last executing test programs: 3.934862203s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 2.329658843s ago: executing program 1 (id=11): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x10000000002}, {0x0, 0x0, 0x28, 0xfffe, 0x1000000000000101}, {&(0x7f0000000280)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 2.208651055s ago: executing program 3 (id=13): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r1, r2) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001, 0x0, 0x0, 0x0, 0xfffffffc}) lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 2.03949876s ago: executing program 0 (id=14): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0xc055}, 0x0) 1.895791513s ago: executing program 0 (id=15): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1}}, {{0x0, 0x0, 0x0}, 0x33}], 0x2, 0x2140, 0x0) close(r0) 1.692854868s ago: executing program 3 (id=16): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.634177069s ago: executing program 0 (id=17): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000100)="08352d20e329", 0x6, 0x0, 0x0, 0x4a) 1.370680066s ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x4080, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0/file1\x00', &(0x7f0000000540), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 1.302816578s ago: executing program 1 (id=19): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.160545392s ago: executing program 3 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 1.095962343s ago: executing program 0 (id=21): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3e07b7b9}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x9, 0x4, 0xffffffff, 0xe7, 0xd]}, &(0x7f0000000180)=0x54) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 991.748696ms ago: executing program 3 (id=22): syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x18}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 990.746466ms ago: executing program 1 (id=23): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) unshare(0x2040600) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) 870.558039ms ago: executing program 0 (id=24): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000046c0)) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) 840.160759ms ago: executing program 2 (id=25): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1100000000000000290000000b"], 0x30}, 0x3400c8d4) 744.275642ms ago: executing program 3 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="0200", 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)="00000080", 0x4, 0x0) 595.265815ms ago: executing program 2 (id=27): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) close(0x3) 514.197277ms ago: executing program 3 (id=28): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4075, &(0x7f0000008c80)="$eJzszzFKK1EUBuB/kszLPBkIglaCGCzsZOysZhfpJWuwslBxdmIpLsB9uAdLXYISZGI0toEg31cczpyfM/fesN3e+qZajookT/PH3SRH03RN8xmO+vz/13ZzlnKnGqROcrn+89nDRu8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsm/FKP1gNRjdJuuerk35QLcq/RZkfpLtuc14n1f4kuRumbA+L7CXT01/OGCYvSYokr0lmkw2+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Qy6+fY1/xnXf3K6v3h+na8tl+v7B7hwTAADCMBDMiEFMYjJYaPc7A/9tx9mT3Ld9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAYAAABAmL91Hu0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmwIAAP//kFMWRg==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/mnt\x00') 431.613539ms ago: executing program 1 (id=29): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'team_slave_1\x00'}}, 0x1e) 347.430961ms ago: executing program 2 (id=30): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x24004015) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000480)=""/166, 0xa6}], 0x2) 209.405175ms ago: executing program 1 (id=31): setreuid(0xee01, 0x0) r0 = getuid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = getuid() setresuid(r1, r1, 0x0) setreuid(r1, r0) 98.014378ms ago: executing program 2 (id=32): r0 = io_uring_setup(0x26a1, &(0x7f0000000580)={0x0, 0xddf9, 0x0, 0xfffffffe, 0x360}) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67529f3a1a8ca5b07dcc141802c4daff2e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x17, 0x5, "43443af4ff8c8ad271d16eb2123b3b1bd68150cf090004a3a3026f60c75585bee41b9ac4620700000022c014cc874a103a41001894a7c1b380048cb4a000", "e2e6b11135c1ce32ffcca6b388251926088888aad5f38476d7482180c177dd28f6fa00006ca0981b01ab00", "f9285f3bfe8cf7000400000000000200000000000000006e00", [0x200000000000020d, 0x8e]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 0s ago: executing program 1 (id=33): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 72.456139][ T5762] cgroup: Unknown subsys name 'net' [ 72.596521][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.332098][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.360591][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.368712][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.377917][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.386250][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.392137][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.393947][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.402710][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.408888][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.415490][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.422376][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.429995][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.436545][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.443193][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.457426][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.457791][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.465920][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.472235][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.480276][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.494359][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.503969][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.511524][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.532719][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.541236][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.549475][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.980070][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.100859][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.154953][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.166815][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.174642][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.182321][ T5776] bridge_slave_0: entered allmulticast mode [ 77.190338][ T5776] bridge_slave_0: entered promiscuous mode [ 77.217492][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.235121][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.243149][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.250580][ T5776] bridge_slave_1: entered allmulticast mode [ 77.257399][ T5776] bridge_slave_1: entered promiscuous mode [ 77.348699][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.366322][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.374004][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.383832][ T5773] bridge_slave_0: entered allmulticast mode [ 77.390896][ T5773] bridge_slave_0: entered promiscuous mode [ 77.401061][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.424358][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.432166][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.440538][ T5773] bridge_slave_1: entered allmulticast mode [ 77.447372][ T5773] bridge_slave_1: entered promiscuous mode [ 77.523737][ T5776] team0: Port device team_slave_0 added [ 77.532486][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.544468][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.563603][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.572745][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.580833][ T5775] bridge_slave_0: entered allmulticast mode [ 77.587584][ T5775] bridge_slave_0: entered promiscuous mode [ 77.597953][ T5776] team0: Port device team_slave_1 added [ 77.624143][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.631726][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.641685][ T5775] bridge_slave_1: entered allmulticast mode [ 77.648634][ T5775] bridge_slave_1: entered promiscuous mode [ 77.676490][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.684170][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.693302][ T5774] bridge_slave_0: entered allmulticast mode [ 77.701850][ T5774] bridge_slave_0: entered promiscuous mode [ 77.710206][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.717291][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.724591][ T5774] bridge_slave_1: entered allmulticast mode [ 77.731842][ T5774] bridge_slave_1: entered promiscuous mode [ 77.761833][ T5773] team0: Port device team_slave_0 added [ 77.803268][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.810474][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.836609][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.853074][ T5773] team0: Port device team_slave_1 added [ 77.861598][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.873814][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.887768][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.897889][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.907553][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.934359][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.966603][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.033079][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.040216][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.066298][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.088195][ T5774] team0: Port device team_slave_0 added [ 78.108211][ T5775] team0: Port device team_slave_0 added [ 78.116058][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.125924][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.152336][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.165447][ T5774] team0: Port device team_slave_1 added [ 78.194678][ T5775] team0: Port device team_slave_1 added [ 78.231943][ T5776] hsr_slave_0: entered promiscuous mode [ 78.239047][ T5776] hsr_slave_1: entered promiscuous mode [ 78.284866][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.291975][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.318173][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.332513][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.339840][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.366126][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.400413][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.407402][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.433739][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.446077][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.453607][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.481662][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.519532][ T5773] hsr_slave_0: entered promiscuous mode [ 78.526138][ T5773] hsr_slave_1: entered promiscuous mode [ 78.532954][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.541280][ T5773] Cannot create hsr debugfs directory [ 78.559261][ T5780] Bluetooth: hci1: command tx timeout [ 78.568492][ T5780] Bluetooth: hci0: command tx timeout [ 78.615372][ T5775] hsr_slave_0: entered promiscuous mode [ 78.622142][ T5775] hsr_slave_1: entered promiscuous mode [ 78.628288][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.636241][ T5775] Cannot create hsr debugfs directory [ 78.642146][ T5780] Bluetooth: hci3: command tx timeout [ 78.648064][ T5784] Bluetooth: hci2: command tx timeout [ 78.676216][ T5774] hsr_slave_0: entered promiscuous mode [ 78.682909][ T5774] hsr_slave_1: entered promiscuous mode [ 78.689542][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.697124][ T5774] Cannot create hsr debugfs directory [ 79.066319][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.089671][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.101438][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.113036][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.183470][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.208263][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.230562][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.242335][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.324870][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.342868][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.355508][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.365562][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.451418][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.473386][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.487330][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.516870][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.535624][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.588221][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.635258][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.646973][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.654520][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.682758][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.689966][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.706649][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.770572][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.802854][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.810017][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.823619][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.844727][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.851975][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.862221][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.869393][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.942565][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.949727][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.017416][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.118263][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.170684][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.177898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.238411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.245725][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.467097][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.576809][ T5776] veth0_vlan: entered promiscuous mode [ 80.635459][ T5776] veth1_vlan: entered promiscuous mode [ 80.640274][ T5784] Bluetooth: hci0: command tx timeout [ 80.642294][ T5780] Bluetooth: hci1: command tx timeout [ 80.671622][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.719840][ T5780] Bluetooth: hci2: command tx timeout [ 80.723385][ T5784] Bluetooth: hci3: command tx timeout [ 80.740154][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.793226][ T5776] veth0_macvtap: entered promiscuous mode [ 80.827516][ T5773] veth0_vlan: entered promiscuous mode [ 80.842195][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.850873][ T5776] veth1_macvtap: entered promiscuous mode [ 80.895862][ T5774] veth0_vlan: entered promiscuous mode [ 80.905012][ T5773] veth1_vlan: entered promiscuous mode [ 80.932529][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.945347][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.963602][ T5774] veth1_vlan: entered promiscuous mode [ 80.995115][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.004675][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.017710][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.026571][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.084143][ T5773] veth0_macvtap: entered promiscuous mode [ 81.124238][ T5773] veth1_macvtap: entered promiscuous mode [ 81.176190][ T2112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.178982][ T5775] veth0_vlan: entered promiscuous mode [ 81.191762][ T2112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.207535][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.227804][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.239534][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.263347][ T5774] veth0_macvtap: entered promiscuous mode [ 81.276756][ T5774] veth1_macvtap: entered promiscuous mode [ 81.299134][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.310020][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.322974][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.344091][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.363893][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.378135][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.387190][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.396676][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.405836][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.425351][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.436943][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.449199][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.460066][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.472349][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.480983][ T5775] veth1_vlan: entered promiscuous mode [ 81.505808][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.525896][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.536696][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.550620][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.564817][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.617739][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.637711][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.650013][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.659450][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.767449][ T2112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.781717][ T2112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.784061][ T5775] veth0_macvtap: entered promiscuous mode [ 81.826777][ T5775] veth1_macvtap: entered promiscuous mode [ 81.895800][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.896183][ T2112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.914943][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.936857][ T2112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.938694][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.957365][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.968106][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.981275][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.991375][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.002942][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.015427][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.023731][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.052792][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.070466][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.082185][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.093888][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.104053][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.114545][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.127030][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.153027][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.166451][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.175609][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.184657][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.204645][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.222065][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.273067][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.306444][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.335795][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.368998][ T5820] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 82.378141][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.424861][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.442527][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.451530][ T5820] usb 2-1: config 0 descriptor?? [ 82.584096][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.622852][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.719969][ T5784] Bluetooth: hci0: command tx timeout [ 82.730244][ T5784] Bluetooth: hci1: command tx timeout [ 82.800091][ T5784] Bluetooth: hci2: command tx timeout [ 82.800153][ T5780] Bluetooth: hci3: command tx timeout [ 82.810260][ T5849] syz.0.1[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.862647][ T5849] loop0: detected capacity change from 0 to 512 [ 82.900977][ T5849] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.913727][ T5820] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 82.919740][ T5836] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.930011][ T5820] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 82.937558][ T5820] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 82.950961][ T5820] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 82.960394][ T5820] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 82.971970][ T5820] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 82.996691][ T5820] playstation 0003:054C:09CC.0001: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 83.053101][ T5849] EXT4-fs (loop0): 1 orphan inode deleted [ 83.064799][ T5849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.081550][ T1133] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 83.097512][ T5820] playstation 0003:054C:09CC.0001: Invalid reportID received, expected 18 got 160 [ 83.101547][ T1133] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 83.107656][ T5849] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.138728][ T5820] playstation 0003:054C:09CC.0001: Failed to retrieve DualShock4 pairing info: -22 [ 83.155718][ T5820] playstation 0003:054C:09CC.0001: Failed to get MAC address from DualShock4 [ 83.178121][ T5836] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 83.186374][ T5820] playstation 0003:054C:09CC.0001: Failed to create dualshock4. [ 83.212157][ T5820] playstation: probe of 0003:054C:09CC.0001 failed with error -22 [ 83.231877][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.269861][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.321985][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 83.347962][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 83.371917][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 83.401017][ T5836] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 83.410764][ T5836] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 83.425053][ T5836] usb 3-1: Manufacturer: syz [ 83.439132][ T5836] usb 3-1: config 0 descriptor?? [ 83.450451][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.493835][ T27] usb 2-1: USB disconnect, device number 2 [ 83.653619][ T5859] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 83.907837][ T5836] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 83.918191][ T5836] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 83.972817][ T5836] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 84.303765][ T5875] loop3: detected capacity change from 0 to 512 [ 84.336860][ T5871] loop1: detected capacity change from 0 to 4096 [ 84.393109][ T5875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.429049][ T5875] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.569605][ T5882] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.650408][ T3444] tipc: Subscription rejected, illegal request [ 84.710414][ T28] audit: type=1800 audit(1786568738.073:2): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 84.744963][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.799711][ T5780] Bluetooth: hci1: command tx timeout [ 84.862727][ T5888] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 84.878713][ T5780] Bluetooth: hci2: command tx timeout [ 84.879341][ T5784] Bluetooth: hci3: command tx timeout [ 84.940043][ T174] usb 3-1: USB disconnect, device number 2 [ 85.084418][ T5893] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 85.439495][ C0] Illegal XDP return value 16128 on prog (id 3) dev lo, expect packet loss! [ 85.558052][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.718186][ T174] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.799959][ T174] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.175253][ T23] cfg80211: failed to load regulatory.db [ 133.121014][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.128174][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.563553][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570101][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.758548][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 201.765751][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 201.766625][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 236.158519][ T29] INFO: task kworker/u4:0:11 blocked for more than 143 seconds. [ 236.174936][ T29] Not tainted syzkaller #0 [ 236.180059][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.188893][ T29] task:kworker/u4:0 state:D stack:22960 pid:11 ppid:2 flags:0x00004000 [ 236.198196][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 236.208004][ T29] Call Trace: [ 236.212683][ T29] [ 236.215675][ T29] __schedule+0x15ae/0x4660 [ 236.224177][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 236.231864][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 236.238630][ T29] ? mark_lock+0x94/0x320 [ 236.243027][ T29] ? asan.module_dtor+0x20/0x20 [ 236.247921][ T29] ? blk_check_plugged+0x250/0x250 [ 236.253177][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 236.259538][ T29] ? wq_worker_sleeping+0x63/0x240 [ 236.264712][ T29] schedule+0xbd/0x170 [ 236.269912][ T29] io_schedule+0x80/0xd0 [ 236.274216][ T29] bit_wait_io+0x11/0xd0 [ 236.278558][ T29] __wait_on_bit+0x9f/0x2c0 [ 236.283107][ T29] ? bit_wait+0xd0/0xd0 [ 236.287399][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 236.293048][ T29] ? bit_wait+0xd0/0xd0 [ 236.297249][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 236.302143][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 236.307221][ T29] ? bit_waitqueue+0x30/0x30 [ 236.311923][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 236.317179][ T29] do_get_write_access+0x5c9/0xe00 [ 236.323049][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 236.329281][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 236.335517][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 236.341913][ T29] ? ext4_get_group_desc+0x10e/0x4d0 [ 236.347262][ T29] ext4_mb_mark_diskspace_used+0x27c/0x14b0 [ 236.353251][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 236.358490][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 236.364705][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 236.372296][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 236.377389][ T29] ? rcu_is_watching+0x15/0xb0 [ 236.385763][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 236.393459][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 236.401201][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 236.406555][ T29] ? __might_sleep+0xe0/0xe0 [ 236.412045][ T29] ? ext4_ext_release+0x10/0x10 [ 236.416986][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 236.422220][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 236.427719][ T29] ext4_map_blocks+0x9db/0x1a90 [ 236.433502][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 236.438817][ T29] ? rcu_is_watching+0x15/0xb0 [ 236.443644][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 236.449383][ T29] ext4_do_writepages+0x1463/0x3990 [ 236.454641][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 236.461617][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 236.467104][ T29] ? __lock_acquire+0x1336/0x7d80 [ 236.472217][ T29] ext4_writepages+0x1dd/0x350 [ 236.477677][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 236.482997][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 236.488451][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 236.493877][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 236.499237][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 236.504200][ T29] do_writepages+0x351/0x590 [ 236.508881][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 236.514723][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 236.520205][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 236.525269][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 236.530378][ T29] __writeback_single_inode+0x14e/0xee0 [ 236.535959][ T29] writeback_sb_inodes+0x813/0x1020 [ 236.541307][ T29] ? queue_io+0x530/0x530 [ 236.545719][ T29] __writeback_inodes_wb+0x114/0x240 [ 236.551196][ T29] wb_writeback+0x472/0xbe0 [ 236.555734][ T29] ? queue_io+0x2e1/0x530 [ 236.560380][ T29] ? percpu_ref_tryget+0x250/0x250 [ 236.565530][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 236.571565][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 236.577295][ T29] wb_workfn+0xad7/0xe60 [ 236.581665][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 236.587430][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 236.593476][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 236.598608][ T29] ? read_lock_is_recursive+0x20/0x20 [ 236.604009][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.609271][ T29] ? process_scheduled_works+0x975/0x1600 [ 236.615024][ T29] ? process_scheduled_works+0x975/0x1600 [ 236.620862][ T29] process_scheduled_works+0xa60/0x1600 [ 236.626466][ T29] ? worker_attach_to_pool+0x370/0x370 [ 236.632029][ T29] ? assign_work+0x3cc/0x5d0 [ 236.636650][ T29] worker_thread+0xa5e/0xfe0 [ 236.641393][ T29] kthread+0x2fa/0x390 [ 236.645486][ T29] ? pr_cont_work+0x550/0x550 [ 236.650211][ T29] ? kthread_blkcg+0xd0/0xd0 [ 236.654839][ T29] ret_from_fork+0x48/0x80 [ 236.659356][ T29] ? kthread_blkcg+0xd0/0xd0 [ 236.663987][ T29] ret_from_fork_asm+0x11/0x20 [ 236.668938][ T29] [ 236.672021][ T29] INFO: task jbd2/sda1-8:5102 blocked for more than 143 seconds. [ 236.680889][ T29] Not tainted syzkaller #0 [ 236.685865][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.694753][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5102 ppid:2 flags:0x00004000 [ 236.704087][ T29] Call Trace: [ 236.707388][ T29] [ 236.710527][ T29] __schedule+0x15ae/0x4660 [ 236.715080][ T29] ? asan.module_dtor+0x20/0x20 [ 236.720418][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 236.725589][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 236.731543][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 236.736781][ T29] schedule+0xbd/0x170 [ 236.740947][ T29] io_schedule+0x80/0xd0 [ 236.745222][ T29] bit_wait_io+0x11/0xd0 [ 236.749532][ T29] __wait_on_bit+0x9f/0x2c0 [ 236.754064][ T29] ? bit_wait+0xd0/0xd0 [ 236.758240][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 236.763821][ T29] ? bit_wait+0xd0/0xd0 [ 236.768005][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 236.772851][ T29] ? do_raw_write_lock+0x11e/0x260 [ 236.777994][ T29] ? bit_waitqueue+0x30/0x30 [ 236.783786][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 236.788922][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 236.795350][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 236.802333][ T29] ? lock_chain_count+0x20/0x20 [ 236.807230][ T29] ? _raw_spin_unlock+0x40/0x40 [ 236.812152][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 236.817841][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 236.823212][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 236.828336][ T29] ? timer_delete_sync+0x20/0x20 [ 236.833314][ T29] ? do_raw_read_unlock+0x80/0x80 [ 236.838437][ T29] ? prepare_to_wait+0x1aa/0x200 [ 236.843407][ T29] kjournald2+0x40f/0x810 [ 236.847775][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 236.853059][ T29] ? wake_bit_function+0x200/0x200 [ 236.858195][ T29] ? _raw_spin_unlock+0x40/0x40 [ 236.863113][ T29] ? __kthread_parkme+0x71/0x1c0 [ 236.868076][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 236.873159][ T29] kthread+0x2fa/0x390 [ 236.877268][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 236.883588][ T29] ? kthread_blkcg+0xd0/0xd0 [ 236.888242][ T29] ret_from_fork+0x48/0x80 [ 236.892788][ T29] ? kthread_blkcg+0xd0/0xd0 [ 236.897682][ T29] ret_from_fork_asm+0x11/0x20 [ 236.902569][ T29] [ 236.905651][ T29] INFO: task syz.0.24:5909 blocked for more than 144 seconds. [ 236.913201][ T29] Not tainted syzkaller #0 [ 236.918168][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.926927][ T29] task:syz.0.24 state:D stack:27048 pid:5909 ppid:5775 flags:0x00004004 [ 236.936222][ T29] Call Trace: [ 236.939612][ T29] [ 236.942591][ T29] __schedule+0x15ae/0x4660 [ 236.947142][ T29] ? mark_lock+0x94/0x320 [ 236.951523][ T29] ? asan.module_dtor+0x20/0x20 [ 236.956488][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 236.961673][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 236.967606][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 236.972889][ T29] schedule+0xbd/0x170 [ 236.977162][ T29] io_schedule+0x80/0xd0 [ 236.981490][ T29] bit_wait_io+0x11/0xd0 [ 236.986439][ T29] __wait_on_bit+0x9f/0x2c0 [ 236.991049][ T29] ? bit_wait+0xd0/0xd0 [ 236.995250][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 237.000837][ T29] ? bit_wait+0xd0/0xd0 [ 237.005051][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 237.009880][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 237.014940][ T29] ? bit_waitqueue+0x30/0x30 [ 237.019646][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 237.024895][ T29] do_get_write_access+0x5c9/0xe00 [ 237.030090][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 237.036120][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 237.042542][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 237.048869][ T29] ? __might_sleep+0xe0/0xe0 [ 237.053509][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 237.059170][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 237.064687][ T29] ext4_dirty_inode+0xcb/0x110 [ 237.069578][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 237.075515][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 237.080622][ T29] file_update_time+0x187/0x1a0 [ 237.085522][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 237.091794][ T29] ? filemap_fault+0x103c/0x1540 [ 237.096790][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 237.102641][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 237.108985][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.114068][ T29] ? __pte_offset_map+0x20d/0x280 [ 237.119305][ T29] do_page_mkwrite+0x153/0x3f0 [ 237.124205][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 237.129247][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 237.134218][ T29] ? numa_migrate_prep+0x350/0x350 [ 237.139505][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 237.144917][ T29] do_user_addr_fault+0x736/0x12d0 [ 237.150131][ T29] exc_page_fault+0x64/0x100 [ 237.154765][ T29] ? clear_bhb_loop+0x40/0x90 [ 237.159528][ T29] asm_exc_page_fault+0x26/0x30 [ 237.164403][ T29] RIP: 0033:0x7fd085c72eb2 [ 237.168892][ T29] RSP: 002b:00007fffb4479dc0 EFLAGS: 00010202 [ 237.175001][ T29] RAX: 0000000000002008 RBX: 00007fd086b55720 RCX: 0000000000000000 [ 237.183530][ T29] RDX: 0000001b2db22000 RSI: 0000000000000008 RDI: 00007fd086b55720 [ 237.192670][ T29] RBP: 000000000000027e R08: 00007fd086010000 R09: 00007fd086026128 [ 237.205362][ T29] R10: 0000000000000003 R11: 0000000000000003 R12: ffffffff81f352d8 [ 237.213436][ T29] R13: 00007fd086026128 R14: 0000000000000121 R15: ffffffffffffe000 [ 237.221466][ T29] ? step_into+0x668/0xee0 [ 237.225936][ T29] [ 237.229044][ T29] INFO: task syz.3.28:5919 blocked for more than 144 seconds. [ 237.236517][ T29] Not tainted syzkaller #0 [ 237.241524][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.250252][ T29] task:syz.3.28 state:D stack:27048 pid:5919 ppid:5773 flags:0x00004004 [ 237.259571][ T29] Call Trace: [ 237.262892][ T29] [ 237.265863][ T29] __schedule+0x15ae/0x4660 [ 237.270502][ T29] ? mark_lock+0x94/0x320 [ 237.274862][ T29] ? asan.module_dtor+0x20/0x20 [ 237.279962][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.285024][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 237.291205][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 237.297126][ T29] schedule+0xbd/0x170 [ 237.301462][ T29] io_schedule+0x80/0xd0 [ 237.305772][ T29] bit_wait_io+0x11/0xd0 [ 237.310084][ T29] __wait_on_bit+0x9f/0x2c0 [ 237.314627][ T29] ? bit_wait+0xd0/0xd0 [ 237.318855][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 237.324358][ T29] ? bit_wait+0xd0/0xd0 [ 237.328578][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 237.333368][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 237.338583][ T29] ? bit_waitqueue+0x30/0x30 [ 237.343201][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 237.348479][ T29] do_get_write_access+0x5c9/0xe00 [ 237.353630][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 237.359816][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 237.366184][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 237.372413][ T29] ? __might_sleep+0xe0/0xe0 [ 237.377057][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 237.382747][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 237.388555][ T29] ext4_dirty_inode+0xcb/0x110 [ 237.393350][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 237.400125][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 237.405199][ T29] file_update_time+0x187/0x1a0 [ 237.410148][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 237.415423][ T29] ? filemap_fault+0x103c/0x1540 [ 237.420527][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 237.426295][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 237.432621][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.437675][ T29] ? __pte_offset_map+0x20d/0x280 [ 237.442913][ T29] do_page_mkwrite+0x153/0x3f0 [ 237.447816][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 237.452836][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 237.457810][ T29] ? numa_migrate_prep+0x350/0x350 [ 237.463008][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 237.468379][ T29] do_user_addr_fault+0x736/0x12d0 [ 237.473627][ T29] exc_page_fault+0x64/0x100 [ 237.478456][ T29] ? clear_bhb_loop+0x40/0x90 [ 237.483365][ T29] asm_exc_page_fault+0x26/0x30 [ 237.488228][ T29] RIP: 0033:0x7f5ecaa72eb2 [ 237.492738][ T29] RSP: 002b:00007fffc211d990 EFLAGS: 00010202 [ 237.499640][ T29] RAX: 0000000000005008 RBX: 00007f5ecb955720 RCX: 0000000000000000 [ 237.507647][ T29] RDX: 0000001b2de1f000 RSI: 0000000000000008 RDI: 00007f5ecb955720 [ 237.515695][ T29] RBP: 000000000000031b R08: 00007f5ecae10000 R09: 00007f5ecae26128 [ 237.524645][ T29] R10: 0000000000000003 R11: 0000000000000004 R12: ffffffff84307b05 [ 237.532701][ T29] R13: 00007f5ecae26128 R14: 00000000000000a5 R15: ffffffffffffb000 [ 237.540753][ T29] ? __bitmap_clear+0x155/0x170 [ 237.545702][ T29] [ 237.548782][ T29] INFO: task syz.2.32:5927 blocked for more than 144 seconds. [ 237.556261][ T29] Not tainted syzkaller #0 [ 237.561307][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.570066][ T29] task:syz.2.32 state:D stack:27048 pid:5927 ppid:5774 flags:0x00004004 [ 237.579907][ T29] Call Trace: [ 237.583313][ T29] [ 237.586346][ T29] __schedule+0x15ae/0x4660 [ 237.591016][ T29] ? mark_lock+0x94/0x320 [ 237.595408][ T29] ? asan.module_dtor+0x20/0x20 [ 237.601753][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.606853][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 237.612950][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 237.618204][ T29] schedule+0xbd/0x170 [ 237.622763][ T29] io_schedule+0x80/0xd0 [ 237.627049][ T29] bit_wait_io+0x11/0xd0 [ 237.631381][ T29] __wait_on_bit+0x9f/0x2c0 [ 237.635915][ T29] ? bit_wait+0xd0/0xd0 [ 237.640338][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 237.646123][ T29] ? bit_wait+0xd0/0xd0 [ 237.650381][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 237.655296][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 237.660428][ T29] ? bit_waitqueue+0x30/0x30 [ 237.665159][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 237.671032][ T29] do_get_write_access+0x5c9/0xe00 [ 237.676247][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 237.683325][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 237.689648][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 237.695939][ T29] ? __might_sleep+0xe0/0xe0 [ 237.700719][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 237.707093][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 237.713524][ T29] ext4_dirty_inode+0xcb/0x110 [ 237.718408][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 237.724260][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 237.729412][ T29] file_update_time+0x187/0x1a0 [ 237.734333][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 237.739485][ T29] ? filemap_fault+0x103c/0x1540 [ 237.744463][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 237.750318][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 237.756686][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.761939][ T29] ? __pte_offset_map+0x20d/0x280 [ 237.767008][ T29] do_page_mkwrite+0x153/0x3f0 [ 237.771905][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 237.776894][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 237.781994][ T29] ? numa_migrate_prep+0x350/0x350 [ 237.787155][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 237.792552][ T29] do_user_addr_fault+0x736/0x12d0 [ 237.797728][ T29] exc_page_fault+0x64/0x100 [ 237.802530][ T29] asm_exc_page_fault+0x26/0x30 [ 237.808087][ T29] RIP: 0033:0x7f7aed872eb2 [ 237.812603][ T29] RSP: 002b:00007ffcd541e870 EFLAGS: 00010202 [ 237.818809][ T29] RAX: 0000000000003008 RBX: 00007f7aee755720 RCX: 0000000000000000 [ 237.826893][ T29] RDX: 0000001b2dd21000 RSI: 0000000000000008 RDI: 00007f7aee755720 [ 237.834953][ T29] RBP: 00000000000002ef R08: 00007f7aedc10000 R09: 00007f7aedc26038 [ 237.843131][ T29] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff81f5a842 [ 237.851242][ T29] R13: 00007f7aedc26038 R14: 000000000000017c R15: ffffffffffffd000 [ 237.859308][ T29] ? __d_add+0x402/0x7e0 [ 237.863585][ T29] [ 237.866612][ T29] INFO: task syz.1.33:5930 blocked for more than 145 seconds. [ 237.874114][ T29] Not tainted syzkaller #0 [ 237.879299][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.887980][ T29] task:syz.1.33 state:D stack:26328 pid:5930 ppid:5776 flags:0x00004004 [ 237.897268][ T29] Call Trace: [ 237.900621][ T29] [ 237.903577][ T29] __schedule+0x15ae/0x4660 [ 237.909421][ T29] ? mark_lock+0x94/0x320 [ 237.913812][ T29] ? asan.module_dtor+0x20/0x20 [ 237.918864][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.923944][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 237.929947][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 237.935207][ T29] schedule+0xbd/0x170 [ 237.939374][ T29] io_schedule+0x80/0xd0 [ 237.943645][ T29] bit_wait_io+0x11/0xd0 [ 237.947900][ T29] __wait_on_bit+0x9f/0x2c0 [ 237.952491][ T29] ? bit_wait+0xd0/0xd0 [ 237.956680][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 237.962239][ T29] ? bit_wait+0xd0/0xd0 [ 237.966425][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 237.971354][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 237.976445][ T29] ? bit_waitqueue+0x30/0x30 [ 237.981120][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 237.986369][ T29] do_get_write_access+0x5c9/0xe00 [ 237.991552][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 237.997670][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 238.003988][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 238.011047][ T29] ? __might_sleep+0xe0/0xe0 [ 238.015782][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 238.021568][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 238.027065][ T29] ext4_dirty_inode+0xcb/0x110 [ 238.032061][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 238.037901][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 238.043050][ T29] file_update_time+0x187/0x1a0 [ 238.047968][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 238.053065][ T29] ? filemap_fault+0x103c/0x1540 [ 238.058049][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 238.064291][ T29] ? pte_alloc_one+0x3b6/0x540 [ 238.069151][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 238.075458][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 238.080681][ T29] do_page_mkwrite+0x153/0x3f0 [ 238.085602][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 238.090642][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 238.095723][ T29] ? numa_migrate_prep+0x350/0x350 [ 238.101028][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 238.106363][ T29] do_user_addr_fault+0x736/0x12d0 [ 238.112636][ T29] exc_page_fault+0x64/0x100 [ 238.117271][ T29] ? clear_bhb_loop+0x40/0x90 [ 238.122405][ T29] asm_exc_page_fault+0x26/0x30 [ 238.127295][ T29] RIP: 0033:0x7febb0c6ba23 [ 238.131800][ T29] RSP: 002b:00007ffc679b4490 EFLAGS: 00010246 [ 238.138071][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d664000 [ 238.146167][ T29] RDX: 0000001b2d624000 RSI: 0000000000600000 RDI: 00007febb0fe0708 [ 238.154466][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.162611][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 238.170640][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc679b4720 [ 238.178727][ T29] [ 238.181785][ T29] [ 238.181785][ T29] Showing all locks held in the system: [ 238.189560][ T29] 7 locks held by kworker/u4:0/11: [ 238.194702][ T29] #0: ffff88801b649938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 238.206205][ T29] #1: ffffc90000107d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 238.220099][ T29] #2: ffff88814dfe80e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 238.230921][ T29] #3: ffff88814dfeac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 238.243179][ T29] #4: ffff88814dfec990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 238.253204][ T29] #5: ffff88807f662a88 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 238.263186][ T29] #6: ffffe8ffffc1fbf8 (&lg->lg_mutex){+.+.}-{3:3}, at: ext4_mb_initialize_context+0x8af/0xc80 [ 238.273771][ T29] 1 lock held by khungtaskd/29: [ 238.278802][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 238.288892][ T29] 4 locks held by kworker/u4:10/4894: [ 238.294289][ T29] #0: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 238.304534][ T29] #1: ffff8880b8f28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 238.313418][ T29] #2: ffff8880b8f295d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 238.324118][ T29] #3: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 238.334191][ T29] 2 locks held by getty/5536: [ 238.339607][ T29] #0: ffff88802d5a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 238.349600][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 238.359916][ T29] 3 locks held by syz-executor/5762: [ 238.365823][ T29] #0: ffff888076f373a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 238.376250][ T29] #1: ffff88814dfe8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 238.386252][ T29] #2: ffff88814dfec990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 238.396124][ T29] 3 locks held by syz.0.24/5909: [ 238.401264][ T29] #0: ffff888025a114a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 238.411644][ T29] #1: ffff88814dfe8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 238.422348][ T29] #2: ffff88814dfec990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 238.432315][ T29] 3 locks held by syz.3.28/5919: [ 238.437359][ T29] #0: ffff8880256e9e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 238.447366][ T29] #1: ffff88814dfe8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 238.457206][ T29] #2: ffff88814dfec990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 238.466948][ T29] 3 locks held by syz.2.32/5927: [ 238.471951][ T29] #0: ffff88807aaa1e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 238.482023][ T29] #1: ffff88814dfe8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 238.491976][ T29] #2: ffff88814dfec990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 238.501972][ T29] 3 locks held by syz.1.33/5930: [ 238.506947][ T29] #0: ffff888025a101a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 238.516980][ T29] #1: ffff88814dfe8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 238.527554][ T29] #2: ffff88814dfec990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 238.537399][ T29] [ 238.539798][ T29] ============================================= [ 238.539798][ T29] [ 238.548201][ T29] NMI backtrace for cpu 0 [ 238.552881][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 238.560121][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.570221][ T29] Call Trace: [ 238.573536][ T29] [ 238.576500][ T29] dump_stack_lvl+0x18c/0x250 [ 238.581443][ T29] ? __wake_up_klogd+0xd9/0x100 [ 238.586299][ T29] ? show_regs_print_info+0x20/0x20 [ 238.591523][ T29] ? load_image+0x420/0x420 [ 238.596065][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 238.601019][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 238.607220][ T29] ? load_image+0x420/0x420 [ 238.611740][ T29] ? wq_watchdog_touch+0xef/0x170 [ 238.616805][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 238.622925][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 238.628937][ T29] watchdog+0xf59/0xfa0 [ 238.633304][ T29] ? watchdog+0x1e1/0xfa0 [ 238.637662][ T29] kthread+0x2fa/0x390 [ 238.641750][ T29] ? hungtask_pm_notify+0x50/0x50 [ 238.646788][ T29] ? kthread_blkcg+0xd0/0xd0 [ 238.651575][ T29] ret_from_fork+0x48/0x80 [ 238.656004][ T29] ? kthread_blkcg+0xd0/0xd0 [ 238.660610][ T29] ret_from_fork_asm+0x11/0x20 [ 238.665400][ T29] [ 238.669682][ T29] Sending NMI from CPU 0 to CPUs 1: [ 238.674938][ C1] NMI backtrace for cpu 1 [ 238.674950][ C1] CPU: 1 PID: 2112 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 238.674965][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.674974][ C1] Workqueue: bat_events batadv_nc_worker [ 238.674997][ C1] RIP: 0010:__lock_acquire+0xd5b/0x7d80 [ 238.675019][ C1] Code: 48 89 de ba 08 00 00 00 e8 d2 ab 00 00 85 c0 0f 84 5e 09 00 00 48 c7 c0 80 44 2f 97 48 c1 e8 03 49 b8 00 00 00 00 00 fc ff df <42> 0f b6 04 00 84 c0 0f 85 6c 0e 00 00 83 3d a1 ac c6 15 00 48 8b [ 238.675031][ C1] RSP: 0018:ffffc90005117700 EFLAGS: 00000806 [ 238.675044][ C1] RAX: 1ffffffff2e5e890 RBX: ffff88802671e538 RCX: ffffffff81694414 [ 238.675054][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911ed5d8 [ 238.675064][ C1] RBP: ffffc90005117948 R08: dffffc0000000000 R09: 1ffffffff223dabb [ 238.675074][ C1] R10: dffffc0000000000 R11: fffffbfff223dabc R12: 0000000000000000 [ 238.675084][ C1] R13: ffff88802671da00 R14: ffffffff90badb20 R15: ffff88802671e558 [ 238.675094][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 238.675107][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.675118][ C1] CR2: 000055839c1fa0d0 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 238.675134][ C1] Call Trace: [ 238.675139][ C1] [ 238.675145][ C1] ? look_up_lock_class+0x75/0x140 [ 238.675189][ C1] ? verify_lock_unused+0x140/0x140 [ 238.675210][ C1] ? __mod_timer+0x9b0/0xd60 [ 238.675224][ C1] ? verify_lock_unused+0x140/0x140 [ 238.675242][ C1] lock_acquire+0x19e/0x420 [ 238.675258][ C1] ? batadv_nc_purge_paths+0xe2/0x3a0 [ 238.675279][ C1] ? read_lock_is_recursive+0x20/0x20 [ 238.675294][ C1] ? __local_bh_disable_ip+0x115/0x1a0 [ 238.675310][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 238.675325][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 238.675339][ C1] ? _local_bh_enable+0xa0/0xa0 [ 238.675355][ C1] ? batadv_nc_purge_paths+0xe2/0x3a0 [ 238.675371][ C1] _raw_spin_lock_bh+0x36/0x50 [ 238.675393][ C1] ? batadv_nc_purge_paths+0xe2/0x3a0 [ 238.675408][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 238.675425][ C1] batadv_nc_purge_paths+0xe2/0x3a0 [ 238.675443][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 238.675462][ C1] batadv_nc_worker+0x363/0x600 [ 238.675479][ C1] ? process_scheduled_works+0x975/0x1600 [ 238.675498][ C1] process_scheduled_works+0xa60/0x1600 [ 238.675525][ C1] ? worker_attach_to_pool+0x370/0x370 [ 238.675545][ C1] ? assign_work+0x3cc/0x5d0 [ 238.675565][ C1] worker_thread+0xa5e/0xfe0 [ 238.675591][ C1] kthread+0x2fa/0x390 [ 238.675605][ C1] ? pr_cont_work+0x550/0x550 [ 238.675622][ C1] ? kthread_blkcg+0xd0/0xd0 [ 238.675636][ C1] ret_from_fork+0x48/0x80 [ 238.675653][ C1] ? kthread_blkcg+0xd0/0xd0 [ 238.675667][ C1] ret_from_fork_asm+0x11/0x20 [ 238.675691][ C1] [ 238.964193][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 238.971071][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 238.978285][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.988365][ T29] Call Trace: [ 238.991665][ T29] [ 238.994604][ T29] dump_stack_lvl+0x18c/0x250 [ 238.999296][ T29] ? show_regs_print_info+0x20/0x20 [ 239.004493][ T29] ? load_image+0x420/0x420 [ 239.009021][ T29] panic+0x2ca/0x720 [ 239.012940][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 239.017442][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 239.023027][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 239.028513][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 239.034811][ T29] watchdog+0xf98/0xfa0 [ 239.039008][ T29] ? watchdog+0x1e1/0xfa0 [ 239.043374][ T29] kthread+0x2fa/0x390 [ 239.047446][ T29] ? hungtask_pm_notify+0x50/0x50 [ 239.052496][ T29] ? kthread_blkcg+0xd0/0xd0 [ 239.057085][ T29] ret_from_fork+0x48/0x80 [ 239.061503][ T29] ? kthread_blkcg+0xd0/0xd0 [ 239.066095][ T29] ret_from_fork_asm+0x11/0x20 [ 239.070880][ T29] [ 239.074055][ T29] Kernel Offset: disabled [ 239.078381][ T29] Rebooting in 86400 seconds..