last executing test programs: 6m0.161915507s ago: executing program 32 (id=69): ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x9, 0xeeef0000, 0x0, 0xffffffffffffffff, 0xf}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0xfffffffd}) 5m27.209608625s ago: executing program 33 (id=214): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x48) 5m12.611721142s ago: executing program 34 (id=289): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000080)=0x1, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000a92000/0x1000)=nil, 0x1000}}) 4m31.563991299s ago: executing program 35 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x43000000) 4m6.611563058s ago: executing program 36 (id=641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6c382ccb69434f02", "a6b3b6be08c3ba02e945de45490efc0ef54528d6726a902093be2838c1ed2264", "d9d1f4c2", "cbde04a76efcf227"}, 0x38) 4m3.597798883s ago: executing program 37 (id=657): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000900)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "600cc2", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @empty}}}}, 0x0) 3m52.136095103s ago: executing program 38 (id=693): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=@base={0xa, 0x5, 0x2, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 3m28.253207297s ago: executing program 39 (id=837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4) 3m17.416573267s ago: executing program 40 (id=890): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) 2m59.301181935s ago: executing program 8 (id=974): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r0, 0x1000) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2m59.114874598s ago: executing program 8 (id=975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x82}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000) 2m58.639556745s ago: executing program 8 (id=978): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x3, 0xff, 0x267e}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2m58.421602578s ago: executing program 8 (id=981): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x5, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x202]}) open(&(0x7f0000000080)='./file1\x00', 0x103000, 0x2) mount(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x10001, 0x0) 2m57.769627538s ago: executing program 8 (id=984): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 2m57.309564925s ago: executing program 8 (id=986): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xc}) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 2m56.831928882s ago: executing program 41 (id=986): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xc}) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 2m45.924551313s ago: executing program 9 (id=1011): r0 = io_uring_setup(0x612, &(0x7f0000000000)={0x0, 0x599e, 0x2, 0x1, 0x27c}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006140)={0x2020}, 0x2048) 2m45.694996267s ago: executing program 9 (id=1013): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44) 2m44.386179456s ago: executing program 9 (id=1020): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m43.986486272s ago: executing program 9 (id=1023): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4, &(0x7f00000001c0)={[{@gid}, {@unhide}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@gid}, {@adinicb}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0xff, 0xc53, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m43.278528983s ago: executing program 9 (id=1027): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x250}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 2m42.494395374s ago: executing program 9 (id=1029): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept(r1, 0x0, 0x0) 2m41.591552437s ago: executing program 42 (id=1029): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept(r1, 0x0, 0x0) 2m25.143333431s ago: executing program 3 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = eventfd(0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x202, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3, 0x1, 0x3, r3}) 2m24.55530986s ago: executing program 3 (id=1103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m23.299614129s ago: executing program 3 (id=1112): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2m20.752234156s ago: executing program 3 (id=1115): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48cf, &(0x7f0000000640)={[{@shortname_winnt}, {}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@discard}, {@fat=@check_strict}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 2m20.595515678s ago: executing program 3 (id=1116): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x1, 0x1, 0x5, 0x0, 0x200000004, 0x4000000, 0x0, 0x2, 0x4040c405}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) 2m20.364451581s ago: executing program 3 (id=1117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2m19.749487551s ago: executing program 43 (id=1117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2m6.496898917s ago: executing program 0 (id=1175): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="a8cf4658948b", 0x6, 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x2, 0x4) 2m5.564450611s ago: executing program 0 (id=1169): r0 = epoll_create1(0x0) r1 = eventfd2(0xffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)={0xa0001011}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x0, 0x13b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m5.234888346s ago: executing program 0 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000ed25c9da062f88000700000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 2m4.95536247s ago: executing program 0 (id=1171): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0xc528e55e2dfffe0e, &(0x7f0000000a80), 0x0, 0xbcd, &(0x7f00000014c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001480)='./file0/../file0/../file0/../file0\x00') 2m4.338647109s ago: executing program 0 (id=1173): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 2m3.842261936s ago: executing program 0 (id=1177): syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x101a41) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m3.340321754s ago: executing program 44 (id=1177): syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x101a41) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m50.378615576s ago: executing program 5 (id=1235): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fd", 0x42, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m50.185863308s ago: executing program 5 (id=1236): setresuid(0xee01, 0x0, 0x0) setpriority(0x0, 0x0, 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0xfffffffffffffdf3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000001000000d08b0100f1080000184900000300000000000000000000001547c0fffc01000011880200f0ffffff15000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x164d, 0x8b, &(0x7f0000000140)=""/139, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x10, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rpcb_setport\x00', r0, 0x0, 0x5}, 0x18) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') 1m50.021408051s ago: executing program 5 (id=1237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xf1, {0x77359400}, {0x77359400}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) 1m49.829354554s ago: executing program 5 (id=1238): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m49.662504166s ago: executing program 5 (id=1239): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x10000000}}]}}) 1m49.219133533s ago: executing program 5 (id=1241): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0x1, "0062ba7d82000000000000000000f7ffffff00"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) read(r2, 0x0, 0x0) 1m48.74947542s ago: executing program 45 (id=1241): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0x1, "0062ba7d82000000000000000000f7ffffff00"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) read(r2, 0x0, 0x0) 1m30.379596762s ago: executing program 4 (id=943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) unshare(0x20040600) fchmodat(0xffffffffffffff9c, 0x0, 0x278) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 1m12.896331111s ago: executing program 4 (id=943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) unshare(0x20040600) fchmodat(0xffffffffffffff9c, 0x0, 0x278) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 59.614878077s ago: executing program 2 (id=1427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 58.209519818s ago: executing program 2 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TCSETSW2(r2, 0x5425, 0x0) 58.146250499s ago: executing program 4 (id=943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) unshare(0x20040600) fchmodat(0xffffffffffffff9c, 0x0, 0x278) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 56.949619017s ago: executing program 2 (id=1432): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r4, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 56.772491369s ago: executing program 2 (id=1433): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 56.661960331s ago: executing program 2 (id=1434): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='^', 0xffc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="61b7", 0x2}], 0x1}}], 0x2, 0x20048045) 56.174931198s ago: executing program 2 (id=1438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x101, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000035400)=[{{0x0, 0x0, 0x0}, 0xda6c}], 0x1, 0x40012002, 0x0) 55.983718241s ago: executing program 46 (id=1438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x101, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000035400)=[{{0x0, 0x0, 0x0}, 0xda6c}], 0x1, 0x40012002, 0x0) 45.154321572s ago: executing program 4 (id=943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) unshare(0x20040600) fchmodat(0xffffffffffffff9c, 0x0, 0x278) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 33.034867601s ago: executing program 4 (id=943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) unshare(0x20040600) fchmodat(0xffffffffffffff9c, 0x0, 0x278) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 30.772667494s ago: executing program 1 (id=1560): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) sendmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000007c0)="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", 0x841}], 0x1, &(0x7f0000000200), 0x0, 0x10}}], 0x1, 0x80) 30.698372136s ago: executing program 1 (id=1561): pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x82, &(0x7f0000000300)={r2, 0x2, 0x5, 0x0, 0x8, 0x1000, 0x9, 0x7f, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x6, 0x8, 0x7, 0x9, 0x100}}, &(0x7f0000000040)=0xb0) 29.73508736s ago: executing program 1 (id=1566): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x10) 29.69998459s ago: executing program 1 (id=1567): socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 26.976075081s ago: executing program 1 (id=1577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec90806fbe863cac50580cd", 0x16}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad", 0x14}], 0x2) 17.891508525s ago: executing program 4 (id=943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) unshare(0x20040600) fchmodat(0xffffffffffffff9c, 0x0, 0x278) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 15.830213706s ago: executing program 1 (id=1577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec90806fbe863cac50580cd", 0x16}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad", 0x14}], 0x2) 1.854829282s ago: executing program 6 (id=1677): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000033bc0e00000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r2}) 1.791143234s ago: executing program 6 (id=1678): syz_mount_image$fuse(0x0, 0x0, 0x40030, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',ro'], 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.585389047s ago: executing program 6 (id=1679): r0 = io_uring_setup(0x355b, &(0x7f0000000140)={0x0, 0xe24b, 0x10, 0x5, 0x4000020}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 1.419110879s ago: executing program 6 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4b, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) 1.32091002s ago: executing program 7 (id=1681): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 1.184835922s ago: executing program 7 (id=1682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x20001, 0x0, [0x4, 0x6, 0x7, 0x1000, 0x0, 0x100, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.046074045s ago: executing program 6 (id=1683): r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f00000011c0)=ANY=[@ANYBLOB='lock io'], 0xc) close_range(r2, 0xffffffffffffffff, 0x0) 871.569927ms ago: executing program 6 (id=1684): syz_mount_image$ocfs2(&(0x7f00000011c0), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f00000012c0)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@intr}, {@resv_level={'resv_level', 0x3d, 0x5}}, {@localflocks}, {@commit={'commit', 0x3d, 0x3ff}}, {@data_writeback}]}, 0x9, 0x4430, &(0x7f0000001380)="$eJzs3c9PXNUeAPBzL/QV+to+6OuiL3nJm+Q1MVFDoCuVJlJKS6HFmmob42Y6wLRFB6aBwbjoAndNXJm4MC4aTdyxali4rX+CG5d13agLNyYmjZiZuQNzL4yMhAFbP58Fl3t+D997z5y7uJw4Ubkzt5SbW8oVFnLlmVtLZ3IflEvL88UQ75Nt+z+0f/3Tnk5cJwd97f2dXT1/8a0bZ0L4Zva7J+vr6+uhqjskotBsqOn3X36+N9N8bIhDWrXd0FHvhhBObhlXVVcI4Z2v65/iXJI2mhx7QwjHkk94497HN3N7NJqHj4tn80+n7q8Nn55cfbDW+rNHIXxe+s/Lt+d//H/X8Pcv7lH3AAAAAAAAAAAAAAAAAAA848avXb3+5uBQeBSF7tVo6/u648mx1fux63vmf53/sAAAAAAAAAAAAAAAAAAAAPAXtfn+fy46sc37/2PJcaRF/fXXOz9GOmfijatjFwaHkv3foy35ryRJP53rCv3b7Pue3f/9XKb+9vu/b+1ntxrja/TbF6J4IHUexwMDIXyZbPx+KjoSl8pLlZdulZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+//9/b7maquc39+4Se66l49/VstxXH0Vtxf98pt5+xJ/dS8e/u5bW21xgpD4BVOP/SffO8R/LtN+p+B8PIeSi6lhzqRmguoapprdar5CWjv+hWlpq6kz+kK3u/18z8b+Qaf+g5v+V7BcR20rH/x+1tJ5Uic37vz/e+f6/mGn/IOJfHf+K7/+2pON/uJ7YnSpS+0u2O/+PZ9pvHf8/WGy04XqcjPN4lLoCVqN6eqv/V0daOv49W/I3n//ittZ/lzL19+v5r9Fv4/mvMf3/ENWf/9heOv69Lcu1e/9PZOp1ev4fqa3/2K10/I/U0tJr577az3bjP5lpv1Pxr61Kehrx35xPfjtcT//C+q8t6fj/s54YN5dYqf2srf+indf/lzPtH8T6rzr+lbizvT4vmuPfFY62LFeN/7dtfP9fydTrfPxDGLTW37X0/X+sZbna/d+zc/ynMvU6Hf8XOtk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDNgNDn2hSgeSJ3H8cBACOeT81PhSDRdmM1Pl8oz7y+FMJak58KJ6HapPF0o5ecWyrPFfKFUKs+EcCHJPxl6oqVSuZKfL9y9uNFWb3SnWFisTBcLlRDCeJL+33Cs0db0XGW+cDeEcGkj719xefHuncJCfnZu8bXBwcHBMLExhv6o+GGluFCp917PDWFyo25f1DS4WvbljbEcjd4rLy8uFEq19CtNdUrlmUKpqc5Ukvdp6I8qi8sLM4VKMV8q3270d5BGkuPYxLW3r10Z2pJ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8SY+GX/0shNBdP4tDCCONX6Ltyj98XDybfzp1f2349OTqg7UnrcoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl45RGgiiMAC/GQu18xhWy25nu6KIFq4InkCP4WH0KF7CO6RIkTZFCCSzEDa7sE1SfV/zYH5m3oN5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDxP793HW91EpLjaXEb8ff0vDvOXUn/ux+9fnGFGTuf5tXt4rJvy7+kovytHyzbv0vXq+zNGau93sCfDfdrr+1xPzjW1b1Pz9X1vIuUqItqS36acq2reWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyto+jbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgVAAD//xCzHts=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 707.79602ms ago: executing program 7 (id=1685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7}], 0x48}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 350.616145ms ago: executing program 7 (id=1686): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/40, 0x28) getdents64(r2, 0xfffffffffffffffe, 0x29) 87.132099ms ago: executing program 7 (id=1687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 0s ago: executing program 7 (id=1688): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x1abf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timerfd_create(0x7, 0x81000) r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x980903, 0x20}) kernel console output (not intermixed with test programs): [ 355.469137][T11437] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.498969][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.868413][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.198580][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.729188][ T11] hsr_slave_0: left promiscuous mode [ 359.765692][ T11] hsr_slave_1: left promiscuous mode [ 359.810476][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.854840][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.895948][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.903391][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.001570][ T11] bridge_slave_1: left allmulticast mode [ 360.024891][ T11] bridge_slave_1: left promiscuous mode [ 360.030666][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.127898][ T11] bridge_slave_0: left allmulticast mode [ 360.133599][ T11] bridge_slave_0: left promiscuous mode [ 360.205170][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.445210][ T11] veth1_macvtap: left promiscuous mode [ 360.450785][ T11] veth0_macvtap: left promiscuous mode [ 360.525013][ T11] veth1_vlan: left promiscuous mode [ 360.530382][ T11] veth0_vlan: left promiscuous mode [ 361.874597][T12595] loop1: detected capacity change from 0 to 8 [ 362.072847][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.085859][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.097663][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.110991][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.133865][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 362.143021][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.457064][T12614] loop2: detected capacity change from 0 to 7 [ 362.484975][T12614] loop2: [POWERTEC] p1 p2 p3 [ 362.504016][T12614] loop2: p2 start 4294967287 is beyond EOD, truncated [ 362.520594][T12614] loop2: p3 start 1932423285 is beyond EOD, truncated [ 362.649646][T12618] loop6: detected capacity change from 0 to 512 [ 362.682724][T12618] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 362.708252][T12618] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 362.759310][T12618] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 362.767735][T12618] System zones: 0-2, 18-18, 34-35 [ 362.798504][T12618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 362.921351][T12618] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 362.960007][T12618] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.1308: path /50/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 362.989750][ T11] team0 (unregistering): Port device team_slave_1 removed [ 363.063041][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.092104][ T11] team0 (unregistering): Port device team_slave_0 removed [ 363.169597][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.228396][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.880978][ T11] bond0 (unregistering): Released all slaves [ 363.971424][T12621] kthread_run failed with err -4 [ 364.292562][T12631] loop1: detected capacity change from 0 to 2048 [ 364.305030][ T5793] Bluetooth: hci1: command tx timeout [ 364.366445][T12639] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.551532][T12600] chnl_net:caif_netlink_parms(): no params data found [ 364.716173][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 364.800281][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.822770][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.844664][T12600] bridge_slave_0: entered allmulticast mode [ 364.864019][T12600] bridge_slave_0: entered promiscuous mode [ 364.879935][T12600] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.890600][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.900349][T12600] bridge_slave_1: entered allmulticast mode [ 364.911254][T12600] bridge_slave_1: entered promiscuous mode [ 364.975901][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.020147][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.127161][T12600] team0: Port device team_slave_0 added [ 365.161954][T12600] team0: Port device team_slave_1 added [ 365.236979][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.243974][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.300065][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.355855][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.362839][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.446144][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.609533][T12600] hsr_slave_0: entered promiscuous mode [ 365.621073][T12600] hsr_slave_1: entered promiscuous mode [ 365.643940][T12600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.671042][T12600] Cannot create hsr debugfs directory [ 365.696234][T12687] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1323'. [ 366.122438][T12672] loop2: detected capacity change from 0 to 40427 [ 366.153579][T12672] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 366.172145][T12672] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 366.190276][T12672] F2FS-fs (loop2): invalid crc value [ 366.223083][T12672] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:3, segno:0, type:0, next_blkoff:3, blkofs:6 [ 366.269412][T12672] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 366.385747][ T5793] Bluetooth: hci1: command tx timeout [ 366.642777][T12684] loop6: detected capacity change from 0 to 32768 [ 366.702392][T12684] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 366.884523][T12684] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 366.987804][T12684] XFS (loop6): Starting recovery (logdev: internal) [ 367.002075][T12600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.051974][T12600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.080071][T12684] XFS (loop6): Ending recovery (logdev: internal) [ 367.090618][T12600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.110884][T12600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.263481][ T27] audit: type=1804 audit(1752127190.134:100): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1322" name="/newroot/57/file1/file1" dev="loop6" ino=4422 res=1 errno=0 [ 367.290748][ T27] audit: type=1804 audit(1752127190.134:101): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1322" name="/newroot/57/file1/file1" dev="loop6" ino=4422 res=1 errno=0 [ 367.320521][ T965] kernel read not supported for file /vga_arbiter (pid: 965 comm: kworker/1:2) [ 367.370617][T12600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.400420][T11437] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 367.423852][T12600] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.474308][T12728] loop1: detected capacity change from 0 to 2048 [ 367.482211][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.489398][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.528605][T12728] NILFS (loop1): invalid segment: Inconsistency found [ 367.551149][T12728] NILFS (loop1): trying rollback from an earlier position [ 367.567890][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.572827][T12728] NILFS (loop1): recovery complete [ 367.575082][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.631252][T12731] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.106549][T12600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.145450][T12746] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.345903][T12755] netlink: 'syz.6.1336': attribute type 4 has an invalid length. [ 368.467630][ T5793] Bluetooth: hci1: command tx timeout [ 368.497043][T12600] veth0_vlan: entered promiscuous mode [ 368.510273][T12600] veth1_vlan: entered promiscuous mode [ 368.543913][T12600] veth0_macvtap: entered promiscuous mode [ 368.568346][T12600] veth1_macvtap: entered promiscuous mode [ 368.573388][T12764] loop6: detected capacity change from 0 to 512 [ 368.587008][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.597526][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.603718][T12764] EXT4-fs: Ignoring removed orlov option [ 368.607407][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.607426][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.607442][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.607454][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.609029][T12600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.679307][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.691709][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.701867][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.720110][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.733288][T12764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.746125][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.756861][T12764] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.768838][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.778957][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.799145][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.814243][T12600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.831446][T12600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.840963][T12600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.842977][T12764] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1338: bg 0: block 456: padding at end of block bitmap is not set [ 368.849868][T12600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.849894][T12600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.966005][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.975901][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.997168][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.061252][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.095057][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.296287][T12782] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 369.501110][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 369.645592][ T27] audit: type=1326 audit(1752127192.514:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b98e929 code=0x7fc00000 [ 369.911625][ T27] audit: type=1800 audit(1752127192.794:103): pid=12799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1346" name="file2" dev="overlay" ino=136 res=0 errno=0 [ 370.454339][T12821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.633990][T12826] loop2: detected capacity change from 0 to 128 [ 370.654675][T12826] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.673215][T12826] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 370.784375][T12129] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.693372][ T1117] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.766374][T12829] loop6: detected capacity change from 0 to 32768 [ 372.316333][T12817] loop1: detected capacity change from 0 to 262144 [ 372.333314][T12817] F2FS-fs (loop1): invalid crc value [ 372.341789][T12817] F2FS-fs (loop1): Found nat_bits in checkpoint [ 372.372374][T12817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 373.501205][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.521492][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.534132][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.552088][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.563965][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 373.589073][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.645268][ T1117] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.749751][ T1117] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.948317][ T1117] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.006431][T12861] loop6: detected capacity change from 0 to 2048 [ 374.082727][T12861] loop6: p1 < > p4 < > [ 374.326661][ T27] audit: type=1326 audit(1752127197.214:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b98e929 code=0x7ffc0000 [ 374.427173][ T27] audit: type=1326 audit(1752127197.214:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b98e929 code=0x7ffc0000 [ 374.460311][ T27] audit: type=1326 audit(1752127197.284:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f490b98e929 code=0x7ffc0000 [ 374.462892][T12845] chnl_net:caif_netlink_parms(): no params data found [ 374.511808][ T27] audit: type=1326 audit(1752127197.284:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b98e929 code=0x7ffc0000 [ 374.571161][ T27] audit: type=1326 audit(1752127197.284:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b98e929 code=0x7ffc0000 [ 374.874901][ T5880] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 374.917130][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.958055][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.001645][T12845] bridge_slave_0: entered allmulticast mode [ 375.075811][T12845] bridge_slave_0: entered promiscuous mode [ 375.153994][T12845] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.200154][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.250276][T12845] bridge_slave_1: entered allmulticast mode [ 375.329869][T12845] bridge_slave_1: entered promiscuous mode [ 375.674892][ T5797] Bluetooth: hci1: command tx timeout [ 375.946746][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 375.961171][ T5880] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.988633][T12845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.000161][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.007595][T12845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.031868][ T5880] usb 2-1: config 0 descriptor?? [ 376.046374][ T5880] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 376.202186][T12845] team0: Port device team_slave_0 added [ 376.243532][T12845] team0: Port device team_slave_1 added [ 376.496333][T12845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.503330][T12845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.571709][T12845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.623446][T12845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.632863][ T965] usb 2-1: USB disconnect, device number 12 [ 376.651692][T12845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.685013][T12845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.826230][T12897] loop6: detected capacity change from 0 to 512 [ 376.862031][T12897] EXT4-fs (loop6): Test dummy encryption mode enabled [ 376.874842][T12897] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 376.907354][T12845] hsr_slave_0: entered promiscuous mode [ 376.921453][T12845] hsr_slave_1: entered promiscuous mode [ 376.927693][T12897] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1379: bad orphan inode 131083 [ 376.938660][T12845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.953271][T12897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.958030][T12845] Cannot create hsr debugfs directory [ 377.110011][T12897] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 377.190286][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.365391][ T1117] hsr_slave_0: left promiscuous mode [ 377.373675][ T1117] hsr_slave_1: left promiscuous mode [ 377.386446][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.396255][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.404466][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.414049][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.426928][ T1117] bridge_slave_1: left allmulticast mode [ 377.432597][ T1117] bridge_slave_1: left promiscuous mode [ 377.438974][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.461743][ T1117] bridge_slave_0: left allmulticast mode [ 377.475050][ T1117] bridge_slave_0: left promiscuous mode [ 377.480963][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.562968][ T1117] veth1_macvtap: left promiscuous mode [ 377.571915][ T1117] veth0_macvtap: left promiscuous mode [ 377.585167][ T1117] veth1_vlan: left promiscuous mode [ 377.595216][ T1117] veth0_vlan: left promiscuous mode [ 377.755173][ T5797] Bluetooth: hci1: command tx timeout [ 377.826787][T12914] loop1: detected capacity change from 0 to 32768 [ 377.845671][T12914] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1385 (12914) [ 377.872554][T12914] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 377.883815][T12914] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 377.892947][T12914] BTRFS info (device loop1): enabling disk space caching [ 377.900488][T12914] BTRFS info (device loop1): doing ref verification [ 377.912949][T12914] BTRFS info (device loop1): use zlib compression, level 3 [ 377.944866][T12914] BTRFS info (device loop1): force clearing of disk cache [ 377.952036][T12914] BTRFS info (device loop1): setting nodatacow, compression disabled [ 377.960483][T12914] BTRFS info (device loop1): doing ref verification [ 377.991810][T12914] BTRFS info (device loop1): disk space caching is enabled [ 378.238158][T12914] BTRFS info (device loop1): enabling ssd optimizations [ 378.255762][T12914] BTRFS info (device loop1): auto enabling async discard [ 378.268716][T12914] BTRFS info (device loop1): rebuilding free space tree [ 378.333309][T12914] BTRFS info (device loop1): disabling free space tree [ 378.346035][T12914] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 378.362037][T12914] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 378.443249][ T27] audit: type=1800 audit(1752127201.324:109): pid=12914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1385" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 378.525653][ T27] audit: type=1800 audit(1752127201.414:110): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1385" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 378.679329][T11824] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 378.744551][T12918] loop6: detected capacity change from 0 to 32768 [ 378.809060][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.829463][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.892831][T12918] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 379.201079][T12918] XFS (loop6): Ending clean mount [ 379.234921][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 379.243721][T12918] XFS (loop6): Quotacheck needed: Please wait. [ 379.371036][T12918] XFS (loop6): Quotacheck: Done. [ 379.389247][T12950] loop1: detected capacity change from 0 to 256 [ 379.400960][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 379.466503][T12950] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 379.514147][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.622647][T11437] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 379.633886][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.838472][ T5797] Bluetooth: hci1: command tx timeout [ 380.350909][ T27] audit: type=1326 audit(1752127203.234:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.6.1393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x0 [ 380.401359][T12952] loop1: detected capacity change from 0 to 40427 [ 380.410354][T12952] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 380.425142][T12952] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 380.443072][T12952] F2FS-fs (loop1): invalid crc value [ 380.460574][T12952] F2FS-fs (loop1): Found nat_bits in checkpoint [ 380.547475][T12952] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 380.554566][T12952] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 380.576940][T12952] F2FS-fs (loop1): Corrupted max_depth of 3: 50331649 [ 380.869605][ T1117] bond0 (unregistering): Released all slaves [ 381.163977][T12966] loop1: detected capacity change from 0 to 8192 [ 381.471205][T12966] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 381.486780][T12966] FAT-fs (loop1): Filesystem has been set read-only [ 381.493534][T12966] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 381.525065][T12966] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 381.534282][T12966] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 381.850066][T12845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.868482][T12845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.881181][T12845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 381.896532][T12845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 381.915371][ T5797] Bluetooth: hci1: command tx timeout [ 381.994185][T12845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.018514][T12845] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.042829][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.050042][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.085887][T10086] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 382.107978][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.115183][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.289713][T10086] usb 2-1: Using ep0 maxpacket: 16 [ 382.328258][T10086] usb 2-1: config 0 has no interfaces? [ 382.346090][T10086] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.364897][T10086] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.383757][T10086] usb 2-1: Manufacturer: syz [ 382.404376][T10086] usb 2-1: config 0 descriptor?? [ 382.498481][T12845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.627926][ T8769] usb 2-1: USB disconnect, device number 13 [ 382.641306][T12997] input: syz0 as /devices/virtual/input/input20 [ 382.757390][T12845] veth0_vlan: entered promiscuous mode [ 382.783434][T12845] veth1_vlan: entered promiscuous mode [ 382.840989][T12845] veth0_macvtap: entered promiscuous mode [ 382.857525][T12845] veth1_macvtap: entered promiscuous mode [ 382.901543][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.924833][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.937697][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.948951][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.959899][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.976991][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.993172][T12845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.011009][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.021734][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.041762][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.052534][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.062846][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.073618][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.083575][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.094538][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.110152][T12845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.119380][T13007] netlink: 'syz.6.1404': attribute type 1 has an invalid length. [ 383.127983][T13007] netlink: 'syz.6.1404': attribute type 4 has an invalid length. [ 383.137336][T13007] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1404'. [ 383.162410][T12845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.200486][T12845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.214194][T12845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.230898][T12845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.419349][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.437769][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.493073][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.502025][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.143362][T13039] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 384.301165][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1420'. [ 384.421523][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 384.601455][T13055] loop1: detected capacity change from 0 to 128 [ 384.672615][T13055] FAT-fs (loop1): Directory bread(block 32) failed [ 384.689018][T13055] FAT-fs (loop1): Directory bread(block 33) failed [ 384.705466][T13055] FAT-fs (loop1): Directory bread(block 34) failed [ 384.717738][T13055] FAT-fs (loop1): Directory bread(block 35) failed [ 384.737401][T13055] FAT-fs (loop1): Directory bread(block 36) failed [ 384.747981][T13055] FAT-fs (loop1): Directory bread(block 37) failed [ 384.755029][T13055] FAT-fs (loop1): Directory bread(block 38) failed [ 384.761715][T13055] FAT-fs (loop1): Directory bread(block 39) failed [ 384.770024][T13055] FAT-fs (loop1): Directory bread(block 40) failed [ 384.776983][T13055] FAT-fs (loop1): Directory bread(block 41) failed [ 385.744497][T13060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.776944][T13060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 385.799710][T13060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 385.814492][T13063] loop1: detected capacity change from 0 to 1024 [ 385.872918][T13063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.891045][T13063] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.932199][T13060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.943008][T13060] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 385.980801][T13060] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 386.005843][T13060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 386.021606][T11824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.032387][T13060] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 386.080515][T13060] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 386.418179][ T2975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.455021][T10086] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 386.645105][T10086] usb 2-1: Using ep0 maxpacket: 32 [ 386.652889][T10086] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.664138][T10086] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.677980][T10086] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 386.687809][T10086] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 386.701381][T10086] usb 2-1: Product: syz [ 386.706606][T10086] usb 2-1: Manufacturer: syz [ 386.714094][T10086] hub 2-1:4.0: USB hub found [ 386.924391][T10086] hub 2-1:4.0: 1 port detected [ 387.115009][ T5797] Bluetooth: hci0: command 0x0c1a tx timeout [ 387.327469][T10086] hub 2-1:4.0: set hub depth failed [ 387.334614][T10086] usb 2-1: USB disconnect, device number 14 [ 387.515214][T13076] all: renamed from lo (while UP) [ 387.853413][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.899805][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.914178][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.978959][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.987480][ T5795] Bluetooth: hci3: command 0x0c1a tx timeout [ 388.026316][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 388.048376][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.463100][ T2975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.679177][T13093] loop1: detected capacity change from 0 to 64 [ 388.691810][ T2975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.712901][T13093] hfs: unable to locate alternate MDB [ 388.720363][T13093] hfs: continuing without an alternate MDB [ 388.728697][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.730197][T13093] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 388.755501][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.769700][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.791294][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.806825][ T5795] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 388.822511][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 388.830274][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.915878][ T2975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.948740][T13080] chnl_net:caif_netlink_parms(): no params data found [ 389.186889][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 389.228100][T13080] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.241877][T13080] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.252792][T13080] bridge_slave_0: entered allmulticast mode [ 389.269149][T13080] bridge_slave_0: entered promiscuous mode [ 389.292841][T13080] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.348927][T13080] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.361026][T13080] bridge_slave_1: entered allmulticast mode [ 389.396410][T13080] bridge_slave_1: entered promiscuous mode [ 389.618278][T13080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.638129][T13080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.943789][T13080] team0: Port device team_slave_0 added [ 389.998416][T13080] team0: Port device team_slave_1 added [ 390.138732][T13080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.144958][ T5793] Bluetooth: hci1: command tx timeout [ 390.156467][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.190564][T13080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.202284][T13094] chnl_net:caif_netlink_parms(): no params data found [ 390.245380][T13080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.253076][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.280990][T13080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.486428][T13080] hsr_slave_0: entered promiscuous mode [ 390.493287][T13080] hsr_slave_1: entered promiscuous mode [ 390.502449][T13080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.510487][T13080] Cannot create hsr debugfs directory [ 390.646767][T13074] Set syz1 is full, maxelem 65536 reached [ 390.699961][T10086] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 390.754621][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.762822][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.774409][T13094] bridge_slave_0: entered allmulticast mode [ 390.782622][T13094] bridge_slave_0: entered promiscuous mode [ 390.802622][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.810060][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.817732][T13094] bridge_slave_1: entered allmulticast mode [ 390.824555][T13094] bridge_slave_1: entered promiscuous mode [ 390.883421][T13118] loop6: detected capacity change from 0 to 512 [ 390.896426][T10086] usb 2-1: Using ep0 maxpacket: 16 [ 390.905234][T10086] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 390.916524][T10086] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 390.942166][T10086] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.949418][T13118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.958570][T10086] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.973445][ T5793] Bluetooth: hci2: command tx timeout [ 390.975021][T10086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.989527][T10086] usb 2-1: Product: syz [ 390.993700][T10086] usb 2-1: Manufacturer: syz [ 390.995897][T13118] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.998996][T10086] usb 2-1: SerialNumber: syz [ 391.019306][T13094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.039313][T13094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.217008][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.248848][T13094] team0: Port device team_slave_0 added [ 391.266164][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 391.278371][T13094] team0: Port device team_slave_1 added [ 391.330905][ T2975] hsr_slave_0: left promiscuous mode [ 391.337301][ T2975] hsr_slave_1: left promiscuous mode [ 391.343644][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.354507][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.364529][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.372553][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.380857][ T2975] bridge_slave_1: left allmulticast mode [ 391.386942][ T2975] bridge_slave_1: left promiscuous mode [ 391.392759][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.412478][ T2975] bridge_slave_0: left allmulticast mode [ 391.418575][ T2975] bridge_slave_0: left promiscuous mode [ 391.424371][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.463380][ T2975] veth1_macvtap: left promiscuous mode [ 391.470195][ T2975] veth0_macvtap: left promiscuous mode [ 391.476228][ T2975] veth1_vlan: left promiscuous mode [ 391.482069][ T2975] veth0_vlan: left promiscuous mode [ 391.493858][T10086] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 392.225318][ T5793] Bluetooth: hci1: command tx timeout [ 392.298663][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 392.305805][T10086] usb 2-1: current rate 9338589 is different from the runtime rate 9338507 [ 392.370547][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 392.436205][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.561070][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.658989][T10086] usb 2-1: USB disconnect, device number 15 [ 392.873594][ T5793] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 392.883284][ T5793] Bluetooth: hci3: Injecting HCI hardware error event [ 392.893127][ T5793] Bluetooth: hci3: hardware error 0x00 [ 393.031775][ T5797] Bluetooth: hci2: command tx timeout [ 393.484276][ T2975] bond0 (unregistering): Released all slaves [ 393.730001][T13094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.741670][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.785514][T13094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.846009][T13094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.860295][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.903705][T13094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.040593][T13094] hsr_slave_0: entered promiscuous mode [ 394.063910][T13094] hsr_slave_1: entered promiscuous mode [ 394.075806][T13094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.083448][T13094] Cannot create hsr debugfs directory [ 394.305134][ T5797] Bluetooth: hci1: command tx timeout [ 394.393987][T13080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 394.427592][T13080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 394.440659][T13080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 394.450903][T13080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 394.554426][T13080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.565370][ T5830] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 394.591908][T13080] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.613458][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.620614][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.630439][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.637624][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.777207][ T5830] usb 2-1: config 0 has no interfaces? [ 394.787207][ T5830] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.805435][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.807061][T13094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 394.813456][ T5830] usb 2-1: Product: syz [ 394.813472][ T5830] usb 2-1: Manufacturer: syz [ 394.830834][ T5830] usb 2-1: config 0 descriptor?? [ 394.844227][T13094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 394.861429][T13094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 394.888462][T13094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.955222][ T5793] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 395.044173][T13094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.099076][ T5830] usb 2-1: USB disconnect, device number 16 [ 395.103538][T13080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.113131][ T5793] Bluetooth: hci2: command tx timeout [ 395.122516][T13094] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.143501][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.150671][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.221371][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.228592][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.677821][T13080] veth0_vlan: entered promiscuous mode [ 395.730494][T13094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.773986][T13080] veth1_vlan: entered promiscuous mode [ 395.877154][T13080] veth0_macvtap: entered promiscuous mode [ 395.904786][T13080] veth1_macvtap: entered promiscuous mode [ 395.956382][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.974877][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.987079][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.015529][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.035109][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.057912][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.071705][T13080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.086132][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.099442][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.113400][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.125306][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.135755][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.146715][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.157358][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.168315][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.180208][T13080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.195248][ T965] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 396.208460][T13080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.244914][T13080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.263935][T13080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.278067][T13080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.385652][ T5793] Bluetooth: hci1: command tx timeout [ 396.401759][ T965] usb 2-1: not running at top speed; connect to a high speed hub [ 396.427539][ T965] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 396.436689][T13197] loop6: detected capacity change from 0 to 40427 [ 396.446994][ T965] usb 2-1: config 95 has no interface number 0 [ 396.447159][T13197] F2FS-fs (loop6): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 396.453178][ T965] usb 2-1: config 95 interface 1 has no altsetting 0 [ 396.491961][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.501905][T13197] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 396.505209][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.525817][T13197] F2FS-fs (loop6): invalid crc value [ 396.539498][ T965] usb 2-1: string descriptor 0 read error: -22 [ 396.542583][T13197] F2FS-fs (loop6): Found nat_bits in checkpoint [ 396.551883][ T965] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 396.561694][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.616609][T13094] veth0_vlan: entered promiscuous mode [ 396.639164][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.647670][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.661053][T13094] veth1_vlan: entered promiscuous mode [ 396.708775][T13197] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 396.721004][T13197] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 396.823891][ T965] usb 2-1: USB disconnect, device number 17 [ 396.935092][T11437] syz-executor: attempt to access beyond end of device [ 396.935092][T11437] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 396.957806][T13094] veth0_macvtap: entered promiscuous mode [ 396.984655][T13094] veth1_macvtap: entered promiscuous mode [ 396.992942][T11437] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 397.012095][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.023243][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.034332][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.045640][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.055827][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.066618][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.076793][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.087557][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.101970][T13094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.119590][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.132561][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.142757][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.153607][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.163806][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.174660][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.185107][ T5793] Bluetooth: hci2: command tx timeout [ 397.185643][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.201298][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.212151][T13094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.262374][T13094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.293368][T13094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.319723][T13094] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.329224][T13094] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.352128][T13094] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.364538][T13094] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.498905][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.522710][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.551941][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.569313][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.889243][T13219] loop1: detected capacity change from 0 to 1024 [ 397.961191][T13219] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.032517][T11824] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 398.211095][T13235] loop1: detected capacity change from 0 to 64 [ 398.283520][T13235] Trying to free block not in datazone [ 398.291782][ T5830] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 398.485783][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 398.493503][ T5830] usb 7-1: config 0 has no interfaces? [ 398.502156][ T5830] usb 7-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 398.514297][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.522547][ T5830] usb 7-1: Product: syz [ 398.526862][ T5830] usb 7-1: Manufacturer: syz [ 398.543476][ T5830] usb 7-1: SerialNumber: syz [ 398.551164][ T5830] usb 7-1: config 0 descriptor?? [ 398.718937][T13255] syz_tun: entered allmulticast mode [ 398.735528][T13254] syz_tun: left allmulticast mode [ 399.036535][ T5830] usb 7-1: USB disconnect, device number 10 [ 399.098482][T13264] loop9: detected capacity change from 0 to 7 [ 399.109436][T13264] Dev loop9: unable to read RDB block 7 [ 399.115466][T13264] loop9: unable to read partition table [ 399.121231][T13264] loop9: partition table beyond EOD, truncated [ 399.128087][T13264] loop_reread_partitions: partition scan of loop9 (þ£«xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 399.301514][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.445030][ T8769] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 399.632476][ T8769] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 399.642190][ T8769] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 399.651873][ T8769] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.671403][ T8769] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 399.681255][ T8769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.692136][ T8769] usb 8-1: Product: syz [ 399.696607][ T8769] usb 8-1: Manufacturer: syz [ 399.701208][ T8769] usb 8-1: SerialNumber: syz [ 399.708965][ T8769] hub 8-1:1.0: bad descriptor, ignoring hub [ 399.715062][ T8769] hub: probe of 8-1:1.0 failed with error -5 [ 399.914439][ T8769] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 400.235191][ T8769] usb 8-1: USB disconnect, device number 6 [ 400.242929][ T8769] usblp0: removed [ 400.327222][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.408801][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.529067][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.540688][ T5795] Bluetooth: hci4: sending frame failed (-49) [ 400.559178][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 400.596797][ T965] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 400.705361][ T5797] Bluetooth: hci1: command 0x1003 tx timeout [ 400.705519][ T5793] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 400.858717][ T965] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 400.875154][ T965] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 400.907125][ T965] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.914316][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.924868][ T965] usb 8-1: string descriptor 0 read error: -22 [ 400.953826][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.954930][ T965] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 400.963924][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.993902][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.003491][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 401.007981][ T965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.010947][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.033766][ T965] hub 8-1:1.0: bad descriptor, ignoring hub [ 401.065355][ T965] hub: probe of 8-1:1.0 failed with error -5 [ 401.134835][ T787] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 401.242181][ T965] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 401.296950][ T965] usb 8-1: USB disconnect, device number 7 [ 401.310471][ T965] usblp0: removed [ 401.317065][ T787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.334888][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 401.356867][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 401.372521][ T787] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 401.390451][ T787] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 401.399863][ T787] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 401.414947][ T787] usb 7-1: Manufacturer: syz [ 401.442665][ T787] usb 7-1: config 0 descriptor?? [ 401.468807][T13274] chnl_net:caif_netlink_parms(): no params data found [ 401.580021][T13274] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.589282][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.596946][T13274] bridge_slave_0: entered allmulticast mode [ 401.603932][T13274] bridge_slave_0: entered promiscuous mode [ 401.642049][T13274] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.649696][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.657267][T13274] bridge_slave_1: entered allmulticast mode [ 401.667838][T13274] bridge_slave_1: entered promiscuous mode [ 401.755726][ T787] rc_core: IR keymap rc-hauppauge not found [ 401.785131][ T787] Registered IR keymap rc-empty [ 401.790831][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 401.804537][T13274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.834959][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 401.846672][T13274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.886188][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 401.903835][T13287] loop7: detected capacity change from 0 to 1024 [ 401.907150][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input21 [ 401.934269][T13287] EXT4-fs: Ignoring removed oldalloc option [ 401.961594][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 401.961717][T13287] EXT4-fs: Ignoring removed orlov option [ 401.991179][T13287] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 402.005975][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.041334][T13287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.052169][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.070661][T13287] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4036: comm syz.7.1495: Allocating blocks 385-513 which overlap fs metadata [ 402.103259][T13274] team0: Port device team_slave_0 added [ 402.125789][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.164088][T13274] team0: Port device team_slave_1 added [ 402.175023][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.214552][T13286] EXT4-fs (loop7): pa ffff888059aa2740: logic 16, phys. 129, len 24 [ 402.223712][T13286] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8 [ 402.225487][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.271352][T13274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.282264][T13094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.291479][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.291507][T13274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.315086][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.367862][T13274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.384332][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.412072][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.427388][T13274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.455576][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.484954][ T787] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 402.531046][ T787] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 402.551573][ T787] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 402.568901][ T787] usb 7-1: USB disconnect, device number 11 [ 402.593543][ T48] hsr_slave_0: left promiscuous mode [ 402.613984][ T48] hsr_slave_1: left promiscuous mode [ 402.631169][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.655470][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.690163][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.714956][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.735617][ T48] bridge_slave_1: left allmulticast mode [ 402.743096][ T48] bridge_slave_1: left promiscuous mode [ 402.763187][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.787576][ T48] bridge_slave_0: left allmulticast mode [ 402.793265][ T48] bridge_slave_0: left promiscuous mode [ 402.812734][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.859008][ T48] veth1_macvtap: left promiscuous mode [ 402.866666][ T48] veth0_macvtap: left promiscuous mode [ 402.873729][ T48] veth1_vlan: left promiscuous mode [ 402.880074][ T48] veth0_vlan: left promiscuous mode [ 402.913762][T13292] loop1: detected capacity change from 0 to 40427 [ 402.932555][T13292] F2FS-fs (loop1): invalid crc value [ 402.976550][T13292] F2FS-fs (loop1): Found nat_bits in checkpoint [ 403.108271][ T5797] Bluetooth: hci1: command tx timeout [ 403.121374][T13292] F2FS-fs (loop1): Start checkpoint disabled! [ 403.142193][T13292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 403.315717][T13310] syz.1.1496: attempt to access beyond end of device [ 403.315717][T13310] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 403.618825][ T78] kworker/u4:5: attempt to access beyond end of device [ 403.618825][ T78] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 403.633835][ T78] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 404.147110][ T48] team0 (unregistering): Port device team_slave_1 removed [ 404.212624][ T48] team0 (unregistering): Port device team_slave_0 removed [ 404.273234][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.338323][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.109052][ T48] bond0 (unregistering): Released all slaves [ 405.186769][ T5797] Bluetooth: hci1: command tx timeout [ 405.286173][T13274] hsr_slave_0: entered promiscuous mode [ 405.300039][T13274] hsr_slave_1: entered promiscuous mode [ 405.338191][T13324] loop1: detected capacity change from 0 to 32768 [ 405.355815][T13274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.363417][T13274] Cannot create hsr debugfs directory [ 405.396097][T13324] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 405.646649][T13324] XFS (loop1): Ending clean mount [ 405.696728][T13324] XFS (loop1): Quotacheck needed: Please wait. [ 405.857457][T13324] XFS (loop1): Quotacheck: Done. [ 406.131243][T11824] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 406.341410][T13274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.385633][T13274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.426918][T13274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.449463][T13274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.546191][T13356] loop7: detected capacity change from 0 to 1024 [ 406.750272][T13351] loop6: detected capacity change from 0 to 32768 [ 406.757613][T13274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.775938][ T78] hfsplus: b-tree write err: -5, ino 4 [ 406.796479][T13351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1514 (13351) [ 406.797507][T13274] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.819949][T13351] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.848243][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.856094][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.874551][T13351] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 406.892625][T13351] BTRFS info (device loop6): using free space tree [ 406.896216][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.906379][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.003989][T13351] BTRFS info (device loop6): enabling ssd optimizations [ 407.034969][T13351] BTRFS info (device loop6): auto enabling async discard [ 407.042739][T13384] tipc: Failed to remove unknown binding: 66,1,1/0:1562102996/1562102998 [ 407.081068][T13384] tipc: Failed to remove unknown binding: 66,1,1/0:1562102996/1562102998 [ 407.264910][ T5797] Bluetooth: hci1: command tx timeout [ 407.284388][T11437] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 407.350060][T13274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.068477][T13413] loop7: detected capacity change from 0 to 16 [ 408.100636][T13413] erofs: (device loop7): mounted with root inode @ nid 36. [ 408.117882][T13274] veth0_vlan: entered promiscuous mode [ 408.148977][T13274] veth1_vlan: entered promiscuous mode [ 408.220312][T13274] veth0_macvtap: entered promiscuous mode [ 408.282688][T13274] veth1_macvtap: entered promiscuous mode [ 408.330728][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.348989][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.362409][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.380697][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.393287][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.428294][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.442140][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.453080][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.469911][T13274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.488366][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.500732][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.514153][T13423] nbd1: detected capacity change from 0 to 63 [ 408.536078][T13426] block nbd1: NBD_DISCONNECT [ 408.540811][T13426] block nbd1: Disconnected due to user request. [ 408.554960][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.584913][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.595015][T13426] block nbd1: shutting down sockets [ 408.613309][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.634542][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.665609][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.700806][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.727029][T13429] syz.1.1533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 408.734807][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.763054][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.796674][T13274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.845760][T13274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.854509][T13274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.902691][T13274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.926894][T13274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.114325][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.135163][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.182038][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.194473][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.375171][T10086] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 409.403795][T13438] loop7: detected capacity change from 0 to 32768 [ 409.411876][T13438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1536 (13438) [ 409.433118][T13438] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 409.443560][T13438] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 409.452461][T13438] BTRFS info (device loop7): turning off barriers [ 409.461873][T13438] BTRFS info (device loop7): setting nodatasum [ 409.469033][T13438] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 409.481738][T13438] BTRFS info (device loop7): use zstd compression, level 3 [ 409.489989][T13438] BTRFS info (device loop7): using free space tree [ 409.575767][T10086] usb 7-1: Using ep0 maxpacket: 8 [ 409.586232][T10086] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.604196][T10086] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 409.614673][T10086] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 409.625761][T10086] usb 7-1: SerialNumber: syz [ 409.632599][T10086] usb 7-1: config 0 descriptor?? [ 409.642001][T10086] usb 7-1: Found UVC 0.00 device (05ac:8501) [ 409.653326][T13094] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 409.653973][T10086] usb 7-1: Failed to create links for entity 255 [ 409.685046][T10086] usb 7-1: Failed to register entities (-22). [ 409.860979][T10086] usb 7-1: USB disconnect, device number 12 [ 410.193330][T13464] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 410.537173][T13475] loop6: detected capacity change from 0 to 8192 [ 410.566017][T13475] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 410.579678][T13475] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 410.589063][T13475] REISERFS (device loop6): using ordered data mode [ 410.595877][T13475] reiserfs: using flush barriers [ 410.603478][T13475] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 410.620308][T13475] REISERFS (device loop6): checking transaction log (loop6) [ 410.718495][T13475] REISERFS (device loop6): Using tea hash to sort names [ 410.736799][T13475] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 411.061271][T13482] loop7: detected capacity change from 0 to 32768 [ 411.082897][T13482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1547 (13482) [ 411.099921][T13484] input: syz0 as /devices/virtual/input/input22 [ 411.110899][T13482] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 411.137934][T13482] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 411.147350][T13482] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 411.161851][T13482] BTRFS info (device loop7): trying to use backup root at mount time [ 411.170214][T13482] BTRFS info (device loop7): setting nodatasum [ 411.176542][T13482] BTRFS info (device loop7): force zlib compression, level 3 [ 411.183994][T13482] BTRFS info (device loop7): doing ref verification [ 411.210439][T13482] BTRFS info (device loop7): turning on flush-on-commit [ 411.217555][T13482] BTRFS info (device loop7): allowing degraded mounts [ 411.227333][T13482] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 411.236962][T13482] BTRFS info (device loop7): use lzo compression, level 0 [ 411.244328][T13482] BTRFS info (device loop7): enabling ssd optimizations [ 411.252389][T13482] BTRFS info (device loop7): using spread ssd allocation scheme [ 411.294958][T13482] BTRFS info (device loop7): using free space tree [ 411.427570][T13482] BTRFS info (device loop7): auto enabling async discard [ 411.513859][ T2975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.578299][T13094] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 412.659836][ T2975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.736578][ T2975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.787033][ T2975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.320955][T13524] loop7: detected capacity change from 0 to 16 [ 413.339191][T13521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.356416][T13524] erofs: (device loop7): mounted with root inode @ nid 36. [ 413.397740][ T5797] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 413.423361][T13524] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 413.438325][ T27] audit: type=1800 audit(1752127236.324:112): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1557" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 413.446884][T13524] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 413.506097][T13528] loop6: detected capacity change from 0 to 256 [ 413.515880][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.529012][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.540159][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.540210][T13529] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 413.571380][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.579227][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.587876][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.588978][T13529] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 413.661180][T13524] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 414.003778][T13525] chnl_net:caif_netlink_parms(): no params data found [ 414.071575][ T27] audit: type=1326 audit(1752127236.954:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13539 comm="syz.6.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7fc00000 [ 414.228021][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.237729][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.245090][T13525] bridge_slave_0: entered allmulticast mode [ 414.251851][T13525] bridge_slave_0: entered promiscuous mode [ 414.260871][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.268890][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.276196][T13525] bridge_slave_1: entered allmulticast mode [ 414.283367][T13525] bridge_slave_1: entered promiscuous mode [ 414.334826][T13525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.346929][T13525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.415567][T13525] team0: Port device team_slave_0 added [ 414.427248][T13525] team0: Port device team_slave_1 added [ 414.485247][T10086] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 414.507876][T13525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.515074][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.542108][T13525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.556573][T13525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.563721][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.590631][T13525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.668996][ T2975] hsr_slave_0: left promiscuous mode [ 414.684481][ T27] audit: type=1326 audit(1752127237.564:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13539 comm="syz.6.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa489f2ab19 code=0x7fc00000 [ 414.715055][T10086] usb 8-1: Using ep0 maxpacket: 32 [ 414.722409][T10086] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 414.731979][ T2975] hsr_slave_1: left promiscuous mode [ 414.734794][T10086] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.757814][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.764851][T10086] usb 8-1: config 0 descriptor?? [ 414.775833][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.791058][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.800651][T10086] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 414.808294][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.830127][ T2975] bridge_slave_1: left allmulticast mode [ 414.836097][ T2975] bridge_slave_1: left promiscuous mode [ 414.842181][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.857313][ T2975] bridge_slave_0: left allmulticast mode [ 414.863587][ T2975] bridge_slave_0: left promiscuous mode [ 414.875199][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.962111][ T2975] veth1_macvtap: left promiscuous mode [ 414.967876][ T2975] veth0_macvtap: left promiscuous mode [ 414.973596][ T2975] veth1_vlan: left promiscuous mode [ 414.979125][ T2975] veth0_vlan: left promiscuous mode [ 415.113881][T13561] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 415.140676][T13561] overlayfs: overlapping lowerdir path [ 415.665219][ T5797] Bluetooth: hci1: command tx timeout [ 415.880618][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 415.970119][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 416.050667][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.119721][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.244573][T10086] gspca_vc032x: reg_w err -71 [ 416.249492][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.260075][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.265551][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.270857][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.276246][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.283429][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.311317][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.317883][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.323197][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.328624][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.333932][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.339308][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.344607][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.350362][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.355738][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.361132][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.366961][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.374889][T10086] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.381123][T10086] gspca_vc032x: Unknown sensor... [ 416.391652][T10086] vc032x: probe of 8-1:0.0 failed with error -22 [ 416.404842][T10086] usb 8-1: USB disconnect, device number 8 [ 416.908586][T13566] loop7: detected capacity change from 0 to 2048 [ 416.935238][T13566] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 416.961653][ T2975] bond0 (unregistering): Released all slaves [ 416.978625][T13567] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.111514][T13525] hsr_slave_0: entered promiscuous mode [ 417.125515][T13525] hsr_slave_1: entered promiscuous mode [ 417.131987][T13525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.151429][T13525] Cannot create hsr debugfs directory [ 417.218706][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1571'. [ 417.241778][T13563] erspan0: entered promiscuous mode [ 417.252646][T13563] macvtap1: entered promiscuous mode [ 417.258950][T13563] macvtap1: entered allmulticast mode [ 417.264349][T13563] erspan0: entered allmulticast mode [ 417.283889][T13564] erspan0: left allmulticast mode [ 417.289621][T13564] erspan0: left promiscuous mode [ 417.574487][T13578] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 417.650233][T13578] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 417.745278][ T5797] Bluetooth: hci1: command tx timeout [ 418.060808][ T2975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.174578][ T2975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.310362][ T2975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.344542][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 418.354851][T10086] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 418.357236][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 418.371056][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 418.380015][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 418.388866][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 418.396434][ T28] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 418.404421][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.458141][ T2975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.511885][T13525] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.533299][T13525] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.559956][T13525] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.572897][T10086] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.591253][T13525] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.598183][ T28] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.610291][T10086] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.625071][ T28] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.646254][T10086] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 418.660556][ T28] usb 7-1: config 0 interface 0 has no altsetting 0 [ 418.668866][T10086] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.678523][ T28] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 418.688888][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.698113][T10086] usb 8-1: config 0 descriptor?? [ 418.723461][ T28] usb 7-1: config 0 descriptor?? [ 419.041666][T13588] chnl_net:caif_netlink_parms(): no params data found [ 419.153261][ T28] usb 7-1: string descriptor 0 read error: -71 [ 419.176224][ T28] usbhid 7-1:0.0: can't add hid device: -71 [ 419.182240][ T28] usbhid: probe of 7-1:0.0 failed with error -71 [ 419.192712][ T28] usb 7-1: USB disconnect, device number 13 [ 419.237366][T13588] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.244529][T13588] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.255351][T13588] bridge_slave_0: entered allmulticast mode [ 419.263271][T13588] bridge_slave_0: entered promiscuous mode [ 419.274718][T13588] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.282745][T13588] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.290257][T13588] bridge_slave_1: entered allmulticast mode [ 419.297409][T13588] bridge_slave_1: entered promiscuous mode [ 419.369134][T13588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.388514][T13588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.465922][T13588] team0: Port device team_slave_0 added [ 419.479273][T13588] team0: Port device team_slave_1 added [ 419.551841][T13588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.560864][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.586913][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.593503][T13588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.640956][T13588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.654098][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.683132][T13588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.761595][T10086] uclogic 0003:256C:006D.000D: interface is invalid, ignoring [ 419.822087][T13525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.835515][ T5793] Bluetooth: hci1: command tx timeout [ 419.870910][T13588] hsr_slave_0: entered promiscuous mode [ 419.877290][T13588] hsr_slave_1: entered promiscuous mode [ 419.883973][T13588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.891681][T13588] Cannot create hsr debugfs directory [ 420.013394][ T8769] usb 8-1: USB disconnect, device number 9 [ 420.057955][T13525] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.136891][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.144043][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.179230][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.186453][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.239236][ T2975] hsr_slave_0: left promiscuous mode [ 420.247059][ T2975] hsr_slave_1: left promiscuous mode [ 420.252999][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.261976][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.270829][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.279394][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.289019][ T2975] bridge_slave_1: left allmulticast mode [ 420.294657][ T2975] bridge_slave_1: left promiscuous mode [ 420.300499][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.310389][ T2975] bridge_slave_0: left allmulticast mode [ 420.317263][ T2975] bridge_slave_0: left promiscuous mode [ 420.322988][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.355303][ T2975] veth1_macvtap: left promiscuous mode [ 420.360883][ T2975] veth0_macvtap: left promiscuous mode [ 420.367642][ T2975] veth1_vlan: left promiscuous mode [ 420.372918][ T2975] veth0_vlan: left promiscuous mode [ 420.465791][ T5793] Bluetooth: hci3: command tx timeout [ 421.119506][T13607] loop7: detected capacity change from 0 to 32768 [ 421.131246][T13607] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1584 (13607) [ 421.149557][T13607] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.160082][T13607] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 421.193840][T13607] BTRFS info (device loop7): force clearing of disk cache [ 421.204380][T13607] BTRFS info (device loop7): enabling auto defrag [ 421.220237][T13607] BTRFS info (device loop7): max_inline at 0 [ 421.227591][T13607] BTRFS info (device loop7): enabling disk space caching [ 421.234652][T13607] BTRFS info (device loop7): disk space caching is enabled [ 421.288829][ T27] audit: type=1326 audit(1752127244.164:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.6.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 421.312394][ T27] audit: type=1326 audit(1752127244.174:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.6.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 421.336799][ T27] audit: type=1326 audit(1752127244.174:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.6.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 421.360195][ T27] audit: type=1326 audit(1752127244.184:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.6.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 421.383191][ T27] audit: type=1326 audit(1752127244.184:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.6.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 421.407411][ T27] audit: type=1326 audit(1752127244.184:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.6.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 421.434893][T13607] BTRFS info (device loop7): enabling ssd optimizations [ 421.458120][T13607] BTRFS info (device loop7): rebuilding free space tree [ 421.515658][T13607] BTRFS info (device loop7): disabling free space tree [ 421.522614][T13607] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 421.548523][T13607] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 421.569333][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 421.644661][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 421.741229][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.873800][T13094] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.886085][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.916865][ T5793] Bluetooth: hci1: command tx timeout [ 422.020903][T13636] loop6: detected capacity change from 0 to 512 [ 422.030986][T13636] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 422.116680][T13636] EXT4-fs (loop6): 1 truncate cleaned up [ 422.123743][T13636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.244359][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.574688][ T5793] Bluetooth: hci3: command tx timeout [ 423.116001][ T2975] bond0 (unregistering): Released all slaves [ 423.808921][T13662] mmap: syz.7.1598 (13662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 423.849276][T13525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.028348][T13588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.048978][T13588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.079961][T13588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.108775][T13588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.294498][T13588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.389341][T13588] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.436252][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.443470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.469179][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.476393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.523421][T13525] veth0_vlan: entered promiscuous mode [ 424.582164][T13525] veth1_vlan: entered promiscuous mode [ 424.624887][ T5797] Bluetooth: hci3: command tx timeout [ 424.646660][T13525] veth0_macvtap: entered promiscuous mode [ 424.670377][T13525] veth1_macvtap: entered promiscuous mode [ 424.727114][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.745524][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.756714][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.767391][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.784877][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.802971][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.814645][T13525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.828131][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.840299][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.850317][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.860847][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.871669][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.883354][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.894842][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.905957][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.917470][T13525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.977447][T13525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.989330][T13525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.999865][T13525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.008655][T13525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.026905][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.213807][T13588] veth0_vlan: entered promiscuous mode [ 425.241956][T13588] veth1_vlan: entered promiscuous mode [ 425.273395][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.295292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.344014][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.360926][T13588] veth0_macvtap: entered promiscuous mode [ 425.373183][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.403499][T13588] veth1_macvtap: entered promiscuous mode [ 425.475885][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.495858][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.508031][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.518772][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.529024][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.543255][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.553744][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.564554][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.593100][T13588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.644548][T13694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 425.672490][T13694] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 425.716771][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.732891][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.744688][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.756338][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.766343][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.777002][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.787343][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.798183][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.809881][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.820489][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.832230][T13588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.848028][T13588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.857651][T13588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.866395][T13588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.890175][T13588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.053568][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.075691][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.123283][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.137311][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.452698][T13712] loop6: detected capacity change from 0 to 1024 [ 426.461127][T13712] EXT4-fs (loop6): Test dummy encryption mode enabled [ 426.471257][T13712] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 426.526664][T13712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.696867][ T3002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.758750][T13708] loop7: detected capacity change from 0 to 32768 [ 426.779802][T13708] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1609 (13708) [ 426.780204][T13712] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 426.809002][T13708] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 426.821208][T13708] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 426.837054][T13708] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 426.848478][T13708] BTRFS info (device loop7): use zstd compression, level 3 [ 426.855828][T13708] BTRFS info (device loop7): using free space tree [ 426.877197][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.935022][T13708] BTRFS info (device loop7): enabling ssd optimizations [ 426.942036][T13708] BTRFS info (device loop7): auto enabling async discard [ 427.017402][T13094] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 427.193964][ T3002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.699271][ T3002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.766093][ T3002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.049036][T13738] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 428.378411][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 428.392099][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 428.417098][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 428.431460][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 428.452568][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 428.460332][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 428.913631][T13745] chnl_net:caif_netlink_parms(): no params data found [ 429.082683][ T3002] hsr_slave_0: left promiscuous mode [ 429.107260][ T3002] hsr_slave_1: left promiscuous mode [ 429.123923][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.129963][ T27] audit: type=1326 audit(1752127252.014:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13743 comm="syz.6.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7fc00000 [ 429.171614][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.246807][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.254209][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.315579][ T3002] bridge_slave_1: left allmulticast mode [ 429.335013][ T3002] bridge_slave_1: left promiscuous mode [ 429.347249][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.401686][ T3002] bridge_slave_0: left allmulticast mode [ 429.425188][ T3002] bridge_slave_0: left promiscuous mode [ 429.430969][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.527961][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.538872][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 429.560505][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 429.575352][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 429.587918][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 429.603981][ T3002] veth1_macvtap: left promiscuous mode [ 429.609779][ T3002] veth0_macvtap: left promiscuous mode [ 429.609801][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.625100][ T3002] veth1_vlan: left promiscuous mode [ 429.630545][ T3002] veth0_vlan: left promiscuous mode [ 429.676591][T13771] loop7: detected capacity change from 0 to 2048 [ 429.711528][T13771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.881843][ T11] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 429.902693][ T11] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 429.915607][ T11] EXT4-fs (loop7): This should not happen!! Data will be lost [ 429.915607][ T11] [ 429.925474][ T11] EXT4-fs (loop7): Total free blocks count 0 [ 429.931667][ T11] EXT4-fs (loop7): Free/Dirty block details [ 429.938626][ T11] EXT4-fs (loop7): free_blocks=4096 [ 429.943850][ T11] EXT4-fs (loop7): dirty_blocks=16 [ 429.949443][ T11] EXT4-fs (loop7): Block reservation details [ 429.955811][ T11] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 429.969610][T13094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.562551][ T5797] Bluetooth: hci1: command tx timeout [ 430.953896][ T3002] team0 (unregistering): Port device team_slave_1 removed [ 431.051197][ T3002] team0 (unregistering): Port device team_slave_0 removed [ 431.123618][ T3002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.217343][ T3002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.668111][ T5797] Bluetooth: hci3: command tx timeout [ 431.992476][ T3002] bond0 (unregistering): Released all slaves [ 432.150722][T13808] syzkaller0: entered promiscuous mode [ 432.164817][T13808] syzkaller0: entered allmulticast mode [ 432.626650][ T5797] Bluetooth: hci1: command tx timeout [ 433.750087][ T5797] Bluetooth: hci3: command tx timeout [ 434.715981][ T5797] Bluetooth: hci1: command tx timeout [ 435.279120][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.286406][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.293776][T13745] bridge_slave_0: entered allmulticast mode [ 435.301108][T13745] bridge_slave_0: entered promiscuous mode [ 435.309621][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.317044][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.338945][T13745] bridge_slave_1: entered allmulticast mode [ 435.347105][T13745] bridge_slave_1: entered promiscuous mode [ 435.431981][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.502850][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.611979][T13745] team0: Port device team_slave_0 added [ 435.632650][T13745] team0: Port device team_slave_1 added [ 435.729868][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.744181][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.788968][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.824955][ T5797] Bluetooth: hci3: command tx timeout [ 435.848188][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.860315][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.895711][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.137109][ T3002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.272839][T13745] hsr_slave_0: entered promiscuous mode [ 436.284655][T13745] hsr_slave_1: entered promiscuous mode [ 436.300256][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.318896][T13745] Cannot create hsr debugfs directory [ 436.410416][ T3002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.587088][ T3002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.608222][T13767] chnl_net:caif_netlink_parms(): no params data found [ 436.672641][ T3002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.785231][ T5797] Bluetooth: hci1: command tx timeout [ 436.863372][ T787] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 436.919702][T13767] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.926954][T13767] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.934096][T13767] bridge_slave_0: entered allmulticast mode [ 436.944682][T13767] bridge_slave_0: entered promiscuous mode [ 436.953244][T13767] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.960942][T13767] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.969866][T13767] bridge_slave_1: entered allmulticast mode [ 436.976705][T13767] bridge_slave_1: entered promiscuous mode [ 437.039336][T13767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.050958][T13767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.074638][ T787] usb 8-1: Using ep0 maxpacket: 8 [ 437.082275][ T787] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 437.090990][ T787] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.101273][ T787] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.119642][ T787] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.129946][ T787] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.143533][ T787] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.152708][ T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.204142][T13767] team0: Port device team_slave_0 added [ 437.242200][T13767] team0: Port device team_slave_1 added [ 437.319522][T13767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.334067][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.361706][T13767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.385360][ T787] usb 8-1: usb_control_msg returned -32 [ 437.399251][ T787] usbtmc 8-1:16.0: can't read capabilities [ 437.446595][T13767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.453631][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.482019][T13767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.586638][T13767] hsr_slave_0: entered promiscuous mode [ 437.603282][T13767] hsr_slave_1: entered promiscuous mode [ 437.612380][T13767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.623604][T13767] Cannot create hsr debugfs directory [ 437.861206][ T787] IPVS: starting estimator thread 0... [ 437.883030][T13876] loop6: detected capacity change from 0 to 1024 [ 437.901488][T13745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.915678][ T5797] Bluetooth: hci3: command tx timeout [ 437.915757][T13876] EXT4-fs: Ignoring removed nobh option [ 437.927381][T13876] EXT4-fs: Ignoring removed bh option [ 437.959355][T13876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.972343][T13745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.982817][T13745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 437.996393][T13877] IPVS: using max 20 ests per chain, 48000 per kthread [ 438.059075][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.072340][T13745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.338150][T13892] loop6: detected capacity change from 0 to 512 [ 438.360774][T13892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.393600][T13892] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.401615][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.490169][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.563916][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.571141][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.639141][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.680433][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.687658][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.753884][ T3002] hsr_slave_0: left promiscuous mode [ 438.764674][ T3002] hsr_slave_1: left promiscuous mode [ 438.774074][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.784496][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.795171][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.802587][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.811698][ T3002] bridge_slave_1: left allmulticast mode [ 438.817580][ T3002] bridge_slave_1: left promiscuous mode [ 438.823248][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.837643][ T3002] bridge_slave_0: left allmulticast mode [ 438.843315][ T3002] bridge_slave_0: left promiscuous mode [ 438.849382][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.877956][ T3002] veth1_macvtap: left promiscuous mode [ 438.883470][ T3002] veth0_macvtap: left promiscuous mode [ 438.890328][ T3002] veth1_vlan: left promiscuous mode [ 438.895756][ T3002] veth0_vlan: left promiscuous mode [ 439.633761][ T8769] usb 8-1: USB disconnect, device number 10 [ 439.833189][T13915] loop7: detected capacity change from 0 to 2048 [ 439.870685][ T3002] team0 (unregistering): Port device team_slave_1 removed [ 439.878963][T13915] loop7: p1 < > p2 p3 p4 < p5 > [ 439.893759][T13915] loop7: p2 size 458752 extends beyond EOD, truncated [ 439.902078][T13915] loop7: p3 start 4284289 is beyond EOD, truncated [ 439.910433][T13915] loop7: p5 size 458752 extends beyond EOD, truncated [ 439.961558][ T3002] team0 (unregistering): Port device team_slave_0 removed [ 440.030721][ T3002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.118905][ T3002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.156021][ T27] audit: type=1326 audit(1752127263.034:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.193061][ T27] audit: type=1326 audit(1752127263.034:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.235702][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.239180][ T27] audit: type=1326 audit(1752127263.034:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.244153][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.265102][ T27] audit: type=1326 audit(1752127263.034:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.331673][ T27] audit: type=1326 audit(1752127263.034:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.363361][ T27] audit: type=1326 audit(1752127263.034:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.421305][ T27] audit: type=1326 audit(1752127263.064:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.470833][ T27] audit: type=1326 audit(1752127263.084:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.518218][ T27] audit: type=1326 audit(1752127263.084:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 440.573222][ T27] audit: type=1326 audit(1752127263.084:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.6.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489f8e929 code=0x7ffc0000 [ 441.158649][ T3002] bond0 (unregistering): Released all slaves [ 441.315610][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1670'. [ 441.562054][T13767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 441.603857][T13767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.671699][T13767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.714063][T13933] loop6: detected capacity change from 0 to 512 [ 441.726424][T13767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.827063][T13933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.860801][T13933] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.955813][T13767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.973373][T11437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.077457][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.104375][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.126674][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.133819][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.144168][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.151353][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.611740][T13767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.752753][T13745] veth0_vlan: entered promiscuous mode [ 442.762698][T13767] veth0_vlan: entered promiscuous mode [ 442.779951][T13745] veth1_vlan: entered promiscuous mode [ 442.796407][T13767] veth1_vlan: entered promiscuous mode [ 442.870268][T13745] veth0_macvtap: entered promiscuous mode [ 442.878091][T13969] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 442.882866][T13745] veth1_macvtap: entered promiscuous mode [ 442.916000][T13767] veth0_macvtap: entered promiscuous mode [ 442.961755][T13767] veth1_macvtap: entered promiscuous mode [ 442.977369][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.990214][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.014973][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.027379][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.044557][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.057108][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.068927][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.090498][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.101204][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.113011][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.123874][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.137695][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.149483][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.159822][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.170505][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.182312][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.222909][T13745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.232817][T13745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.245601][T13745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.255132][T13745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.274635][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.286514][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.297372][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.307862][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.318423][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.334622][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.344564][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.359505][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.377980][T13767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.406485][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.425428][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.437804][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.464589][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.475161][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.494791][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.511585][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.524780][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.534601][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.546035][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.557761][T13767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.612896][T13767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.632487][T13767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.641960][T13767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.658740][T13767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.860550][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.878750][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.939402][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.955167][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.973693][T13061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.005023][T13061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.086408][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.094272][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.153022][T13983] loop6: detected capacity change from 0 to 32768 [ 444.262178][T13983] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 444.300118][ T2975] (kworker/u4:10,2975,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 444.466227][T13983] [ 444.468589][T13983] ====================================================== [ 444.475601][T13983] WARNING: possible circular locking dependency detected [ 444.482645][T13983] 6.6.96-syzkaller #0 Not tainted [ 444.487755][T13983] ------------------------------------------------------ [ 444.494777][T13983] syz.6.1684/13983 is trying to acquire lock: [ 444.500848][T13983] ffff8880771edbe0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_page_mkwrite+0x2d0/0xd10 [ 444.511482][T13983] [ 444.511482][T13983] but task is already holding lock: [ 444.518839][T13983] ffff88804f506510 (sb_pagefaults#6){.+.+}-{0:0}, at: do_page_mkwrite+0x153/0x3e0 [ 444.528061][T13983] [ 444.528061][T13983] which lock already depends on the new lock. [ 444.528061][T13983] [ 444.538452][T13983] [ 444.538452][T13983] the existing dependency chain (in reverse order) is: [ 444.547451][T13983] [ 444.547451][T13983] -> #2 (sb_pagefaults#6){.+.+}-{0:0}: [ 444.555100][T13983] ocfs2_page_mkwrite+0x18b/0xd10 [ 444.560653][T13983] do_page_mkwrite+0x153/0x3e0 [ 444.565926][T13983] handle_mm_fault+0x19b8/0x4920 [ 444.571373][T13983] __get_user_pages+0x5ea/0x1470 [ 444.576852][T13983] __gup_longterm_locked+0x22bb/0x2920 [ 444.582845][T13983] internal_get_user_pages_fast+0x217f/0x2730 [ 444.589512][T13983] iov_iter_extract_pages+0x393/0x790 [ 444.595400][T13983] __blockdev_direct_IO+0x10d6/0x3420 [ 444.601294][T13983] ocfs2_direct_IO+0x240/0x2b0 [ 444.606562][T13983] generic_file_read_iter+0x317/0x4f0 [ 444.612439][T13983] ocfs2_file_read_iter+0x476/0xa30 [ 444.618148][T13983] vfs_read+0x431/0x920 [ 444.622819][T13983] ksys_read+0x147/0x250 [ 444.627660][T13983] do_syscall_64+0x55/0xb0 [ 444.632583][T13983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.638982][T13983] [ 444.638982][T13983] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 444.646545][T13983] __might_fault+0xc6/0x120 [ 444.651552][T13983] _copy_to_user+0x2a/0xa0 [ 444.656479][T13983] fiemap_fill_next_extent+0x1c1/0x390 [ 444.662464][T13983] ocfs2_fiemap+0x882/0xc80 [ 444.667474][T13983] do_vfs_ioctl+0x140c/0x1bb0 [ 444.672658][T13983] __se_sys_ioctl+0x83/0x170 [ 444.677753][T13983] do_syscall_64+0x55/0xb0 [ 444.682671][T13983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.689065][T13983] [ 444.689065][T13983] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 444.697816][T13983] __lock_acquire+0x2ddb/0x7c80 [ 444.703170][T13983] lock_acquire+0x197/0x410 [ 444.708176][T13983] down_write+0x97/0x1f0 [ 444.712920][T13983] ocfs2_page_mkwrite+0x2d0/0xd10 [ 444.718445][T13983] do_page_mkwrite+0x153/0x3e0 [ 444.723711][T13983] handle_mm_fault+0x19b8/0x4920 [ 444.729170][T13983] __get_user_pages+0x5ea/0x1470 [ 444.734611][T13983] __gup_longterm_locked+0x22bb/0x2920 [ 444.740835][T13983] internal_get_user_pages_fast+0x217f/0x2730 [ 444.747407][T13983] iov_iter_extract_pages+0x393/0x790 [ 444.753279][T13983] __blockdev_direct_IO+0x10d6/0x3420 [ 444.759154][T13983] ocfs2_direct_IO+0x240/0x2b0 [ 444.764418][T13983] generic_file_read_iter+0x317/0x4f0 [ 444.770292][T13983] ocfs2_file_read_iter+0x476/0xa30 [ 444.776009][T13983] vfs_read+0x431/0x920 [ 444.780721][T13983] ksys_read+0x147/0x250 [ 444.785484][T13983] do_syscall_64+0x55/0xb0 [ 444.790420][T13983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.796822][T13983] [ 444.796822][T13983] other info that might help us debug this: [ 444.796822][T13983] [ 444.807029][T13983] Chain exists of: [ 444.807029][T13983] &ocfs2_file_ip_alloc_sem_key --> &mm->mmap_lock --> sb_pagefaults#6 [ 444.807029][T13983] [ 444.821088][T13983] Possible unsafe locking scenario: [ 444.821088][T13983] [ 444.828518][T13983] CPU0 CPU1 [ 444.833859][T13983] ---- ---- [ 444.839202][T13983] rlock(sb_pagefaults#6); [ 444.843690][T13983] lock(&mm->mmap_lock); [ 444.850522][T13983] lock(sb_pagefaults#6); [ 444.857447][T13983] lock(&ocfs2_file_ip_alloc_sem_key); [ 444.862985][T13983] [ 444.862985][T13983] *** DEADLOCK *** [ 444.862985][T13983] [ 444.871117][T13983] 3 locks held by syz.6.1684/13983: [ 444.876306][T13983] #0: ffff88807ab294c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 444.885552][T13983] #1: ffff888077f81e20 (&mm->mmap_lock){++++}-{3:3}, at: __gup_longterm_locked+0x225d/0x2920 [ 444.895803][T13983] #2: ffff88804f506510 (sb_pagefaults#6){.+.+}-{0:0}, at: do_page_mkwrite+0x153/0x3e0 [ 444.905485][T13983] [ 444.905485][T13983] stack backtrace: [ 444.911393][T13983] CPU: 1 PID: 13983 Comm: syz.6.1684 Not tainted 6.6.96-syzkaller #0 [ 444.919437][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.929491][T13983] Call Trace: [ 444.932754][T13983] [ 444.935682][T13983] dump_stack_lvl+0x16c/0x230 [ 444.940362][T13983] ? load_image+0x3b0/0x3b0 [ 444.944855][T13983] ? show_regs_print_info+0x20/0x20 [ 444.950066][T13983] ? print_circular_bug+0x12b/0x1a0 [ 444.955276][T13983] check_noncircular+0x2bd/0x3c0 [ 444.960216][T13983] ? print_deadlock_bug+0x5d0/0x5d0 [ 444.965394][T13983] ? lockdep_lock+0xe0/0x220 [ 444.969964][T13983] ? ocfs2_read_blocks+0x10ff/0x13e0 [ 444.975253][T13983] ? _find_first_zero_bit+0xd3/0x100 [ 444.980540][T13983] __lock_acquire+0x2ddb/0x7c80 [ 444.985385][T13983] ? verify_lock_unused+0x140/0x140 [ 444.990908][T13983] ? ocfs2_read_inode_block+0x11e/0x180 [ 444.996445][T13983] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 445.002429][T13983] ? do_raw_spin_unlock+0x121/0x230 [ 445.007614][T13983] lock_acquire+0x197/0x410 [ 445.012094][T13983] ? ocfs2_page_mkwrite+0x2d0/0xd10 [ 445.017273][T13983] ? __might_sleep+0xe0/0xe0 [ 445.021842][T13983] ? read_lock_is_recursive+0x20/0x20 [ 445.027199][T13983] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.032379][T13983] ? lockdep_hardirqs_on+0x98/0x150 [ 445.037556][T13983] ? sigprocmask+0x15d/0x190 [ 445.042126][T13983] down_write+0x97/0x1f0 [ 445.046346][T13983] ? ocfs2_page_mkwrite+0x2d0/0xd10 [ 445.051524][T13983] ? down_read_killable+0x340/0x340 [ 445.056723][T13983] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 445.062776][T13983] ocfs2_page_mkwrite+0x2d0/0xd10 [ 445.067786][T13983] ? do_page_mkwrite+0x153/0x3e0 [ 445.072708][T13983] ? lockdep_hardirqs_on+0x98/0x150 [ 445.077884][T13983] ? ocfs2_fault+0x3d0/0x3d0 [ 445.082452][T13983] ? sigprocmask+0x15d/0x190 [ 445.087023][T13983] ? rcu_is_watching+0x15/0xb0 [ 445.091770][T13983] ? ocfs2_fault+0x211/0x3d0 [ 445.096365][T13983] ? ocfs2_mmap+0x230/0x230 [ 445.100866][T13983] ? __lock_acquire+0x7c80/0x7c80 [ 445.105874][T13983] ? __pte_offset_map+0x249/0x2c0 [ 445.110882][T13983] do_page_mkwrite+0x153/0x3e0 [ 445.115646][T13983] handle_mm_fault+0x19b8/0x4920 [ 445.120586][T13983] ? handle_mm_fault+0xd1/0x4920 [ 445.125511][T13983] ? numa_migrate_prep+0x350/0x350 [ 445.130603][T13983] ? follow_page_pte+0x6fb/0x1a70 [ 445.135627][T13983] ? pmd_lock+0x60/0x60 [ 445.139788][T13983] __get_user_pages+0x5ea/0x1470 [ 445.144716][T13983] ? populate_vma_page_range+0x370/0x370 [ 445.150336][T13983] ? __gup_longterm_locked+0x225d/0x2920 [ 445.155961][T13983] ? down_read_killable+0x1d0/0x340 [ 445.161155][T13983] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 445.167122][T13983] __gup_longterm_locked+0x22bb/0x2920 [ 445.172571][T13983] ? pin_user_pages_remote+0x210/0x210 [ 445.178020][T13983] ? mark_lock+0x94/0x320 [ 445.182340][T13983] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 445.188314][T13983] ? lock_chain_count+0x20/0x20 [ 445.193147][T13983] ? sanity_check_pinned_pages+0x1374/0x1500 [ 445.199117][T13983] ? internal_get_user_pages_fast+0x1fa2/0x2730 [ 445.205346][T13983] internal_get_user_pages_fast+0x217f/0x2730 [ 445.211434][T13983] ? get_user_pages_fast_only+0xa0/0xa0 [ 445.216967][T13983] ? __asan_memset+0x22/0x40 [ 445.221543][T13983] ? lockdep_init_map_type+0xa1/0x880 [ 445.226908][T13983] ? lockdep_softirqs_off+0x430/0x430 [ 445.232268][T13983] ? slab_post_alloc_hook+0x8a/0x4d0 [ 445.237537][T13983] ? pin_user_pages_fast+0x89/0xe0 [ 445.242637][T13983] iov_iter_extract_pages+0x393/0x790 [ 445.247996][T13983] __blockdev_direct_IO+0x10d6/0x3420 [ 445.253357][T13983] ? __lock_acquire+0x7c80/0x7c80 [ 445.258392][T13983] ? ocfs2_free_unwritten_list+0x280/0x280 [ 445.264387][T13983] ? ocfs2_dio_wr_get_block+0x17a0/0x17a0 [ 445.270099][T13983] ? show_vfsstat+0x3a0/0x3a0 [ 445.274772][T13983] ? ocfs2_free_unwritten_list+0x280/0x280 [ 445.280587][T13983] ? make_vfsgid+0x51/0xb0 [ 445.284998][T13983] ? atime_needs_update+0x261/0x990 [ 445.290191][T13983] ? inode_update_time+0x130/0x130 [ 445.295307][T13983] ? ocfs2_inode_unlock+0xa5/0x140 [ 445.300423][T13983] ? ocfs2_free_unwritten_list+0x280/0x280 [ 445.306219][T13983] ocfs2_direct_IO+0x240/0x2b0 [ 445.310965][T13983] generic_file_read_iter+0x317/0x4f0 [ 445.316336][T13983] ? _raw_spin_unlock+0x28/0x40 [ 445.321205][T13983] ocfs2_file_read_iter+0x476/0xa30 [ 445.326394][T13983] ? ocfs2_file_llseek+0x3e0/0x3e0 [ 445.331751][T13983] ? __rwlock_init+0x150/0x150 [ 445.336510][T13983] ? end_current_label_crit_section+0x149/0x170 [ 445.342752][T13983] ? common_file_perm+0x198/0x1f0 [ 445.347779][T13983] vfs_read+0x431/0x920 [ 445.351953][T13983] ? kernel_read+0x1e0/0x1e0 [ 445.356896][T13983] ? __fget_files+0x44a/0x4d0 [ 445.361588][T13983] ? __fdget_pos+0x2a3/0x330 [ 445.366173][T13983] ? ksys_read+0x75/0x250 [ 445.370492][T13983] ksys_read+0x147/0x250 [ 445.374734][T13983] ? vfs_write+0x940/0x940 [ 445.379167][T13983] ? lockdep_hardirqs_on+0x98/0x150 [ 445.384360][T13983] do_syscall_64+0x55/0xb0 [ 445.388764][T13983] ? clear_bhb_loop+0x40/0x90 [ 445.393426][T13983] ? clear_bhb_loop+0x40/0x90 [ 445.398088][T13983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.403965][T13983] RIP: 0033:0x7fa489f8e929 [ 445.408369][T13983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.427965][T13983] RSP: 002b:00007fa48ad20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.436375][T13983] RAX: ffffffffffffffda RBX: 00007fa48a1b5fa0 RCX: 00007fa489f8e929 [ 445.444365][T13983] RDX: 0000000000001000 RSI: 0000200000001400 RDI: 0000000000000004 [ 445.452353][T13983] RBP: 00007fa48a010b39 R08: 0000000000000000 R09: 0000000000000000 [ 445.460311][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.468273][T13983] R13: 0000000000000000 R14: 00007fa48a1b5fa0 R15: 00007ffdbbbe37f8 [ 445.476416][T13983] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 445.565376][T13983] (syz.6.1684,13983,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -4 [ 445.728200][T11437] ocfs2: Unmounting device (7,6) on (node local) [ 446.110021][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.978289][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.020292][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.080554][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.774001][ T48] hsr_slave_0: left promiscuous mode [ 447.782641][ T48] hsr_slave_1: left promiscuous mode [ 447.790566][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.798226][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.807045][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.814448][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.823410][ T48] bridge_slave_1: left allmulticast mode [ 447.829353][ T48] bridge_slave_1: left promiscuous mode [ 447.835224][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.843325][ T48] bridge_slave_0: left allmulticast mode [ 447.849316][ T48] bridge_slave_0: left promiscuous mode [ 447.855279][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.866180][ T48] veth1_macvtap: left promiscuous mode [ 447.871853][ T48] veth0_macvtap: left promiscuous mode [ 447.877779][ T48] veth1_vlan: left promiscuous mode [ 447.883028][ T48] veth0_vlan: left promiscuous mode [ 448.066277][ T48] team0 (unregistering): Port device team_slave_1 removed [ 448.100550][ T48] team0 (unregistering): Port device team_slave_0 removed [ 448.132666][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.170766][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.250500][ T48] bond0 (unregistering): Released all slaves [ 448.631750][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.728135][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.770419][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.818518][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.897997][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.908411][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.959183][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.969567][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.030098][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.040496][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.079078][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.089499][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.160672][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.199305][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.249275][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.289437][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.353057][ T48] hsr_slave_0: left promiscuous mode [ 450.359236][ T48] hsr_slave_1: left promiscuous mode [ 450.366927][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.374316][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.383416][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.391105][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.398871][ T48] bridge_slave_1: left allmulticast mode [ 450.404516][ T48] bridge_slave_1: left promiscuous mode [ 450.410285][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.418683][ T48] bridge_slave_0: left allmulticast mode [ 450.424320][ T48] bridge_slave_0: left promiscuous mode [ 450.430268][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.440842][ T48] hsr_slave_0: left promiscuous mode [ 450.446984][ T48] hsr_slave_1: left promiscuous mode [ 450.452620][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.460145][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.470280][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.477823][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.486265][ T48] bridge_slave_1: left allmulticast mode [ 450.491901][ T48] bridge_slave_1: left promiscuous mode [ 450.497626][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.507359][ T48] bridge_slave_0: left allmulticast mode [ 450.512990][ T48] bridge_slave_0: left promiscuous mode [ 450.518928][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.530077][ T48] hsr_slave_0: left promiscuous mode [ 450.535766][ T48] hsr_slave_1: left promiscuous mode [ 450.541383][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.548998][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.557129][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.564514][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.572141][ T48] bridge_slave_1: left allmulticast mode [ 450.579053][ T48] bridge_slave_1: left promiscuous mode [ 450.585003][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.593027][ T48] bridge_slave_0: left allmulticast mode [ 450.598962][ T48] bridge_slave_0: left promiscuous mode [ 450.604804][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.617640][ T48] veth1_macvtap: left promiscuous mode [ 450.623125][ T48] veth0_macvtap: left promiscuous mode [ 450.629172][ T48] veth1_vlan: left promiscuous mode [ 450.634399][ T48] veth0_vlan: left promiscuous mode [ 450.640613][ T48] veth1_macvtap: left promiscuous mode [ 450.646145][ T48] veth0_macvtap: left promiscuous mode [ 450.652096][ T48] veth1_vlan: left promiscuous mode [ 450.657760][ T48] veth0_vlan: left promiscuous mode [ 450.663780][ T48] veth1_macvtap: left promiscuous mode [ 450.670288][ T48] veth0_macvtap: left promiscuous mode [ 450.675942][ T48] veth1_vlan: left promiscuous mode [ 450.681182][ T48] veth0_vlan: left promiscuous mode [ 450.980670][ T48] team0 (unregistering): Port device team_slave_1 removed [ 451.013366][ T48] team0 (unregistering): Port device team_slave_0 removed [ 451.046968][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.079925][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.142156][ T48] bond0 (unregistering): Released all slaves [ 451.193067][ T48] pim6reg (unregistering): left allmulticast mode [ 451.339183][ T48] team0 (unregistering): Port device team_slave_1 removed [ 451.379155][ T48] team0 (unregistering): Port device team_slave_0 removed [ 451.411606][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.449861][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.521297][ T48] bond0 (unregistering): Released all slaves [ 451.533015][ T48] bridge0 (unregistering): left allmulticast mode [ 451.704784][ T48] team0 (unregistering): Port device team_slave_1 removed [ 451.744896][ T48] team0 (unregistering): Port device team_slave_0 removed [ 451.773924][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.807881][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.874677][ T48] bond0 (unregistering): Released all slaves [ 452.635725][ T48] IPVS: stop unused estimator thread 0...