last executing test programs: 1m30.427187739s ago: executing program 3 (id=1567): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYRES16, @ANYRES8], 0x1, 0x5511, &(0x7f0000006a00)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff0000000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x1ba) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x5, 0x0) 1m30.352740525s ago: executing program 2 (id=1569): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') fanotify_init(0x0, 0x0) 1m29.149653167s ago: executing program 0 (id=1572): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 1m29.149109717s ago: executing program 2 (id=1573): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$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") symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='./bus\x00') mkdir(&(0x7f0000000400)='./control\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) 1m28.914234408s ago: executing program 0 (id=1575): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_IKEY={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 1m28.637143104s ago: executing program 2 (id=1576): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100}], 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010", @ANYRES32=0x0, @ANYBLOB="000000000000000014"], 0x34}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m28.503341077s ago: executing program 0 (id=1577): r0 = memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x4a, 0xd9}}]}}]}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.329912463s ago: executing program 2 (id=1578): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="5ce1fcaa0596912a63c69f1c21082c838d4a0547ef4667f020", @ANYRESDEC, @ANYRESHEX], 0x4c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x3a, 0x0, 0x80, 0x1, 0x0, 0x0, 0x67}, 0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x5000}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m28.079845446s ago: executing program 3 (id=1580): openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) fcntl$addseals(r3, 0x409, 0xc) 1m26.425391909s ago: executing program 2 (id=1582): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40), 0x4000000000000aa, 0x0) 1m26.30392845s ago: executing program 3 (id=1583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000004f000000350000000000000085000000230000009500000000000000f4670880271e3503200ffa95a2c8c037c5a142dfa8ba6287066c5197fabd5f7010e89ae0b737126ea6d40dfeceed29d0608d38665cb6e22ff5dde54704d27779949c23e2e6979df3a2350ea7c09cc28de194f44842a5f0a8320e13822c8707f8612c10b100000000b0d3712c7e93363af3c075ff1e23160000000000000000f3d576090c4867a7b6393e366c6386d5ec7209d031cb30f6b7f40f3000e9576e51a7f550afc852003b2f7846c744ae6af3c037102124d85cec074c6949e1d76d067a97000247fe5f17fd32aaab800f4104dbaba46aac3a815b1e5c6d1d224b64be6c4d7f47ef6d02ba536cdacecf7eb6baaa4a9779f8555eaea768c1f2c221c110ef050000000ee282ab76f593d928cf95846be6277c04b8c5324812696a623cd8a4f8dc8dcba00b1b2d2547c45b0c52087b5efabf8496b9a951667dd58ea0327b56c0ebfb19a34268335648e1f844ce328c10752a42dca52fb98c1452b651ebf942f7297f7b2744419a2f238f173d0cd46dafc663373d700b9096bf701fe95500f53e5309ec91d83cf4fbd775d9c07d8d591a4dac60ff00e629b3b20000000000000000000000000000000000000000000000614fc97bff9cfa139a35a8b7d58e334ee5ee82a334dddd39459185ca47f48f3f897ba1d21c33f2b14910616aa9cb3e42b6b5e57ba3a20ef511e52e2d36ebd098379f9f7cbd9cf2860bc5e874e8a0ccce67f185b43c516d3f8bfd8b1bba365d29cba56e92d6860d96c16324fa6933dc2443325a7e2d8145fe00eb8f3859d56a4707c0512d03e6096a5806920bf2af3707814fc5b8d18734aa915cc7e182642a4fbdab97eaf408786d07464d69246055c18da4ce055e4b94042aed861c98012b535193fc5c30e3dfff1c3fe8154444f649b6cde6b9d954b4cd03ec91ef97f7d7ffe6fdf0ff0a5fa5eaca3ac8ebf45ff7d77880cdda3ade4ee2000ec7e7efeea3d87a7a73e010f1bd6c3aec07ef0dee2d3314398fb708303947d5346e443f7db380d49d7f1f40b3c165152dd643767af4ff2b656e984537fc0ab38dffaac0b30c3adb92b415c75eec0cd5d0b9c2541466db05000000f87d97fb6c327c0fe7902ff943bbf51516408257a379635ee2483acd024bddd5470d9f824b37f2b17529513336a79503799523cccf646451cb3cae91755075f42f57a799b254b3d92260aa4c974465ca4793c00c841760fb6457147688ffdd3ad2c51d92955eb50d39b965b9a4c25c1f2b43e3a2e5b2691c9ca21ade26568c7fd4c5750d971ec61811ca2e10b46c69b143b8d6ed638abc60eb29feee7a9b45adf3f032675b918d6c5470ae962083419a4462dbfa263db8bfdf1e827114d2c9808c968b4722d2df5115e247c9cff176070b67bba09d9911a75496c310794ed868fb959aa9790010310fa60eee856ef40625c47b01cc97e98773e8a1ee4d2bc9759f32adb9f8666c71f7f52679b72da4d5507971ff735431c4b497c38050987e88594fa57360f6dfd6324ed0a0f946635ff18a20ffc1fe5b725a26bf422703bfc5e8ea413e0383119e3052adbbaac9207ceece962a1a5dce7b45e769f29e89b381adc85f62efb1ce64c277e2a09017642df9a615241bb732614be1017c8070de02d7caed82b33cb284f2d4340839c3137e92f16b3983924195cae21a193ab1e227a318b612ba5ab7ede79e42b6e47162c7f92f"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x12, &(0x7f00000000c0)="61df712bc884fed5722780b605a7", 0x0, 0x1bd0}, 0x28) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl(r3, 0x6, &(0x7f0000000000)="5a6844ab65d6c1130d49465781334ed09e52c63f6c54fa1bf9716699688f797f0ba7bd402e7545ba6c131cee84d9ddbefa541c991401920aa0b52607dfc83ef6a6a8ec9a3f90a94fee43d55534b3a4dd2523dce8fedcc95a448f958ca0ba67af7fc8195d9276e76234152a6245398b3e5be6f136") 1m26.131233547s ago: executing program 2 (id=1584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="53021db78453"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000700)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m26.130663447s ago: executing program 3 (id=1585): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000080)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550d0f4f5c89b1a33dd47ded539aef131d50bbd556a368015804dde00b"], 0x1, 0x610a, &(0x7f000000c640)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsmount(r3, 0x0, 0x0) 1m24.963993045s ago: executing program 0 (id=1587): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200031007"], 0xd) 1m24.291176666s ago: executing program 3 (id=1588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) 1m22.461465476s ago: executing program 3 (id=1589): socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 1m21.45257178s ago: executing program 0 (id=1592): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000240)=0xcd, 0x4) 1m20.349909741s ago: executing program 0 (id=1593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x44}}, 0x0) 15.66632s ago: executing program 1 (id=1667): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x3, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xff00) 14.166834119s ago: executing program 1 (id=1670): getrlimit(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 13.191179069s ago: executing program 1 (id=1672): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 12.301174701s ago: executing program 1 (id=1673): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) 11.799505557s ago: executing program 1 (id=1674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x4000086e, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 11.65798955s ago: executing program 4 (id=1675): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500200000008"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001300)) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x787180, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4ba2007fff000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0x44}}, 0x0) 10.684320431s ago: executing program 1 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x8001}], 0x1, 0x0) 4.662506029s ago: executing program 4 (id=1677): socket(0x11, 0x800000003, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, "8dd7088c06ef8b55d55cd9a0b466f33bb03e22"}) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b44959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0xfffffffe, 0x0) 4.196977442s ago: executing program 4 (id=1678): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f000063a000/0x3000)=nil, 0x3000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) epoll_create(0x0) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfff) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x40, 0x0) semget$private(0x0, 0x4000000009, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x8200) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0x2) 1.667979346s ago: executing program 4 (id=1679): r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() io_setup(0x202, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 484.043415ms ago: executing program 4 (id=1681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)={0x14, 0x15, 0xa, 0x201}, 0x14}}, 0x0) bind$alg(r2, 0x0, 0x0) 0s ago: executing program 4 (id=1682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) r4 = dup2(r0, r2) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)='secer\x03\x00\x00\x00selin\x8cB\xabl\xa6e\x15ux\x00\xab', 0x0) pwrite64(r5, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8085}, 0x40000) read$FUSE(r4, &(0x7f0000001900)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): : Done. [ 1018.530092][ T4499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.694310][ T27] audit: type=1326 audit(1727236298.612:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f332177df87 code=0x7ffc0000 [ 1018.721597][T11629] overlayfs: failed to resolve './file0': -2 [ 1018.807879][ T9834] XFS (loop1): Unmounting Filesystem [ 1018.809625][T11631] loop4: detected capacity change from 0 to 32768 [ 1018.813710][ T27] audit: type=1326 audit(1727236298.782:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f332177c890 code=0x7ffc0000 [ 1018.845764][T11631] XFS: attr2 mount option is deprecated. [ 1018.905976][ T4499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.002898][ T27] audit: type=1326 audit(1727236298.782:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f332177dafb code=0x7ffc0000 [ 1019.035213][ T3640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1019.047444][ T3640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1019.057196][ T3640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1019.080631][ T7002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1019.088518][ T7002] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1019.096837][ T7002] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1019.155977][T11631] XFS (loop4): Mounting V5 Filesystem [ 1019.171689][ T27] audit: type=1326 audit(1727236298.822:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f332177cb8a code=0x7ffc0000 [ 1019.339321][T11631] XFS (loop4): Ending clean mount [ 1019.364850][T11631] XFS (loop4): Quotacheck needed: Please wait. [ 1019.467965][T11631] XFS (loop4): Quotacheck: Done. [ 1019.808478][T10060] XFS (loop4): Unmounting Filesystem [ 1020.202096][T11659] chnl_net:caif_netlink_parms(): no params data found [ 1020.291193][T11687] hub 9-0:1.0: USB hub found [ 1020.296914][T11687] hub 9-0:1.0: 8 ports detected [ 1020.991375][T11691] loop1: detected capacity change from 0 to 512 [ 1021.170791][ T3648] Bluetooth: hci2: command tx timeout [ 1021.917488][T11691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1021.947056][T11691] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038 (0x7fffffff) [ 1022.329738][T11714] overlayfs: './file2' not a directory [ 1023.244459][ T3648] Bluetooth: hci2: command tx timeout [ 1025.324478][ T3648] Bluetooth: hci2: command tx timeout [ 1026.507885][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.521215][ T9834] EXT4-fs (loop1): unmounting filesystem. [ 1026.523156][T11659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.558868][T11659] device bridge_slave_0 entered promiscuous mode [ 1026.709520][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.727152][T11659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.737817][T11730] loop1: detected capacity change from 0 to 256 [ 1026.752404][T11659] device bridge_slave_1 entered promiscuous mode [ 1026.762384][T11732] loop4: detected capacity change from 0 to 512 [ 1026.834795][T11732] EXT4-fs: Ignoring removed i_version option [ 1026.919738][T11659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.930095][T11732] EXT4-fs (loop4): 1 truncate cleaned up [ 1026.955735][T11732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1026.970948][T11659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.040145][T11659] team0: Port device team_slave_0 added [ 1027.168218][T10060] EXT4-fs (loop4): unmounting filesystem. [ 1027.645201][ T3648] Bluetooth: hci2: command tx timeout [ 1027.675566][T11659] team0: Port device team_slave_1 added [ 1027.742700][T11752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1336'. [ 1027.778899][T11757] syz.1.1339[11757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1027.779139][T11757] syz.1.1339[11757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1027.975930][T11659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.027079][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.099320][T11659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.112930][T11659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.120659][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.159306][T11659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.438433][T11659] device hsr_slave_0 entered promiscuous mode [ 1028.510829][T11659] device hsr_slave_1 entered promiscuous mode [ 1028.559613][T11770] hub 9-0:1.0: USB hub found [ 1028.565482][T11770] hub 9-0:1.0: 8 ports detected [ 1028.895035][T11659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1029.020695][T11659] Cannot create hsr debugfs directory [ 1030.562925][T11792] loop2: detected capacity change from 0 to 128 [ 1030.615522][T11792] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1030.645589][T11767] loop1: detected capacity change from 0 to 32768 [ 1030.705564][T11792] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1030.827863][T11767] XFS (loop1): Mounting V5 Filesystem [ 1030.963533][ T4499] device hsr_slave_0 left promiscuous mode [ 1030.990764][T11767] XFS (loop1): Ending clean mount [ 1030.996180][ T4499] device hsr_slave_1 left promiscuous mode [ 1031.006842][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.022529][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.062885][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.066969][T11767] XFS (loop1): Quotacheck needed: Please wait. [ 1031.074097][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.108035][ T4499] device bridge_slave_1 left promiscuous mode [ 1031.117983][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.158651][T11767] XFS (loop1): Quotacheck: Done. [ 1031.206002][ T4499] device bridge_slave_0 left promiscuous mode [ 1031.219955][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.268706][T11817] syz.2.1352[11817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.268867][T11817] syz.2.1352[11817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.286557][ T9834] XFS (loop1): Unmounting Filesystem [ 1031.426569][ T4499] device veth1_macvtap left promiscuous mode [ 1031.433321][ T4499] device veth0_macvtap left promiscuous mode [ 1031.480073][ T4499] device veth1_vlan left promiscuous mode [ 1031.486069][ T4499] device veth0_vlan left promiscuous mode [ 1035.261392][T11837] hub 9-0:1.0: USB hub found [ 1035.280824][T11837] hub 9-0:1.0: 8 ports detected [ 1036.014588][T11839] loop2: detected capacity change from 0 to 32768 [ 1036.046283][T11839] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1359 (11839) [ 1036.095406][T11839] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1036.115118][T11839] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1036.150353][T11839] BTRFS info (device loop2): enabling auto defrag [ 1036.160452][T11839] BTRFS info (device loop2): doing ref verification [ 1036.176722][T11839] BTRFS info (device loop2): max_inline at 0 [ 1036.182797][T11839] BTRFS info (device loop2): force clearing of disk cache [ 1036.214306][T11839] BTRFS info (device loop2): turning on sync discard [ 1036.226855][T11839] BTRFS info (device loop2): disabling free space tree [ 1036.270614][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 1036.391450][T11839] BTRFS info (device loop2): enabling ssd optimizations [ 1036.393197][T11843] loop1: detected capacity change from 0 to 40427 [ 1036.402129][T11839] BTRFS info (device loop2): rebuilding free space tree [ 1036.419947][T11843] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1036.459192][T11839] BTRFS info (device loop2): disabling free space tree [ 1036.466864][T11839] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1036.473642][T11843] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1036.479866][T11839] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1036.517432][T11843] F2FS-fs (loop1): invalid crc value [ 1036.517940][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 1036.533443][T11843] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1036.679299][T11843] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1036.690055][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.733126][T11843] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1036.947255][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.972994][ T9380] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1039.891437][T11873] loop1: detected capacity change from 0 to 40427 [ 1039.921990][T11873] F2FS-fs (loop1): invalid crc value [ 1039.927592][T11873] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 1039.949121][T11873] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1040.009846][T11873] F2FS-fs (loop1): recover fsync data on readonly fs [ 1040.017692][T11873] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1040.024806][T11873] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1040.044813][T11873] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1040.083989][ T4499] bond0 (unregistering): Released all slaves [ 1040.488510][T11893] loop4: detected capacity change from 0 to 1024 [ 1040.802910][T11899] hub 9-0:1.0: USB hub found [ 1040.891788][T11899] hub 9-0:1.0: 8 ports detected [ 1041.571492][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1041.587162][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1041.625425][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1041.636576][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1041.646211][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1041.654763][ T3648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1042.188226][ T8768] hfsplus: b-tree write err: -5, ino 4 [ 1043.727422][ T7002] Bluetooth: hci3: command tx timeout [ 1044.116778][T11659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1044.182730][T11659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1044.269682][T11659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1044.301295][T11914] chnl_net:caif_netlink_parms(): no params data found [ 1044.382011][T11659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1044.895415][T11937] loop2: detected capacity change from 0 to 32768 [ 1044.931789][T11832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (11832) [ 1044.967847][T11937] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1044.998382][T11937] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1045.014285][T11937] BTRFS info (device loop2): using free space tree [ 1045.191376][T11937] BTRFS info (device loop2): enabling ssd optimizations [ 1045.342856][T11914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.356166][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.424697][T11914] device bridge_slave_0 entered promiscuous mode [ 1045.505029][T11914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.541339][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.572158][T11914] device bridge_slave_1 entered promiscuous mode [ 1045.576577][T11827] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 1045.629331][T11659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.758239][T11914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.814445][ T7002] Bluetooth: hci3: command tx timeout [ 1045.851670][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1045.929708][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1045.941639][T11659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.955188][T11914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.983864][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1046.001971][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1046.023721][ T3771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.030921][ T3771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.189683][T11914] team0: Port device team_slave_0 added [ 1046.196382][ T9380] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1046.547236][ T4499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.593534][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1046.615122][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1046.645590][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1046.674664][ T3771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.681778][ T3771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.724860][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1046.748879][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1046.783632][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1046.805532][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1046.825942][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1046.845128][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1046.870764][T11914] team0: Port device team_slave_1 added [ 1046.916072][T11981] hub 9-0:1.0: USB hub found [ 1046.927922][T11981] hub 9-0:1.0: 8 ports detected [ 1046.936984][ T4499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.971292][T11659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1046.992257][T11659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1047.060260][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1047.072795][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1047.111958][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1047.128590][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1047.140090][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1047.152602][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1047.369197][ T4499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.506081][T11914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.515075][ T3683] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1047.549678][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.433843][ T7002] Bluetooth: hci3: command tx timeout [ 1048.474351][T11914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.617848][ T4499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.774823][ T3683] usb 3-1: Using ep0 maxpacket: 16 [ 1048.781900][T11914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.822304][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.914432][ T3683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.925501][ T3683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.944683][ T3683] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1048.953888][ T3683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.974275][T11914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.987505][ T3683] usb 3-1: config 0 descriptor?? [ 1049.381786][T11914] device hsr_slave_0 entered promiscuous mode [ 1049.494441][T11914] device hsr_slave_1 entered promiscuous mode [ 1049.514297][T11914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.525285][T11914] Cannot create hsr debugfs directory [ 1049.534355][ T3683] usbhid 3-1:0.0: can't add hid device: -71 [ 1049.540364][ T3683] usbhid: probe of 3-1:0.0 failed with error -71 [ 1049.578394][T11659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.632424][T12001] loop4: detected capacity change from 0 to 32768 [ 1049.738475][T11659] device veth0_vlan entered promiscuous mode [ 1049.778817][T11659] device veth1_vlan entered promiscuous mode [ 1049.814716][T12001] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1383 (12001) [ 1049.850153][T12001] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1049.870790][T12001] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1049.890985][T12001] BTRFS info (device loop4): enabling auto defrag [ 1049.914431][T12001] BTRFS info (device loop4): doing ref verification [ 1049.921079][T12001] BTRFS info (device loop4): max_inline at 0 [ 1049.960738][T12001] BTRFS info (device loop4): force clearing of disk cache [ 1049.990497][T12001] BTRFS info (device loop4): turning on sync discard [ 1049.999471][ T3683] usb 3-1: USB disconnect, device number 14 [ 1050.021794][T12001] BTRFS info (device loop4): disabling free space tree [ 1050.368718][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.438429][T12030] hub 9-0:1.0: USB hub found [ 1050.444348][T12030] hub 9-0:1.0: 8 ports detected [ 1050.460242][ T3648] Bluetooth: hci3: command tx timeout [ 1050.496888][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.578567][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.661928][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.781415][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.928554][T12001] BTRFS info (device loop4): enabling ssd optimizations [ 1050.945498][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.955396][T12001] BTRFS info (device loop4): rebuilding free space tree [ 1050.975757][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1050.995661][T12001] BTRFS info (device loop4): disabling free space tree [ 1051.005621][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1051.023406][T12001] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1051.086725][T12001] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1051.355479][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.448858][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.656443][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1051.677901][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.707905][T12040] netlink: 'syz.2.1386': attribute type 4 has an invalid length. [ 1051.723257][T12040] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1386'. [ 1051.925262][ T3640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1051.977935][ T3640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1051.987669][ T3640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1051.997467][ T3640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1052.035749][ T3640] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1052.043138][ T3640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1052.255252][T11659] device veth0_macvtap entered promiscuous mode [ 1052.275414][T10060] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1052.569630][T11659] device veth1_macvtap entered promiscuous mode [ 1052.795094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1052.912075][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.968469][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.994460][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.082903][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.160730][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.533070][T12066] hub 9-0:1.0: USB hub found [ 1053.538869][T12066] hub 9-0:1.0: 8 ports detected [ 1053.619051][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.760175][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.872314][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.994807][T11659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.186849][ T3648] Bluetooth: hci1: command tx timeout [ 1054.538852][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1054.551858][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1054.588543][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.609266][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.640408][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.671574][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.703403][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.729744][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.750150][T11659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.785835][T11659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.819479][T11659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.204824][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1055.468794][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1055.533260][T11659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.564132][T11659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.624325][T11659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.727717][T11659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.137819][T12080] loop4: detected capacity change from 0 to 512 [ 1056.204510][ T3648] Bluetooth: hci1: command tx timeout [ 1056.245871][T12080] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1056.448038][ T3640] Bluetooth: hci0: command 0x0406 tx timeout [ 1056.507852][T12098] hub 9-0:1.0: USB hub found [ 1056.514342][T12098] hub 9-0:1.0: 8 ports detected [ 1057.149357][T12080] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1391: iget: bad i_size value: -67835469387268086 [ 1057.184800][T12080] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1391: couldn't read orphan inode 15 (err -117) [ 1057.246241][T12080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1057.277650][T12080] ext2 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff) [ 1057.466321][T11914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1057.486075][T11914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1057.509038][T11914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1057.886724][ T8750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.907801][ T8750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.945114][T11914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1057.962561][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1058.036394][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.144241][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.293952][ T3648] Bluetooth: hci1: command tx timeout [ 1058.337237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1058.510408][T12043] chnl_net:caif_netlink_parms(): no params data found [ 1058.623770][T12108] kvm: vcpu 0: requested 48 ns lapic timer period limited to 200000 ns [ 1058.766111][ T4499] device hsr_slave_0 left promiscuous mode [ 1058.793697][ T4499] device hsr_slave_1 left promiscuous mode [ 1058.812401][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.830513][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.848677][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.881699][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.909655][ T4499] device bridge_slave_1 left promiscuous mode [ 1058.924854][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.938967][ T4499] device bridge_slave_0 left promiscuous mode [ 1058.949997][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.006468][T10060] EXT4-fs (loop4): unmounting filesystem. [ 1059.101485][ T4499] device veth1_macvtap left promiscuous mode [ 1059.112881][ T4499] device veth0_macvtap left promiscuous mode [ 1059.151166][ T4499] device veth1_vlan left promiscuous mode [ 1059.189316][ T4499] device veth0_vlan left promiscuous mode [ 1059.500050][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.506423][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.364480][ T3648] Bluetooth: hci1: command tx timeout [ 1061.114825][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 1061.296410][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 1061.489251][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.330326][T12122] loop3: detected capacity change from 0 to 128 [ 1062.385360][T11832] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1062.567024][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.697482][T12122] loop3: detected capacity change from 0 to 32768 [ 1062.712188][T12122] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1395 (12122) [ 1062.727098][T12122] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1062.737381][T12122] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1062.746139][T12122] BTRFS info (device loop3): doing ref verification [ 1062.752829][T12122] BTRFS info (device loop3): max_inline at 4096 [ 1062.759227][T12122] BTRFS info (device loop3): max_inline at 4096 [ 1062.765739][T12122] BTRFS info (device loop3): turning off barriers [ 1062.772171][T12122] BTRFS info (device loop3): using free space tree [ 1064.557082][T11659] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1066.416184][ T4499] bond0 (unregistering): Released all slaves [ 1066.624725][ T7732] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1066.862854][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.870275][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.879589][T12043] device bridge_slave_0 entered promiscuous mode [ 1066.890822][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.894470][ T7732] usb 4-1: Using ep0 maxpacket: 32 [ 1066.898473][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.915605][T12043] device bridge_slave_1 entered promiscuous mode [ 1067.034659][ T7732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.063324][ T7732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.087905][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.117594][ T7732] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1067.130959][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.174926][ T7732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.185408][ T7732] usb 4-1: config 0 descriptor?? [ 1067.227605][ T7732] hub 4-1:0.0: USB hub found [ 1067.256127][T11914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.266979][T12168] loop2: detected capacity change from 0 to 2048 [ 1067.290685][T12170] loop4: detected capacity change from 0 to 1024 [ 1067.308657][T12170] EXT4-fs: Ignoring removed nobh option [ 1067.333422][T12170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1067.333923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1067.345096][T12168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1067.404074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1067.406695][T12170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1067.423584][T12043] team0: Port device team_slave_0 added [ 1067.439405][T11914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.446407][ T7732] hub 4-1:0.0: 1 port detected [ 1067.454709][ T9380] EXT4-fs (loop2): unmounting filesystem. [ 1067.479623][T12043] team0: Port device team_slave_1 added [ 1067.570436][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1067.581988][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1067.598843][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.606031][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.619859][T10060] EXT4-fs (loop4): unmounting filesystem. [ 1067.627987][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1067.637321][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1068.280187][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.287597][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.642550][T10498] usb 4-1: USB disconnect, device number 16 [ 1070.729571][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1070.740355][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1070.763561][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.781598][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.839013][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.901318][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.917005][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.972787][T12187] loop2: detected capacity change from 0 to 2048 [ 1070.997066][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.039309][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1071.161501][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1071.170998][T12187] loop2: detected capacity change from 2048 to 0 [ 1071.183938][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1071.220217][T12043] device hsr_slave_0 entered promiscuous mode [ 1071.235122][T12043] device hsr_slave_1 entered promiscuous mode [ 1071.245562][T12043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1071.258382][T12043] Cannot create hsr debugfs directory [ 1071.277280][T12187] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 1071.277502][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1071.293310][T12187] FAT-fs (loop2): Filesystem has been set read-only [ 1071.306478][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1071.341518][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1071.343780][ T9380] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 1071.352045][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1071.376265][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1071.386329][ T9380] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 1071.435970][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1071.481177][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1071.493564][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1071.497700][T11145] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1071.648200][ T4499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.757883][T12194] loop4: detected capacity change from 0 to 32768 [ 1071.788479][T12194] XFS (loop4): Mounting V5 Filesystem [ 1071.887732][ T4499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.893736][T12194] XFS (loop4): Ending clean mount [ 1071.911351][T12194] XFS (loop4): Quotacheck needed: Please wait. [ 1072.041123][ T4499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.112593][T12194] XFS (loop4): Quotacheck: Done. [ 1072.178422][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 1072.178439][ T27] audit: type=1804 audit(1727236352.152:398): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1413" name="/newroot/65/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 1072.266968][ T4499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.280075][ T27] audit: type=1804 audit(1727236352.252:399): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1413" name="/newroot/65/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 1072.339111][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1072.346842][ T27] audit: type=1804 audit(1727236352.272:400): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1413" name="/newroot/65/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 1072.353009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1072.418826][T11914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.442952][T10060] XFS (loop4): Unmounting Filesystem [ 1072.629832][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1072.645454][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1072.715644][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1072.732313][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1072.761915][T11914] device veth0_vlan entered promiscuous mode [ 1072.797507][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1072.810416][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1072.855599][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1072.874055][T11914] device veth1_vlan entered promiscuous mode [ 1072.891949][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1072.903291][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1072.913150][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1072.922708][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1072.931148][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1072.939428][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1072.981738][T12217] loop3: detected capacity change from 0 to 2048 [ 1072.989305][T12217] EXT4-fs: Ignoring removed orlov option [ 1073.098606][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1073.116720][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1073.170177][T11914] device veth0_macvtap entered promiscuous mode [ 1073.186994][T12217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1073.259221][T12217] EXT4-fs (loop3): shut down requested (0) [ 1073.326346][ T8772] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1073.444691][ T8772] EXT4-fs (loop3): Remounting filesystem read-only [ 1073.453546][T11914] device veth1_macvtap entered promiscuous mode [ 1073.522279][T11914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.576869][T11914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.599551][T11914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.623055][T11914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.646059][T11914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.670623][T11914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.698278][T11914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.733738][T11914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.775982][T11914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.801934][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1073.816435][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1073.837470][T11659] EXT4-fs (loop3): unmounting filesystem. [ 1073.866184][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1073.885120][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1073.901228][T11914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.924236][T11914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.934098][T11914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.945166][T11914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.955998][T11914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.967315][T11914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.977660][T11914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.988547][T11914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.000945][T11914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.120833][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1074.138568][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1074.149019][T12237] loop4: detected capacity change from 0 to 32768 [ 1074.155739][T11914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.155778][T11914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.155810][T11914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.155842][T11914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.266604][T12237] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1074.276144][T12237] XFS (loop4): Mounting V5 Filesystem [ 1074.329452][T12237] XFS (loop4): Ending clean mount [ 1074.338008][T12237] XFS (loop4): Quotacheck needed: Please wait. [ 1074.388664][T12237] XFS (loop4): Quotacheck: Done. [ 1074.554360][T10060] XFS (loop4): Unmounting Filesystem [ 1074.785098][ T8772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.793334][ T8772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.894586][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1074.918995][T12214] chnl_net:caif_netlink_parms(): no params data found [ 1075.014355][ T3648] Bluetooth: hci4: command tx timeout [ 1075.102386][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.119385][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.390630][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1075.423057][T12214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.454274][T12214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.462599][T12214] device bridge_slave_0 entered promiscuous mode [ 1075.657126][T12214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.671853][T12214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.696211][T12214] device bridge_slave_1 entered promiscuous mode [ 1075.706007][T12043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1075.846049][T12043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1075.858461][T12043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1075.872350][T12214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.944834][T12043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1075.959989][T12214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.181742][T12214] team0: Port device team_slave_0 added [ 1076.264874][T12214] team0: Port device team_slave_1 added [ 1076.398097][T12214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.407067][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.435900][T12214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.529775][ T4499] device hsr_slave_0 left promiscuous mode [ 1076.536970][ T4499] device hsr_slave_1 left promiscuous mode [ 1076.556068][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.563602][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.579130][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.587187][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.595476][ T4499] device bridge_slave_1 left promiscuous mode [ 1076.602257][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.625074][ T4499] device bridge_slave_0 left promiscuous mode [ 1076.631746][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.679786][ T4499] device veth1_macvtap left promiscuous mode [ 1076.687558][ T4499] device veth0_macvtap left promiscuous mode [ 1076.693709][ T4499] device veth1_vlan left promiscuous mode [ 1076.707139][ T4499] device veth0_vlan left promiscuous mode [ 1077.089693][ T3648] Bluetooth: hci4: command tx timeout [ 1077.501958][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 1077.583044][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 1077.706995][T12296] loop4: detected capacity change from 0 to 4096 [ 1077.732343][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.760788][T12296] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1077.777130][T12296] ntfs: (device loop4): ntfs_read_inode_mount(): Failed to lookup attribute list attribute. You should run chkdsk. [ 1077.797454][T12296] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 1077.825773][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.412412][T12298] loop4: detected capacity change from 0 to 32768 [ 1078.420574][T12298] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1430 (12298) [ 1078.470523][T12298] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1078.498179][T12298] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1078.507160][T12298] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1078.533414][T12298] BTRFS info (device loop4): setting datacow [ 1078.539827][T12298] BTRFS info (device loop4): doing ref verification [ 1078.562583][T12298] BTRFS info (device loop4): force clearing of disk cache [ 1078.583476][T12298] BTRFS info (device loop4): turning off barriers [ 1078.590183][T12298] BTRFS info (device loop4): enabling ssd optimizations [ 1078.614244][T12298] BTRFS info (device loop4): using spread ssd allocation scheme [ 1078.622013][T12298] BTRFS info (device loop4): not using ssd optimizations [ 1078.629499][T12298] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1078.652867][T12298] BTRFS info (device loop4): using free space tree [ 1078.932534][ T4499] bond0 (unregistering): Released all slaves [ 1078.940605][T12298] BTRFS info (device loop4): rebuilding free space tree [ 1079.017219][ T27] audit: type=1800 audit(1727236358.992:401): pid=12298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1430" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 1079.069095][T12214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.077079][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.105681][T12214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.136843][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.162294][T12291] device tunl0 entered promiscuous mode [ 1079.168480][ T3648] Bluetooth: hci4: command tx timeout [ 1079.208619][T12291] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 1079.220193][T12291] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1427'. [ 1079.287895][T12043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.318553][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1079.349969][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1079.426733][T10060] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1079.564691][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1079.576829][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1079.597777][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.604962][ T8748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.649578][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1079.661326][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1079.670437][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.677600][ T8748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.686502][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1079.785698][T12214] device hsr_slave_0 entered promiscuous mode [ 1079.814574][T12214] device hsr_slave_1 entered promiscuous mode [ 1079.853679][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1079.896517][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1079.932043][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1079.961798][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1079.973148][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1079.989503][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1080.003849][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1080.015161][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1080.063826][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1080.077630][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1080.089805][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1080.102439][T12043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1080.492995][T12214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.763960][T12214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.949457][T12337] loop4: detected capacity change from 0 to 32768 [ 1080.970969][T12214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.990450][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.025906][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.059841][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.068856][T12337] XFS (loop4): Mounting V5 Filesystem [ 1081.168381][T12337] XFS (loop4): Ending clean mount [ 1081.197628][T12337] XFS (loop4): Quotacheck needed: Please wait. [ 1081.214679][T12214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.248080][ T3648] Bluetooth: hci4: command tx timeout [ 1081.310669][T12337] XFS (loop4): Quotacheck: Done. [ 1081.380565][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1081.389582][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1081.515428][T12337] loop4: detected capacity change from 32768 to 27085 [ 1081.559751][T12354] syz.4.1437: attempt to access beyond end of device [ 1081.559751][T12354] loop4: rw=2051, sector=18728, nr_sectors = 14040 limit=27085 [ 1081.658929][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1081.668666][T10060] XFS (loop4): Unmounting Filesystem [ 1081.679518][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1081.694465][T12043] device veth0_vlan entered promiscuous mode [ 1081.736608][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1081.755156][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1081.767254][T12214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.836694][T12043] device veth1_vlan entered promiscuous mode [ 1081.918973][T12214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.987772][T12214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1082.032384][T12214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1082.177510][T12043] device veth0_macvtap entered promiscuous mode [ 1082.196035][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1082.205084][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1082.213478][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1082.222341][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1082.241805][T12043] device veth1_macvtap entered promiscuous mode [ 1082.376600][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1082.395087][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1082.422478][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.445044][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.464217][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.494743][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.514256][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.534223][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.554309][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.574200][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.596446][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.796719][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1082.816299][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1082.870236][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.890692][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.914270][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.934711][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.954380][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.982352][T12362] loop4: detected capacity change from 0 to 32768 [ 1082.989098][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.000911][T12043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.032102][T12362] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1442 (12362) [ 1083.078391][T12043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.096110][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.112356][T12362] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1083.177516][T12362] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1083.228606][T12367] hub 9-0:1.0: USB hub found [ 1083.234477][T12367] hub 9-0:1.0: 8 ports detected [ 1083.366820][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1083.433421][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1083.523277][T12362] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1083.683323][T12362] BTRFS info (device loop4): max_inline at 0 [ 1083.770154][T12362] BTRFS info (device loop4): enabling disk space caching [ 1083.794412][T12362] BTRFS info (device loop4): turning off barriers [ 1083.836546][T12362] BTRFS info (device loop4): turning on flush-on-commit [ 1083.863976][T12362] BTRFS info (device loop4): doing ref verification [ 1083.878711][T12362] BTRFS info (device loop4): force clearing of disk cache [ 1083.905432][T12362] BTRFS info (device loop4): enabling ssd optimizations [ 1083.912475][T12362] BTRFS info (device loop4): max_inline at 4096 [ 1083.919019][T12362] BTRFS info (device loop4): disk space caching is enabled [ 1084.019299][T12043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.035547][T12043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.051173][T12043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.062545][T12043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.250252][ T3640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1084.254725][T12362] BTRFS info (device loop4): rebuilding free space tree [ 1084.266310][ T3640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1084.275780][ T3640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1084.283980][ T3640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1084.291599][ T4499] device hsr_slave_0 left promiscuous mode [ 1084.304391][ T4499] device hsr_slave_1 left promiscuous mode [ 1084.310630][ T3640] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1084.321662][ T3640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1084.328983][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.345097][T12362] BTRFS info (device loop4): disabling free space tree [ 1084.366617][T12362] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1084.387323][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.398676][T12362] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1084.413054][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.421610][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.443005][ T4499] device bridge_slave_1 left promiscuous mode [ 1084.451073][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.459931][ T4499] device bridge_slave_0 left promiscuous mode [ 1084.468484][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.559764][ T4499] device veth1_macvtap left promiscuous mode [ 1084.571175][ T4499] device veth0_macvtap left promiscuous mode [ 1084.584093][ T4499] device veth1_vlan left promiscuous mode [ 1084.591724][ T4499] device veth0_vlan left promiscuous mode [ 1084.719600][T10060] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1085.431549][T12404] loop4: detected capacity change from 0 to 2048 [ 1085.497964][T11832] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1085.531795][T12404] loop4: detected capacity change from 0 to 512 [ 1085.660583][T12404] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1085.673829][T12404] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1085.732018][T12404] EXT4-fs (loop4): 1 truncate cleaned up [ 1085.741053][T12404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1085.817449][T12404] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 1085.847880][T10060] EXT4-fs (loop4): unmounting filesystem. [ 1086.367246][ T7002] Bluetooth: hci5: command tx timeout [ 1088.030976][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 1088.053352][T12412] loop4: detected capacity change from 0 to 512 [ 1088.116175][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 1088.184441][T12412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1088.193581][T12412] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 1088.205323][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.319558][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.350459][T10060] EXT4-fs (loop4): unmounting filesystem. [ 1088.535256][ T7002] Bluetooth: hci5: command tx timeout [ 1088.800861][T12417] loop4: detected capacity change from 0 to 32768 [ 1088.817542][T12417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1452 (12417) [ 1088.919583][T12417] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1088.956615][T12417] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1088.971223][T12417] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1088.980798][T12417] BTRFS info (device loop4): force clearing of disk cache [ 1088.994039][T12417] BTRFS info (device loop4): using free space tree [ 1089.214258][T12417] BTRFS info (device loop4): enabling ssd optimizations [ 1089.227850][T12417] BTRFS info (device loop4): rebuilding free space tree [ 1089.553391][ T4499] bond0 (unregistering): Released all slaves [ 1089.623403][T10060] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1090.085633][T12214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.196854][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1090.212353][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1090.238789][T12214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.278278][ T8768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.298948][ T8768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.311224][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1090.324720][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1090.378697][ T3893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.386081][ T3893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.401391][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1090.416008][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1090.484140][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1090.493645][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1090.502893][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.510063][ T8768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.520353][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1090.574055][T12214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1090.585110][T12214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1090.604287][ T7002] Bluetooth: hci5: command tx timeout [ 1090.607317][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1090.646009][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1090.659190][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1090.662356][T12438] loop4: detected capacity change from 0 to 32768 [ 1090.668123][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1090.683791][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1090.693186][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1090.710000][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1090.710945][T12438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1453 (12438) [ 1090.723246][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1090.740100][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1090.754971][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.758429][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1090.784355][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.823670][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1090.848091][T12438] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1090.870777][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1090.887447][T12438] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1090.930344][T12388] chnl_net:caif_netlink_parms(): no params data found [ 1090.949680][T12438] BTRFS info (device loop4): turning off barriers [ 1090.989716][T12438] BTRFS info (device loop4): ignoring data csums [ 1091.017438][T12438] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1091.069436][T12438] BTRFS info (device loop4): force zstd compression, level 3 [ 1091.114335][T12438] BTRFS info (device loop4): force zlib compression, level 3 [ 1091.121888][T12438] BTRFS info (device loop4): use zstd compression, level 3 [ 1091.167459][ T27] audit: type=1326 audit(1727236371.142:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.0.1456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc281d7def9 code=0x0 [ 1091.203563][T12438] BTRFS error (device loop4): ignoredatacsums must be used with ro mount option [ 1091.245532][T12438] BTRFS error (device loop4): open_ctree failed [ 1091.340341][T12388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.369054][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.398914][T12388] device bridge_slave_0 entered promiscuous mode [ 1091.428523][T12388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.438263][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.470843][T12388] device bridge_slave_1 entered promiscuous mode [ 1091.599605][T12388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.609027][T10289] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1091.633792][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1091.649183][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1091.663829][T12388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.689475][T12214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.763044][T12388] team0: Port device team_slave_0 added [ 1091.777477][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1091.787157][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1091.812681][T12388] team0: Port device team_slave_1 added [ 1091.842626][T12388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.850289][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.877492][T12388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.891883][T12388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.900133][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.935140][T12388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.957347][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1091.967378][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1091.981508][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1091.989578][T10289] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1091.999073][T10289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.009225][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1092.020986][T10289] usb 2-1: config 0 descriptor?? [ 1092.028542][T12214] device veth0_vlan entered promiscuous mode [ 1092.044729][ T7732] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1092.087987][T12214] device veth1_vlan entered promiscuous mode [ 1092.126352][T12388] device hsr_slave_0 entered promiscuous mode [ 1092.133529][T12388] device hsr_slave_1 entered promiscuous mode [ 1092.144035][T12388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1092.153873][T12388] Cannot create hsr debugfs directory [ 1092.183841][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1092.192746][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1092.205419][T12214] device veth0_macvtap entered promiscuous mode [ 1092.217826][T12214] device veth1_macvtap entered promiscuous mode [ 1092.280195][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.292247][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.303867][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.315256][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.329988][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.341010][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.352036][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.365597][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.377593][T12214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.392618][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1092.402562][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1092.426054][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1092.436550][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1092.452439][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.466320][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.480482][ T7732] usb 5-1: config 0 has no interfaces? [ 1092.486137][ T7732] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1092.495367][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.506363][ T7732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.514465][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.526823][ T7732] usb 5-1: config 0 descriptor?? [ 1092.532477][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.543225][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.553760][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.567588][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.579126][T12214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.592580][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1092.606985][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1092.640084][T12214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.652196][T12214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.661968][T12214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.671664][T12214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.684523][ T7002] Bluetooth: hci5: command tx timeout [ 1092.791242][ T7732] usb 5-1: USB disconnect, device number 12 [ 1092.865635][T12388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.892938][ T8772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.919818][ T8772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.948606][ T8760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.961916][ T8760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.003777][T12388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.030249][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1093.043149][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1093.119676][T12388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.321641][T12388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.456221][T12476] hub 9-0:1.0: USB hub found [ 1093.462126][T12476] hub 9-0:1.0: 8 ports detected [ 1094.395352][T10289] usb 2-1: Cannot set autoneg [ 1094.400199][T10289] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 1094.481640][T10289] usb 2-1: USB disconnect, device number 11 [ 1094.625791][T12388] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1094.648517][T12388] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1094.662137][T12388] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1094.675706][T12388] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1094.803963][T12388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.879455][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1094.887785][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1094.932128][T12388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.961441][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1094.971581][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1094.988058][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.995255][ T4499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.004944][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1095.029107][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1095.042277][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1095.070752][ T4499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.078065][ T4499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.097336][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1095.123785][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1095.141620][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1095.155854][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1095.200523][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1095.210361][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1095.223795][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1095.233882][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1095.246704][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1095.261362][T12388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.322603][T12388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1095.333709][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1095.359974][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1096.938768][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1096.966479][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1097.034739][T12388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.126492][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1097.169148][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1097.295523][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1097.332256][ T27] audit: type=1326 audit(1727236377.302:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1097.332709][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1097.408180][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1097.432029][ T27] audit: type=1326 audit(1727236377.302:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1097.432961][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1097.534384][T12388] device veth0_vlan entered promiscuous mode [ 1097.541676][ T27] audit: type=1326 audit(1727236377.342:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1097.613324][T12388] device veth1_vlan entered promiscuous mode [ 1097.613694][T12523] loop1: detected capacity change from 0 to 4096 [ 1097.631112][ T27] audit: type=1326 audit(1727236377.352:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1097.684307][ T27] audit: type=1326 audit(1727236377.352:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1097.712611][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1097.772139][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1097.775648][ T27] audit: type=1326 audit(1727236377.362:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1097.803092][T12523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1097.808481][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1097.852067][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1097.901292][T12388] device veth0_macvtap entered promiscuous mode [ 1097.952532][ T27] audit: type=1326 audit(1727236377.362:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1097.980658][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1098.005191][T12388] device veth1_macvtap entered promiscuous mode [ 1098.090438][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.123342][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.142509][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.153926][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.170973][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.205079][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.224254][ T27] audit: type=1326 audit(1727236377.362:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1098.321499][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.361392][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.137679][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.148273][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.175331][T12043] EXT4-fs (loop1): unmounting filesystem. [ 1099.183177][ T27] audit: type=1326 audit(1727236377.372:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1099.184653][T12388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.276086][ T27] audit: type=1326 audit(1727236377.372:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1099.367609][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.381899][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.392162][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.404267][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.417865][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.502865][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.565601][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.581326][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.614255][T12388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.626221][T12388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.918522][T12388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.039494][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1102.146509][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1102.324755][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1102.355748][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1102.405624][T12388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.456609][T12388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.513663][T12388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.563123][T12388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.913665][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.979794][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.029010][ T3800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.053706][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1103.074360][ T3800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.105565][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1104.352682][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.574398][T12600] hub 9-0:1.0: USB hub found [ 1106.580121][T12600] hub 9-0:1.0: 8 ports detected [ 1108.406482][T12623] loop1: detected capacity change from 0 to 4096 [ 1108.415745][T12623] __ntfs_warning: 28 callbacks suppressed [ 1108.415762][T12623] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1108.475255][T12623] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1108.501447][T12623] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1108.513414][T12623] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1108.527558][T12623] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1108.537101][T12623] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1108.544292][ T4752] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1108.553537][T12623] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1108.570240][T12623] ntfs: volume version 3.1. [ 1108.575328][T12623] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1108.589280][T12623] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1108.814484][ T4752] usb 4-1: Using ep0 maxpacket: 8 [ 1111.304589][ T4752] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1111.387917][ T4752] usb 4-1: can't read configurations, error -71 [ 1112.660930][T12658] hub 9-0:1.0: USB hub found [ 1112.667020][T12658] hub 9-0:1.0: 8 ports detected [ 1114.333838][T12667] overlayfs: failed to resolve './file0': -2 [ 1114.709253][T12674] loop2: detected capacity change from 0 to 512 [ 1114.733991][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 1114.782799][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 1114.842099][T12674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1114.904376][T12674] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff) [ 1115.072937][T12214] EXT4-fs (loop2): unmounting filesystem. [ 1115.079324][T12676] bond0: (slave bond_slave_0): Releasing backup interface [ 1115.234245][ T4752] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1115.566314][T12700] hub 9-0:1.0: USB hub found [ 1115.573146][T12700] hub 9-0:1.0: 8 ports detected [ 1118.130978][ T4752] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1121.134286][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.140637][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.197730][ T4752] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1121.233827][ T4752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.243926][ T4752] usb 2-1: config 0 descriptor?? [ 1121.429224][ T4752] usb 2-1: can't set config #0, error -71 [ 1121.512458][ T4752] usb 2-1: USB disconnect, device number 12 [ 1122.808607][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 1123.035290][T12729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.053066][T12729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.114024][T12729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.123005][T12729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.262116][T12755] loop2: detected capacity change from 0 to 8 [ 1126.452934][T12768] loop4: detected capacity change from 0 to 64 [ 1134.675768][T12797] device pim6reg1 entered promiscuous mode [ 1137.652998][T12818] loop4: detected capacity change from 0 to 1024 [ 1137.718977][T12818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1138.336163][T12816] loop2: detected capacity change from 0 to 40427 [ 1138.356803][T12816] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1138.372676][T12816] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1138.440678][T12816] F2FS-fs (loop2): invalid crc value [ 1138.504578][T12816] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1138.635967][T12816] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1138.649066][ T3771] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1138.696683][T12816] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1138.700515][ T3771] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 280 with error 28 [ 1138.703846][T12816] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1138.808656][ T27] audit: type=1800 audit(1727236930.780:441): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1558" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 1138.835822][ T3771] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1138.835822][ T3771] [ 1138.905349][ T3771] EXT4-fs (loop4): Total free blocks count 0 [ 1138.911502][ T3771] EXT4-fs (loop4): Free/Dirty block details [ 1138.927991][ T3771] EXT4-fs (loop4): free_blocks=68451041280 [ 1138.934050][ T3771] EXT4-fs (loop4): dirty_blocks=288 [ 1138.951355][T12827] loop1: detected capacity change from 0 to 32768 [ 1138.963327][ T3771] EXT4-fs (loop4): Block reservation details [ 1138.969224][T12214] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1138.969363][T12214] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1138.970433][ T3771] EXT4-fs (loop4): i_reserved_data_blocks=18 [ 1138.995786][T12214] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1138.995813][T12214] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1139.006096][T12827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1560 (12827) [ 1139.050891][T12214] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1139.050924][T12214] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1139.064974][T10060] EXT4-fs (loop4): unmounting filesystem. [ 1139.080987][T12214] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1139.105272][T12827] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1139.184243][T12827] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1139.192952][T12827] BTRFS info (device loop1): using free space tree [ 1139.265597][ T8750] Trying to write to read-only block-device loop2 [ 1139.614192][T12827] BTRFS info (device loop1): enabling ssd optimizations [ 1141.208576][T12043] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1142.469655][T12888] loop2: detected capacity change from 0 to 1024 [ 1142.596133][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'. [ 1142.746841][T12893] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1142.820440][T12891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1143.243936][T12871] overlayfs: failed to resolve './file2': -2 [ 1143.304962][T12889] loop4: detected capacity change from 0 to 32768 [ 1143.343437][T12889] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1574 (12889) [ 1143.387302][T12889] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1143.522077][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 1143.549497][T12889] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1143.567063][T12889] BTRFS info (device loop4): enabling auto defrag [ 1144.498409][T12889] BTRFS info (device loop4): doing ref verification [ 1144.519125][T12889] BTRFS info (device loop4): max_inline at 0 [ 1144.548153][T12889] BTRFS info (device loop4): force clearing of disk cache [ 1144.564664][T12889] BTRFS info (device loop4): turning on sync discard [ 1144.598392][T12889] BTRFS info (device loop4): disabling free space tree [ 1145.085400][ T154] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1145.134524][T12889] BTRFS info (device loop4): enabling ssd optimizations [ 1145.146231][T12889] BTRFS info (device loop4): rebuilding free space tree [ 1145.185198][T12889] BTRFS info (device loop4): disabling free space tree [ 1145.201807][T12889] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1145.226091][T12889] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1145.384638][ T154] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1145.494968][ T154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1145.526199][ T154] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1145.584373][ T154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1145.716885][ T154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1145.771983][ T154] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1145.827103][ T154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1145.915745][ T154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1145.935777][ T154] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1145.960533][T10060] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1145.984321][ T154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1146.064498][ T154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1146.073447][ T154] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1146.101098][ T154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1146.194438][ T154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1146.206963][ T154] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1146.220934][ T154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1146.477868][ T154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1146.496754][ T154] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1146.508801][ T154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1146.615053][ T154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1146.693121][ T154] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1146.814333][ T154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1146.930403][ T154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1146.949835][ T154] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1147.002207][ T154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1147.214611][ T154] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1147.234060][ T154] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1147.243381][ T154] usb 2-1: Product: syz [ 1147.254318][ T154] usb 2-1: Manufacturer: syz [ 1147.262392][ T154] usb 2-1: SerialNumber: syz [ 1147.287555][ T154] usb 2-1: config 0 descriptor?? [ 1148.802406][ T154] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1149.056539][ T154] usb 2-1: USB disconnect, device number 13 [ 1149.086853][ T154] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1149.341498][T12968] loop1: detected capacity change from 0 to 256 [ 1149.393852][T12968] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1149.875342][T10552] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1150.464659][T10552] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 1150.656392][T10552] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1150.725194][T10552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1150.805140][T10552] usb 5-1: SerialNumber: syz [ 1152.185834][ T27] audit: type=1326 audit(1727236944.160:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.231995][ T27] audit: type=1326 audit(1727236944.180:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.293002][ T27] audit: type=1326 audit(1727236944.180:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.316598][ T27] audit: type=1326 audit(1727236944.180:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.346287][ T27] audit: type=1326 audit(1727236944.180:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.393285][ T27] audit: type=1326 audit(1727236944.180:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.424018][ T27] audit: type=1326 audit(1727236944.180:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.448570][ T27] audit: type=1326 audit(1727236944.230:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.471507][ T27] audit: type=1326 audit(1727236944.230:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1152.494517][ T27] audit: type=1326 audit(1727236944.320:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c177def9 code=0x7ffc0000 [ 1153.694636][T10552] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 1153.725173][T10552] usb 5-1: USB disconnect, device number 13 [ 1154.883528][T10177] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1155.285915][T10177] usb 2-1: Using ep0 maxpacket: 8 [ 1157.394313][T10177] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1157.434321][T10177] usb 2-1: can't read configurations, error -71 [ 1157.763876][T13014] hub 9-0:1.0: USB hub found [ 1157.769909][T13014] hub 9-0:1.0: 8 ports detected [ 1161.656033][ T3648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1161.719547][ T3648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1161.805562][ T3648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1161.817190][ T3648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1161.828216][ T3648] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1162.074025][ T7002] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1162.543533][T13037] loop4: detected capacity change from 0 to 1024 [ 1162.956247][T13042] hub 9-0:1.0: USB hub found [ 1162.962525][T13042] hub 9-0:1.0: 8 ports detected [ 1163.144392][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1163.144468][ T27] audit: type=1804 audit(1727236955.080:453): pid=13037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1610" name="/newroot/115/file2/cgroup.controllers" dev="loop4" ino=26 res=1 errno=0 [ 1163.647205][ T7002] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1163.681021][ T7002] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1163.691909][ T7002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1163.703072][ T7002] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1163.714461][ T7002] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1163.721921][ T7002] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1163.813104][T13046] loop1: detected capacity change from 0 to 2048 [ 1163.880814][T13034] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1163.890560][T13046] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1163.901369][T13034] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1163.913681][T13034] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1163.922614][T13034] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1163.934075][T13034] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1163.941890][T13034] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1164.168761][T13034] Bluetooth: hci3: command 0x0406 tx timeout [ 1164.176462][ T3648] Bluetooth: hci6: command tx timeout [ 1164.704759][T13046] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1164.724423][T13046] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1164.745901][T13046] UDF-fs: Scanning with blocksize 512 failed [ 1164.877682][T13046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1165.332131][T13058] hub 9-0:1.0: USB hub found [ 1165.338385][T13058] hub 9-0:1.0: 8 ports detected [ 1166.025745][ T3648] Bluetooth: hci7: command tx timeout [ 1166.044502][ T3648] Bluetooth: hci8: command tx timeout [ 1166.444336][ T3648] Bluetooth: hci6: command tx timeout [ 1168.044266][ T3648] Bluetooth: hci7: command tx timeout [ 1168.141709][ T3648] Bluetooth: hci8: command tx timeout [ 1168.530607][ T3648] Bluetooth: hci6: command tx timeout [ 1170.130726][ T3648] Bluetooth: hci7: command tx timeout [ 1170.229946][ T3648] Bluetooth: hci8: command tx timeout [ 1170.609970][ T3648] Bluetooth: hci6: command tx timeout [ 1170.983617][T13080] loop4: detected capacity change from 0 to 32768 [ 1171.293902][T13080] overlayfs: upper fs needs to support d_type. [ 1171.307735][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 1171.308532][T13080] overlayfs: upper fs does not support tmpfile. [ 1171.328992][T12967] device bridge_slave_1 left promiscuous mode [ 1171.337636][T13080] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1171.347775][T12967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.367311][T13080] overlayfs: failed to resolve './file0': -2 [ 1171.376089][T12967] bridge1: port 1(bridge_slave_1) entered blocking state [ 1171.384222][T12967] bridge1: port 1(bridge_slave_1) entered disabled state [ 1171.396368][T12967] device bridge_slave_1 entered promiscuous mode [ 1172.204473][ T3648] Bluetooth: hci7: command tx timeout [ 1172.308175][ T3648] Bluetooth: hci8: command tx timeout [ 1172.348352][T13090] hub 9-0:1.0: USB hub found [ 1172.353760][T13090] hub 9-0:1.0: 8 ports detected [ 1173.657714][T13094] hub 9-0:1.0: USB hub found [ 1173.664053][T13094] hub 9-0:1.0: 8 ports detected [ 1174.239833][ T3648] Bluetooth: hci1: command 0x0406 tx timeout [ 1174.450320][ T8772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.563764][T13098] device syzkaller0 entered promiscuous mode [ 1174.639426][ T8772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.837933][ T8772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.893962][T13096] loop1: detected capacity change from 0 to 32768 [ 1175.111788][T13096] XFS (loop1): Mounting V5 Filesystem [ 1175.181512][T13096] XFS (loop1): Ending clean mount [ 1175.228501][T13096] XFS (loop1): Quotacheck needed: Please wait. [ 1175.671924][T13096] XFS (loop1): Quotacheck: Done. [ 1176.324512][T13096] xfs: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 1176.431444][T12043] XFS (loop1): Unmounting Filesystem [ 1177.011972][T13111] loop1: detected capacity change from 0 to 128 [ 1177.053907][T13111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1177.096008][T13111] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1178.018117][T12043] EXT4-fs (loop1): unmounting filesystem. [ 1180.618430][ T8772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.708611][T13128] loop4: detected capacity change from 0 to 256 [ 1181.061351][T13049] chnl_net:caif_netlink_parms(): no params data found [ 1181.111663][T13025] chnl_net:caif_netlink_parms(): no params data found [ 1181.144003][T13043] chnl_net:caif_netlink_parms(): no params data found [ 1181.995405][ T8772] bond1: (slave ip6gretap1): Releasing backup interface [ 1182.100616][T13156] hub 9-0:1.0: USB hub found [ 1182.107004][T13156] hub 9-0:1.0: 8 ports detected [ 1182.289709][T13049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.316606][T13049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.425182][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.431881][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.502776][T13049] device bridge_slave_0 entered promiscuous mode [ 1182.839132][T13049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.854646][T13049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.881175][T13049] device bridge_slave_1 entered promiscuous mode [ 1182.898998][T13025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.906993][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.925696][T13025] device bridge_slave_0 entered promiscuous mode [ 1182.944003][T13043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.952235][T13043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.971315][T13043] device bridge_slave_0 entered promiscuous mode [ 1183.098127][T13025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.117170][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.135573][T13025] device bridge_slave_1 entered promiscuous mode [ 1183.142842][T13043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.150682][T13043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.169909][T13043] device bridge_slave_1 entered promiscuous mode [ 1183.359463][T13049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.476173][T13025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.512040][T13043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.538518][T13043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.627890][T13043] team0: Port device team_slave_0 added [ 1183.643523][T13043] team0: Port device team_slave_1 added [ 1183.703186][T13049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.725614][T13025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.834893][T13173] hub 9-0:1.0: USB hub found [ 1183.841007][T13173] hub 9-0:1.0: 8 ports detected [ 1184.080549][T13043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.108008][T13043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.383727][T13043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.426134][T13043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.433321][T13043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.543168][T13043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.653513][T13049] team0: Port device team_slave_0 added [ 1185.756248][T13025] team0: Port device team_slave_0 added [ 1185.818740][T13049] team0: Port device team_slave_1 added [ 1185.912699][T13025] team0: Port device team_slave_1 added [ 1186.059185][T13049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.074255][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.147765][T13049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.230891][T13043] device hsr_slave_0 entered promiscuous mode [ 1186.279246][T13043] device hsr_slave_1 entered promiscuous mode [ 1186.293553][T13043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1186.311689][T13043] Cannot create hsr debugfs directory [ 1186.319342][T13197] loop1: detected capacity change from 0 to 256 [ 1186.390987][T13049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.405886][T13197] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1186.414416][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.864232][T13049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.123018][T10556] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1187.205767][T13025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.225534][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.291546][T13025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.306088][T13025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.313353][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.340909][T13025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.607057][T13206] hub 9-0:1.0: USB hub found [ 1187.612913][T13206] hub 9-0:1.0: 8 ports detected [ 1188.055474][T13049] device hsr_slave_0 entered promiscuous mode [ 1188.138599][T13049] device hsr_slave_1 entered promiscuous mode [ 1188.148653][T13049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.163088][T13049] Cannot create hsr debugfs directory [ 1188.344327][T10556] usb 5-1: config 0 has no interfaces? [ 1188.350453][T10556] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1188.368940][T10556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.371816][T13208] loop1: detected capacity change from 0 to 128 [ 1188.379388][T10556] usb 5-1: config 0 descriptor?? [ 1188.402972][T13025] device hsr_slave_0 entered promiscuous mode [ 1188.429643][T13025] device hsr_slave_1 entered promiscuous mode [ 1188.471610][T13025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.493933][T13025] Cannot create hsr debugfs directory [ 1189.262658][ T3689] usb 5-1: USB disconnect, device number 14 [ 1189.648331][ T8772] device hsr_slave_0 left promiscuous mode [ 1189.655115][ T8772] device hsr_slave_1 left promiscuous mode [ 1189.661788][ T8772] device bridge_slave_1 left promiscuous mode [ 1189.668619][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.692538][ T8772] device bridge_slave_0 left promiscuous mode [ 1189.715511][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.798363][ T8772] device veth1_macvtap left promiscuous mode [ 1189.814083][ T8772] device veth0_macvtap left promiscuous mode [ 1189.830716][ T8772] device veth1_vlan left promiscuous mode [ 1189.836844][ T8772] device veth0_vlan left promiscuous mode [ 1190.743462][T13219] loop4: detected capacity change from 0 to 512 [ 1190.752999][T13219] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1190.783055][T13219] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 1190.802029][T13219] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1190.811131][T13219] System zones: 0-2, 18-18, 34-34 [ 1192.706664][T13219] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.1642: bad orphan inode 15 [ 1192.768950][T13219] ext4_test_bit(bit=14, block=18) = 1 [ 1192.779375][T13219] is_bad_inode(inode)=0 [ 1192.783689][T13219] NEXT_ORPHAN(inode)=2264924160 [ 1192.810521][T13219] max_ino=32 [ 1192.813774][T13219] i_nlink=0 [ 1192.841486][T13219] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1192.880888][T13219] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1642: bg 0: block 80: padding at end of block bitmap is not set [ 1192.985303][T13219] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 1193.024926][T13219] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1194.489459][ T8772] bond1 (unregistering): Released all slaves [ 1195.692875][T10060] EXT4-fs (loop4): unmounting filesystem. [ 1196.220367][ T8772] team0 (unregistering): Port device team_slave_1 removed [ 1196.328967][ T8772] team0 (unregistering): Port device team_slave_0 removed [ 1196.485476][ T8772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.625178][ T8772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.759404][T13243] hub 9-0:1.0: USB hub found [ 1196.765850][T13243] hub 9-0:1.0: 8 ports detected [ 1198.357776][T13252] hub 9-0:1.0: USB hub found [ 1198.363836][T13252] hub 9-0:1.0: 8 ports detected [ 1200.119962][ T8772] bond0 (unregistering): Released all slaves [ 1204.070235][T13270] loop1: detected capacity change from 0 to 512 [ 1204.209352][T13270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1204.264305][T13270] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 1204.478188][T13043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.507802][T12043] EXT4-fs (loop1): unmounting filesystem. [ 1204.706362][T13043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.723120][T13043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.882808][T13043] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.504656][T13304] hub 9-0:1.0: USB hub found [ 1207.510851][T13304] hub 9-0:1.0: 8 ports detected [ 1210.429166][ T8772] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.011480][ T8772] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.341251][ T8772] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.483426][ T8772] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.780378][T13331] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1211.886289][T13335] kvm: pic: non byte read [ 1211.894446][T13335] kvm: pic: level sensitive irq not supported [ 1211.895160][T13335] kvm: pic: non byte read [ 1211.909607][T13335] kvm: pic: level sensitive irq not supported [ 1211.909740][T13335] kvm: pic: non byte read [ 1212.394536][T13344] loop1: detected capacity change from 0 to 512 [ 1212.431412][T13344] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1212.463774][T13344] EXT4-fs (loop1): invalid journal inode [ 1212.478462][T13344] EXT4-fs (loop1): can't get journal size [ 1212.527778][T13340] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1212.584551][T13344] EXT4-fs (loop1): 1 truncate cleaned up [ 1212.590567][T13344] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1212.607077][T13340] kvm: pic: level sensitive irq not supported [ 1212.607162][T13340] kvm: pic: non byte read [ 1212.680760][T13340] kvm: pic: level sensitive irq not supported [ 1212.681333][T13340] kvm: pic: non byte read [ 1212.714670][T13340] kvm: pic: level sensitive irq not supported [ 1212.714750][T13340] kvm: pic: non byte read [ 1214.992563][T13049] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1215.012351][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 disabled perfctr wrmsr: 0xc2 data 0x1 [ 1215.016699][T13049] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1215.033118][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 disabled perfctr wrmsr: 0x186 data 0x1 [ 1215.048542][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.067478][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.069965][T13049] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1215.096850][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.144888][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.183491][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.207751][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.237698][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.257523][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.287093][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.307777][T13371] kvm [13370]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 1215.341613][T13049] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1215.874440][T12043] EXT4-fs (loop1): unmounting filesystem. [ 1215.888879][T13043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1216.005464][T13043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1216.032346][T13043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1216.052364][T13043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1218.036419][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 1219.737817][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1219.755254][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1219.765335][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1219.792779][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1219.803823][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1219.811662][ T3648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1220.525005][T10296] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1220.610325][T13049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.625627][T13043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.710097][ T8772] device hsr_slave_0 left promiscuous mode [ 1220.723565][ T8772] device hsr_slave_1 left promiscuous mode [ 1220.733095][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.747779][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.788989][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1220.804719][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 1220.816809][T10296] usb 5-1: Using ep0 maxpacket: 8 [ 1220.894305][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.647677][ T8772] device bridge_slave_1 left promiscuous mode [ 1221.653889][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.666235][ T8772] device bridge_slave_0 left promiscuous mode [ 1221.672521][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.682258][ T8772] device bridge_slave_1 left promiscuous mode [ 1221.689154][ T8772] bridge1: port 1(bridge_slave_1) entered disabled state [ 1221.702439][ T8772] device hsr_slave_0 left promiscuous mode [ 1221.708891][ T8772] device hsr_slave_1 left promiscuous mode [ 1221.716057][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.723531][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.731968][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.740248][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.748223][ T8772] device bridge_slave_0 left promiscuous mode [ 1221.755988][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.819859][ T8772] device veth1_macvtap left promiscuous mode [ 1221.826055][ T8772] device veth0_macvtap left promiscuous mode [ 1221.832251][ T8772] device veth1_vlan left promiscuous mode [ 1221.838152][ T8772] device veth0_vlan left promiscuous mode [ 1221.846296][ T8772] device veth1_macvtap left promiscuous mode [ 1221.852356][ T8772] device veth0_macvtap left promiscuous mode [ 1221.859420][ T8772] device veth1_vlan left promiscuous mode [ 1221.866906][ T8772] device veth0_vlan left promiscuous mode [ 1221.884339][T13034] Bluetooth: hci3: command tx timeout [ 1222.892605][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1222.909683][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1222.933402][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1222.947022][ T7002] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1222.957472][ T7002] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1222.965538][ T7002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1223.000920][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1223.013175][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1223.024759][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1223.051963][T13450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1223.059843][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1223.078445][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1223.215373][ T8772] team0 (unregistering): Port device team_slave_1 removed [ 1223.286323][ T8772] team0 (unregistering): Port device team_slave_0 removed [ 1223.369032][ T8772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.443282][ T8772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.973358][ T3648] Bluetooth: hci3: command tx timeout [ 1224.356997][ T8772] bond0 (unregistering): Released all slaves [ 1225.014630][T13034] Bluetooth: hci4: command tx timeout [ 1225.173131][T13034] Bluetooth: hci5: command tx timeout [ 1225.211718][ T8772] team0 (unregistering): Port device team_slave_1 removed [ 1225.287480][ T8772] team0 (unregistering): Port device team_slave_0 removed [ 1225.360638][ T8772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.976515][T10296] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1225.994261][T10296] usb 5-1: no configurations [ 1225.999005][T10296] usb 5-1: can't read configurations, error -22 [ 1226.054940][T13034] Bluetooth: hci3: command tx timeout [ 1226.155530][T10296] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1226.273868][ T8772] bond0 (unregistering): Released all slaves [ 1226.324357][T10296] usb 5-1: device descriptor read/64, error -32 [ 1226.411923][T13432] device batadv0 entered promiscuous mode [ 1226.450389][T13432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1226.462184][T10296] usb usb5-port1: attempt power cycle [ 1226.478538][T13432] device batadv0 left promiscuous mode [ 1227.110347][T13034] Bluetooth: hci4: command tx timeout [ 1227.254381][T13034] Bluetooth: hci5: command tx timeout [ 1227.296589][T13422] chnl_net:caif_netlink_parms(): no params data found [ 1229.274884][ T3648] Bluetooth: hci3: command tx timeout [ 1229.274998][T13034] Bluetooth: hci4: command tx timeout [ 1229.327189][T13034] Bluetooth: hci5: command tx timeout [ 1230.048510][T13448] chnl_net:caif_netlink_parms(): no params data found [ 1230.073888][T13446] chnl_net:caif_netlink_parms(): no params data found [ 1230.300379][T13422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.308022][T13422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.324428][T13422] device bridge_slave_0 entered promiscuous mode [ 1230.343855][T13422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.351507][T13422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.369195][T13422] device bridge_slave_1 entered promiscuous mode [ 1230.850485][T13422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.001525][T13422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.223952][T13450] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1231.237046][T13450] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1231.247045][T13450] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1231.255265][T13450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1231.266279][T13450] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1231.273705][T13450] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1231.324647][T13450] Bluetooth: hci4: command tx timeout [ 1231.415270][T13422] team0: Port device team_slave_0 added [ 1231.422937][T13450] Bluetooth: hci5: command tx timeout [ 1231.475828][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.483092][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.495604][T13448] device bridge_slave_0 entered promiscuous mode [ 1231.509120][T13422] team0: Port device team_slave_1 added [ 1231.535376][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.542551][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.551344][T13448] device bridge_slave_1 entered promiscuous mode [ 1231.654491][ T28] INFO: task syz-executor:11659 blocked for more than 143 seconds. [ 1231.672851][ T28] Not tainted 6.1.111-syzkaller #0 [ 1231.679082][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1231.694349][ T28] task:syz-executor state:D stack:21304 pid:11659 ppid:1 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1231.703707][ T28] Call Trace: [ 1231.734183][ T28] [ 1231.737544][ T28] __schedule+0x143f/0x4570 [ 1231.742134][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1231.806324][ T28] schedule+0xbf/0x180 [ 1231.810503][ T28] schedule_timeout+0xac/0x300 [ 1231.830008][ T28] ? console_conditional_schedule+0x40/0x40 [ 1231.836325][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1231.842375][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1231.848411][ T28] ? wait_for_completion+0x2f9/0x610 [ 1231.853843][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1231.859874][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1231.865455][ T28] ? wait_for_completion+0x2f9/0x610 [ 1231.870941][ T28] wait_for_completion+0x350/0x610 [ 1231.878257][ T28] ? io_schedule+0x100/0x100 [ 1231.882898][ T28] ? kasan_quarantine_put+0xd4/0x220 [ 1231.903596][ T28] ? kthread_unpark+0x175/0x200 [ 1231.909559][ T28] kthread_stop+0x1ab/0x690 [ 1231.914430][ T28] ext4_stop_mmpd+0x43/0xb0 [ 1231.918974][ T28] ext4_put_super+0xb49/0x10e0 [ 1231.923791][ T28] ? ext4_put_super+0x3cc/0x10e0 [ 1231.928828][ T28] ? ext4_drop_inode+0x2e0/0x2e0 [ 1231.933800][ T28] generic_shutdown_super+0x130/0x340 [ 1231.939250][ T28] kill_block_super+0x7a/0xe0 [ 1231.943953][ T28] deactivate_locked_super+0xa0/0x110 [ 1231.949404][ T28] cleanup_mnt+0x490/0x520 [ 1231.953849][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1231.959150][ T28] task_work_run+0x246/0x300 [ 1231.963788][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 1231.969152][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1231.974785][ T28] exit_to_user_mode_loop+0xde/0x100 [ 1231.980103][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1231.987210][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 1231.992796][ T28] do_syscall_64+0x47/0xb0 [ 1231.997313][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1232.002052][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1232.008077][ T28] RIP: 0033:0x7fd9f1f7f227 [ 1232.012544][ T28] RSP: 002b:00007ffe78992ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1232.021267][ T28] RAX: 0000000000000000 RBX: 00007fd9f1ff0a14 RCX: 00007fd9f1f7f227 [ 1232.029954][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe78992b70 [ 1232.038273][ T28] RBP: 00007ffe78992b70 R08: 0000000000000000 R09: 0000000000000000 [ 1232.046591][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe78993bf0 [ 1232.054955][ T28] R13: 00007fd9f1ff0a14 R14: 0000000000105ea4 R15: 00007ffe78993c30 [ 1232.063000][ T28] [ 1232.066471][ T28] INFO: task kmmpd-loop3:12219 blocked for more than 144 seconds. [ 1232.074820][ T28] Not tainted 6.1.111-syzkaller #0 [ 1232.080484][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1232.089246][ T28] task:kmmpd-loop3 state:D stack:28088 pid:12219 ppid:2 flags:0x00024000 [ 1232.100143][ T28] Call Trace: [ 1232.103450][ T28] [ 1232.106470][ T28] __schedule+0x143f/0x4570 [ 1232.111019][ T28] ? rcuwait_wake_up+0x18/0x220 [ 1232.116005][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1232.122019][ T28] ? print_irqtrace_events+0x210/0x210 [ 1232.127788][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1232.133109][ T28] schedule+0xbf/0x180 [ 1232.137554][ T28] ? percpu_rwsem_wait+0x343/0x450 [ 1232.143650][ T28] percpu_rwsem_wait+0x3b9/0x450 [ 1232.148759][ T28] ? trace_contention_begin+0x1a0/0x1a0 [ 1232.154529][ T28] ? percpu_up_write+0x90/0x90 [ 1232.159372][ T28] ? rcu_is_watching+0x11/0xb0 [ 1232.164220][ T28] __percpu_down_read+0xe6/0x130 [ 1232.169185][ T28] ? kmmpd+0x263/0xa70 [ 1232.173277][ T28] write_mmp_block+0x2ee/0x390 [ 1232.178256][ T28] kmmpd+0x263/0xa70 [ 1232.182193][ T28] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 1232.187822][ T28] ? __kthread_parkme+0x168/0x1c0 [ 1232.192882][ T28] kthread+0x28d/0x320 [ 1232.197010][ T28] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 1232.202589][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1232.207901][ T28] ret_from_fork+0x1f/0x30 [ 1232.212378][ T28] [ 1232.216193][ T28] [ 1232.216193][ T28] Showing all locks held in the system: [ 1232.223962][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1232.229947][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1232.254313][ T28] 1 lock held by rcu_tasks_trace/13: [ 1232.259665][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1232.281167][ T28] 1 lock held by khungtaskd/28: [ 1232.289647][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1232.314755][ T28] 3 locks held by kworker/1:2/154: [ 1232.319920][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.344166][ T28] #1: ffffc90002e5fd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.355717][ T28] #2: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 1232.367213][ T28] 2 locks held by getty/3399: [ 1232.371926][ T28] #0: ffff88802e48a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1232.382316][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1232.393033][ T28] 2 locks held by kworker/u4:13/3893: [ 1232.400219][ T28] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 1232.420525][ T28] #1: ffff8880b8f27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 1232.436059][ T28] 3 locks held by kworker/u4:24/8768: [ 1232.441565][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.456427][ T28] #1: ffffc9000365fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.467103][ T28] #2: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1232.476254][ T28] 4 locks held by kworker/u4:25/8772: [ 1232.481851][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.492258][ T28] #1: ffffc9000367fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.502320][ T28] #2: ffffffff8e4ed450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 1232.511787][ T28] #3: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x79/0x290 [ 1232.520970][ T28] 2 locks held by kworker/0:15/10296: [ 1232.527656][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.538167][ T28] #1: ffffc900045efd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.549663][ T28] 2 locks held by kworker/1:14/10558: [ 1232.555204][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.565652][ T28] #1: ffffc9000542fd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1232.575415][ T28] 1 lock held by syz-executor/11659: [ 1232.580722][ T28] #0: ffff8880249280e0 (&type->s_umount_key#32){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 1232.591214][ T28] 1 lock held by kmmpd-loop3/12219: [ 1232.596498][ T28] #0: ffff888024928460 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x263/0xa70 [ 1232.605165][ T28] 2 locks held by syz-executor/13422: [ 1232.610547][ T28] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1232.620062][ T28] #1: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 1232.631045][ T28] 3 locks held by syz.1.1676/13441: [ 1232.637097][ T28] #0: ffff88804d6e10b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 1232.647138][ T28] #1: ffff88804d6e0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 1232.656907][ T28] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 1232.667904][ T28] 1 lock held by syz-executor/13446: [ 1232.673215][ T28] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1232.682777][ T28] 2 locks held by syz-executor/13486: [ 1232.688347][ T28] #0: ffffffff8e4ed450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 1232.697970][ T28] #1: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20f/0x700 [ 1232.707629][ T28] 3 locks held by syz.4.1682/13493: [ 1232.712839][ T28] #0: ffff8880794a50b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 1232.722841][ T28] #1: ffff8880794a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 1232.732586][ T28] #2: ffffffff8e650b88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 1232.758175][ T28] [ 1232.760556][ T28] ============================================= [ 1232.760556][ T28] [ 1232.799344][ T28] NMI backtrace for cpu 1 [ 1232.803742][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 1232.811671][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1232.821934][ T28] Call Trace: [ 1232.825235][ T28] [ 1232.828182][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1232.832916][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1232.838433][ T28] ? panic+0x764/0x764 [ 1232.842541][ T28] ? vprintk_emit+0x622/0x740 [ 1232.847275][ T28] ? printk_sprint+0x490/0x490 [ 1232.852088][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 1232.857255][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 1232.862241][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1232.868433][ T28] ? _printk+0xd1/0x111 [ 1232.872616][ T28] ? panic+0x764/0x764 [ 1232.876718][ T28] ? __wake_up_klogd+0xcc/0x100 [ 1232.881596][ T28] ? panic+0x764/0x764 [ 1232.885691][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 1232.891803][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1232.897914][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 1232.903942][ T28] watchdog+0xf88/0xfd0 [ 1232.908143][ T28] ? watchdog+0x1f8/0xfd0 [ 1232.912509][ T28] kthread+0x28d/0x320 [ 1232.916606][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1232.921670][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1232.926291][ T28] ret_from_fork+0x1f/0x30 [ 1232.930754][ T28] [ 1232.934804][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1232.940052][ C0] NMI backtrace for cpu 0 [ 1232.940065][ C0] CPU: 0 PID: 13448 Comm: syz-executor Not tainted 6.1.111-syzkaller #0 [ 1232.940084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1232.940094][ C0] RIP: 0010:unwind_next_frame+0xb94/0x2220 [ 1232.940119][ C0] Code: 03 0f b6 04 38 84 c0 0f 85 11 15 00 00 48 89 d8 48 c1 e8 03 0f b6 04 38 84 c0 0f 85 23 15 00 00 48 0f bf 45 00 48 01 44 24 08 <49> 8d 5d 01 41 0f b6 04 3f 84 c0 0f 85 cb 10 00 00 48 89 da 48 c1 [ 1232.940134][ C0] RSP: 0018:ffffc900030ef260 EFLAGS: 00000286 [ 1232.940151][ C0] RAX: 0000000000000010 RBX: ffffffff8f18fb37 RCX: ffffffff8eaba85c [ 1232.940165][ C0] RDX: ffffffff8f18fb36 RSI: ffffffff81786ba3 RDI: dffffc0000000000 [ 1232.940178][ C0] RBP: ffffffff8f18fb36 R08: 0000000000000003 R09: ffffc900030ef430 [ 1232.940191][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900030ef340 [ 1232.940204][ C0] R13: ffffffff8f18fb3a R14: ffffffff8eaba858 R15: 1ffffffff1e31f67 [ 1232.940217][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1232.940232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1232.940244][ C0] CR2: 00007f33215ded58 CR3: 000000002d0fd000 CR4: 00000000003506f0 [ 1232.940260][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1232.940270][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1232.940281][ C0] Call Trace: [ 1232.940286][ C0] [ 1232.940293][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1232.940322][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1232.940350][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1232.940379][ C0] ? nmi_handle+0x25/0x440 [ 1232.940415][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1232.940442][ C0] ? nmi_handle+0x12e/0x440 [ 1232.940469][ C0] ? nmi_handle+0x25/0x440 [ 1232.940495][ C0] ? unwind_next_frame+0xb94/0x2220 [ 1232.940513][ C0] ? default_do_nmi+0x62/0x150 [ 1232.940531][ C0] ? exc_nmi+0xa8/0x100 [ 1232.940548][ C0] ? end_repeat_nmi+0x16/0x31 [ 1232.940579][ C0] ? stack_trace_save+0x113/0x1c0 [ 1232.940602][ C0] ? unwind_next_frame+0xb94/0x2220 [ 1232.940622][ C0] ? unwind_next_frame+0xb94/0x2220 [ 1232.940641][ C0] ? unwind_next_frame+0xb94/0x2220 [ 1232.940660][ C0] [ 1232.940665][ C0] [ 1232.940677][ C0] ? __unwind_start+0x59d/0x720 [ 1232.940695][ C0] ? stack_trace_save+0x113/0x1c0 [ 1232.940725][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 1232.940749][ C0] arch_stack_walk+0x10d/0x140 [ 1232.940771][ C0] ? stack_trace_save+0x113/0x1c0 [ 1232.940797][ C0] stack_trace_save+0x113/0x1c0 [ 1232.940822][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1232.940854][ C0] save_stack+0xf6/0x1e0 [ 1232.940877][ C0] ? __reset_page_owner+0x1a0/0x1a0 [ 1232.940907][ C0] ? page_ext_get+0x1c/0x2a0 [ 1232.940935][ C0] __reset_page_owner+0x52/0x1a0 [ 1232.940959][ C0] free_unref_page_prepare+0xf63/0x1120 [ 1232.940980][ C0] ? insert_vmap_area_augment+0x600/0x600 [ 1232.941009][ C0] free_unref_page+0x33/0x3e0 [ 1232.941030][ C0] __vunmap+0x834/0x9a0 [ 1232.941062][ C0] kcov_close+0x27/0x50 [ 1232.941082][ C0] ? kcov_open+0x80/0x80 [ 1232.941102][ C0] __fput+0x3f6/0x8d0 [ 1232.941129][ C0] task_work_run+0x246/0x300 [ 1232.941151][ C0] ? kasan_quarantine_put+0xd4/0x220 [ 1232.941175][ C0] ? task_work_cancel+0x2e0/0x2e0 [ 1232.941199][ C0] ? kmem_cache_free+0x292/0x510 [ 1232.941220][ C0] ? do_exit+0xa6e/0x26a0 [ 1232.941246][ C0] do_exit+0xa73/0x26a0 [ 1232.941276][ C0] ? put_task_struct+0x80/0x80 [ 1232.941301][ C0] ? get_signal+0x137e/0x17d0 [ 1232.941327][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1232.941355][ C0] ? print_irqtrace_events+0x210/0x210 [ 1232.941379][ C0] ? _raw_spin_lock_irq+0xdb/0x110 [ 1232.941403][ C0] do_group_exit+0x202/0x2b0 [ 1232.941426][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1232.941447][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 1232.941469][ C0] get_signal+0x16f7/0x17d0 [ 1232.941496][ C0] ? netlink_sendmsg+0x9ad/0xd60 [ 1232.941528][ C0] ? ptrace_notify+0x370/0x370 [ 1232.941553][ C0] ? netlink_getsockopt+0x580/0x580 [ 1232.941578][ C0] ? __might_fault+0xa1/0x110 [ 1232.941602][ C0] arch_do_signal_or_restart+0xb0/0x1a10 [ 1232.941623][ C0] ? security_socket_sendmsg+0x7d/0xa0 [ 1232.941647][ C0] ? netlink_getsockopt+0x580/0x580 [ 1232.941672][ C0] ? __sys_sendto+0x4c5/0x600 [ 1232.941701][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 1232.941737][ C0] ? get_sigframe_size+0x10/0x10 [ 1232.941760][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1232.941794][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 1232.941813][ C0] exit_to_user_mode_loop+0x6a/0x100 [ 1232.941831][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1232.941849][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 1232.941871][ C0] do_syscall_64+0x47/0xb0 [ 1232.941897][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1232.941922][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1232.941946][ C0] RIP: 0033:0x7f2fffb7fd8c [ 1232.941960][ C0] Code: Unable to access opcode bytes at 0x7f2fffb7fd62. [ 1232.941968][ C0] RSP: 002b:00007fffde90c610 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1232.941985][ C0] RAX: 0000000000000068 RBX: 00007f3000864620 RCX: 00007f2fffb7fd8c [ 1232.941997][ C0] RDX: 0000000000000068 RSI: 00007f3000864670 RDI: 0000000000000003 [ 1232.942009][ C0] RBP: 0000000000000000 R08: 00007fffde90c664 R09: 000000000000000c [ 1232.942020][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1232.942030][ C0] R13: 0000000000000000 R14: 00007f3000864670 R15: 0000000000000000 [ 1232.942051][ C0] [ 1233.485578][T13450] Bluetooth: hci6: command tx timeout [ 1233.504405][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1233.511315][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 1233.519324][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1233.529407][ T28] Call Trace: [ 1233.532703][ T28] [ 1233.535672][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1233.540393][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1233.545988][ T28] ? panic+0x764/0x764 [ 1233.550091][ T28] ? llist_add_batch+0x160/0x1d0 [ 1233.555158][ T28] ? vscnprintf+0x59/0x80 [ 1233.559520][ T28] panic+0x318/0x764 [ 1233.563441][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1233.569637][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 1233.575062][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1233.581232][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 1233.587402][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 1233.593573][ T28] watchdog+0xfc7/0xfd0 [ 1233.597744][ T28] ? watchdog+0x1f8/0xfd0 [ 1233.602085][ T28] kthread+0x28d/0x320 [ 1233.606156][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1233.611192][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1233.615789][ T28] ret_from_fork+0x1f/0x30 [ 1233.620235][ T28] [ 1233.623774][ T28] Kernel Offset: disabled [ 1233.628192][ T28] Rebooting in 86400 seconds..