.509259][ T11] rtrs_client L1788: : Resolving route failed, err: -19 [ 1847.693654][T19350] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1850.409362][T19383] overlayfs: failed to resolve './bus': -2 [ 1850.632009][T19386] loop6: detected capacity change from 0 to 2048 [ 1850.744577][T19386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1851.461866][ T28] audit: type=1800 audit(1794425553.822:296): pid=19390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3571" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1851.528121][ T3525] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1851.633013][ T3525] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 1851.698733][ T3525] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1851.698733][ T3525] [ 1851.767794][ T3525] EXT4-fs (loop6): Total free blocks count 0 [ 1851.793594][ T3525] EXT4-fs (loop6): Free/Dirty block details [ 1851.799846][ T3525] EXT4-fs (loop6): free_blocks=2415919504 [ 1851.851930][ T3525] EXT4-fs (loop6): dirty_blocks=4416 [ 1851.885798][ T3525] EXT4-fs (loop6): Block reservation details [ 1851.906020][ T3525] EXT4-fs (loop6): i_reserved_data_blocks=276 [ 1852.977482][ T3525] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 1853.376506][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.386724][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.418655][T18730] Bluetooth: hci1: command 0x0406 tx timeout [ 1858.056581][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1861.797155][T18730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1861.809431][T18730] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1861.822291][T18730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1861.832292][T18730] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1861.840692][T18730] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1861.848592][T18730] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1863.902425][T18730] Bluetooth: hci6: command tx timeout [ 1863.964838][T19412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1864.104661][T19460] rxe_eth0 speed is unknown, defaulting to 1000 [ 1864.241816][ T5778] IPVS: starting estimator thread 0... [ 1864.370809][T19474] IPVS: using max 36 ests per chain, 86400 per kthread [ 1865.975915][T18730] Bluetooth: hci6: command tx timeout [ 1866.857829][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3607'. [ 1867.166620][T19460] chnl_net:caif_netlink_parms(): no params data found [ 1867.628415][ T3525] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.038057][ T3525] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.051162][T18730] Bluetooth: hci6: command tx timeout [ 1868.639066][ T3525] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.103511][ T3525] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.249822][T19543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1869.345614][T19460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.068157][T19460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.118343][T19460] bridge_slave_0: entered allmulticast mode [ 1870.135491][T18730] Bluetooth: hci6: command tx timeout [ 1870.185576][T19460] bridge_slave_0: entered promiscuous mode [ 1870.216135][T19556] netlink: 'syz.7.3617': attribute type 72 has an invalid length. [ 1870.232708][T19460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.274626][T19556] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1870.296245][T19460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.443078][T19460] bridge_slave_1: entered allmulticast mode [ 1870.472745][T19460] bridge_slave_1: entered promiscuous mode [ 1871.619480][T19460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.735855][T19460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.991389][T19460] team0: Port device team_slave_0 added [ 1872.147009][T19460] team0: Port device team_slave_1 added [ 1872.293896][T19460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1872.334180][T19460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.432727][T19460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1872.509400][T19460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1872.537756][T19460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.640845][T19460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1873.183464][T19460] hsr_slave_0: entered promiscuous mode [ 1873.206466][T19460] hsr_slave_1: entered promiscuous mode [ 1873.233403][T19460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1873.257238][T19460] Cannot create hsr debugfs directory [ 1874.201399][T19460] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1874.231454][T19460] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1874.310485][T19460] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1874.344273][T19460] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1874.539912][ T3525] hsr_slave_0: left promiscuous mode [ 1874.573801][ T3525] hsr_slave_1: left promiscuous mode [ 1874.580179][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1874.602993][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1874.628028][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1874.660590][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1874.682324][ T3525] bridge_slave_1: left allmulticast mode [ 1874.688203][ T3525] bridge_slave_1: left promiscuous mode [ 1874.725806][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.754983][ T3525] bridge_slave_0: left allmulticast mode [ 1874.764870][ T3525] bridge_slave_0: left promiscuous mode [ 1874.772836][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.818440][ T3525] veth1_macvtap: left promiscuous mode [ 1874.831275][ T3525] veth0_macvtap: left promiscuous mode [ 1874.839060][ T3525] veth1_vlan: left promiscuous mode [ 1874.855377][ T3525] veth0_vlan: left promiscuous mode [ 1876.273122][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 1876.377145][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 1876.504703][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.600200][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1877.390955][ T3525] bond0 (unregistering): Released all slaves [ 1877.686155][T19460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.747973][T19460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.844635][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.852050][T16787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.957811][T14820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.967294][T14820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.098081][T19460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1878.496383][T19460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1879.012635][T19460] veth0_vlan: entered promiscuous mode [ 1879.036033][T19460] veth1_vlan: entered promiscuous mode [ 1879.119067][T19460] veth0_macvtap: entered promiscuous mode [ 1879.147444][T19460] veth1_macvtap: entered promiscuous mode [ 1879.188363][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1879.219806][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.240574][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1879.278182][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.304498][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1879.337972][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.361034][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1879.393262][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.428441][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1879.457925][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.491834][T19460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1879.526269][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1879.573572][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.593185][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1879.623382][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.655225][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1879.690741][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.708037][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1879.719416][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.735455][T19460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1879.750024][T19460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.767665][T19460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1879.826408][T19460] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.837242][T19460] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.854700][T19460] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.866158][T19460] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.088418][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.122637][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.181408][T14820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.203970][T14820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.776777][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.786063][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1944.851356][ T29] INFO: task syz.1.3299:18371 blocked for more than 143 seconds. [ 1944.859290][ T29] Not tainted syzkaller #0 [ 1944.873839][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1944.883670][ T29] task:syz.1.3299 state:D stack:27304 pid:18371 ppid:15738 flags:0x00004004 [ 1944.897978][ T29] Call Trace: [ 1944.902169][ T29] [ 1944.905110][ T29] __schedule+0x156f/0x4720 [ 1944.909775][ T29] ? asan.module_dtor+0x20/0x20 [ 1944.917974][ T29] ? mark_lock+0x94/0x320 [ 1944.923459][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1944.929593][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1944.938696][ T29] schedule+0xbd/0x170 [ 1944.943155][ T29] ? rwsem_down_read_slowpath+0x5a6/0x8e0 [ 1944.948971][ T29] schedule_preempt_disabled+0x13/0x20 [ 1944.957902][ T29] rwsem_down_read_slowpath+0x594/0x8e0 [ 1944.963823][ T29] ? down_write_killable_nested+0x230/0x230 [ 1944.969738][ T29] ? read_lock_is_recursive+0x20/0x20 [ 1944.982076][ T29] ? filemap_check_errors+0xd2/0x120 [ 1944.988098][ T29] down_read+0x98/0x2e0 [ 1944.996926][ T29] super_lock+0x189/0x390 [ 1945.002273][ T29] ? user_get_super+0x180/0x180 [ 1945.007246][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 1945.015677][ T29] ? __rwlock_init+0x150/0x150 [ 1945.021488][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1945.026833][ T29] ? do_quotactl+0x850/0x850 [ 1945.034639][ T29] iterate_supers+0x80/0x170 [ 1945.039351][ T29] __se_sys_quotactl+0x36d/0x980 [ 1945.044701][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1945.054106][ T29] ? __x64_sys_quotactl+0xb0/0xb0 [ 1945.059143][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1945.064682][ T29] do_syscall_64+0x55/0xb0 [ 1945.069124][ T29] ? clear_bhb_loop+0x40/0x90 [ 1945.077303][ T29] ? clear_bhb_loop+0x40/0x90 [ 1945.086494][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1945.101031][ T29] RIP: 0033:0x7fbdcd3a8f19 [ 1945.105478][ T29] RSP: 002b:00007fbdce1e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1945.117481][ T29] RAX: ffffffffffffffda RBX: 00007fbdcd626090 RCX: 00007fbdcd3a8f19 [ 1945.126730][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 1945.138295][ T29] RBP: 00007fbdcd437f6d R08: 0000000000000000 R09: 0000000000000000 [ 1945.146816][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1945.158430][ T29] R13: 00007fbdcd626128 R14: 00007fbdcd626090 R15: 00007ffea3071868 [ 1945.166856][ T29] [ 1945.169980][ T29] [ 1945.169980][ T29] Showing all locks held in the system: [ 1945.180350][ T29] 1 lock held by khungtaskd/29: [ 1945.185647][ T29] #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1945.206426][ T29] 2 locks held by getty/5549: [ 1945.212407][ T29] #0: ffff88814c1f70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1945.225787][ T29] #1: ffffc900032862f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x43a/0x1400 [ 1945.237257][ T29] 2 locks held by syz.3.2832/16501: [ 1945.245585][ T29] #0: ffff888032f140e0 (&type->s_umount_key#121){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1945.256951][ T29] #1: ffffffff8e3e1b88 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x53/0x1a0 [ 1945.269604][ T29] 1 lock held by syz.1.3299/18371: [ 1945.275622][ T29] #0: ffff888032f140e0 (&type->s_umount_key#121){++++}-{3:3}, at: super_lock+0x189/0x390 [ 1945.288808][ T29] [ 1945.291412][ T29] ============================================= [ 1945.291412][ T29] [ 1945.308407][ T29] NMI backtrace for cpu 0 [ 1945.312938][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1945.320161][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1945.330243][ T29] Call Trace: [ 1945.333543][ T29] [ 1945.336833][ T29] dump_stack_lvl+0x18c/0x250 [ 1945.341518][ T29] ? __wake_up_klogd+0xd9/0x100 [ 1945.346461][ T29] ? show_regs_print_info+0x20/0x20 [ 1945.351665][ T29] ? load_image+0x420/0x420 [ 1945.356189][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1945.361583][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1945.367746][ T29] ? load_image+0x420/0x420 [ 1945.372314][ T29] ? wq_watchdog_touch+0xef/0x170 [ 1945.377361][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1945.383457][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1945.389483][ T29] watchdog+0xf59/0xfa0 [ 1945.393670][ T29] ? watchdog+0x1e1/0xfa0 [ 1945.398058][ T29] kthread+0x2fa/0x390 [ 1945.402363][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1945.407515][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1945.412177][ T29] ret_from_fork+0x48/0x80 [ 1945.416649][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1945.421366][ T29] ret_from_fork_asm+0x11/0x20 [ 1945.426164][ T29] [ 1945.447947][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1945.454847][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1945.462044][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1945.472200][ T29] Call Trace: [ 1945.475491][ T29] [ 1945.478424][ T29] dump_stack_lvl+0x18c/0x250 [ 1945.483116][ T29] ? show_regs_print_info+0x20/0x20 [ 1945.488427][ T29] ? load_image+0x420/0x420 [ 1945.492946][ T29] panic+0x2ca/0x720 [ 1945.496845][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1945.501333][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1945.506873][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1945.512265][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1945.518434][ T29] watchdog+0xf98/0xfa0 [ 1945.522600][ T29] ? watchdog+0x1e1/0xfa0 [ 1945.526976][ T29] kthread+0x2fa/0x390 [ 1945.531057][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1945.536263][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1945.540867][ T29] ret_from_fork+0x48/0x80 [ 1945.545390][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1945.549989][ T29] ret_from_fork_asm+0x11/0x20 [ 1945.554788][ T29] [ 1945.557947][ T29] Kernel Offset: disabled [ 1945.562315][ T29] Rebooting in 86400 seconds..