last executing test programs: 4m33.934732194s ago: executing program 0 (id=680): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x9, @sdr}) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x6) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4d) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, 0x0, 0x0) 4m30.579760302s ago: executing program 0 (id=687): r0 = userfaultfd(0x80001) write$snddsp(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0xffffffa8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000bd15f5c1e9aa5f6540c37b90115cf44fe901cf13fce60db6fef22f222241e4aaae4b2307cb8cbf95cbdaf1fa46a14ef51595bc19286b4c56ff1c6061bd6227a557ac9d950e91ca665a9665036484516aa5f36d81635cb3220083c0eda0a1d3207fe036829002618e7d3c8fc9ab134a135be19fc0b8bc862d6e935803c6fffea35e7ea9fa81bab0f7d7b77951202613dad06e", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400"/28], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000180)={{}, 0x5b}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r6 = fsopen(&(0x7f0000000100)='smb3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0xfffc, 0x318, 0x1, 0x24}, 0x9c) 4m27.719848262s ago: executing program 0 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) 4m27.704750723s ago: executing program 0 (id=693): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0xfffffffffffffef3) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r5, 0x1, &(0x7f0000000000)=[0x0]) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x45a, &(0x7f00000005c0)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xdfb, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 4m25.372383006s ago: executing program 0 (id=696): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) 4m24.902552283s ago: executing program 0 (id=701): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2001) read(r2, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x4008af25, &(0x7f00000003c0)) mkdir(&(0x7f0000000040)='./file0\x00', 0xe4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x4040) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) io_uring_setup(0x1f2, &(0x7f0000000300)={0x0, 0x1, 0x8000, 0x0, 0x110}) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, 0x0, 0x0) 4m24.081324575s ago: executing program 3 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) 4m21.483769332s ago: executing program 3 (id=706): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0xfffffffffffffef3) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r5, 0x1, &(0x7f0000000000)=[0x0]) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x45a, &(0x7f00000005c0)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xdfb, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 4m18.217147549s ago: executing program 3 (id=713): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=ANY=[@ANYBLOB="6801000013000100feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="062000000003000008000a00", @ANYRES32=0x0, @ANYBLOB="050027000000000008000500", @ANYRES32=0x0, @ANYBLOB="f4001a80f0000a8014000700ff"], 0x168}}, 0x0) 4m17.106658895s ago: executing program 3 (id=716): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) 4m16.594774992s ago: executing program 3 (id=720): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x85) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x48001018, r2, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x103b, r2, 0x0) open(0x0, 0x80242, 0x0) kexec_load(0xff0f, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x40, 0x59}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4m13.578457735s ago: executing program 3 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m9.303756587s ago: executing program 32 (id=701): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2001) read(r2, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x4008af25, &(0x7f00000003c0)) mkdir(&(0x7f0000000040)='./file0\x00', 0xe4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x4040) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) io_uring_setup(0x1f2, &(0x7f0000000300)={0x0, 0x1, 0x8000, 0x0, 0x110}) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, 0x0, 0x0) 3m58.218049465s ago: executing program 33 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20.089043632s ago: executing program 6 (id=1100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x6, 0x0, 0x0) 19.010898908s ago: executing program 6 (id=1101): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) clock_gettime(0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000111401000000000000000000000000000000008062d8a25f0903fdbd81df145e8ad154"], 0x18}}, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x0) close_range(r6, r7, 0x0) 18.977203688s ago: executing program 4 (id=1102): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000002040)=""/4067, 0xfe3}, {0x0}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000000)=""/13, 0xd}], 0x7}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 17.769965755s ago: executing program 1 (id=1107): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x85) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x48001018, r3, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x103b, r3, 0x0) open(0x0, 0x80242, 0x0) kexec_load(0xff0f, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x40, 0x59}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 17.416119551s ago: executing program 4 (id=1108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, 0x0, &(0x7f0000000440)=""/236}, 0x20) 15.927765242s ago: executing program 4 (id=1110): socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 15.200016152s ago: executing program 5 (id=1111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x6, 0x0, 0x0) 15.150891723s ago: executing program 1 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='./cgroup\x00', 0x0, &(0x7f0000000240)='ncpfs\x00', 0x0, &(0x7f0000000900)='trans=tcp,') mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x3b8c039, &(0x7f0000000440)=ANY=[]) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x14) pipe(0x0) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) io_uring_setup(0x74f6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) 14.941614616s ago: executing program 4 (id=1114): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x85) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x48001018, r3, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x103b, r3, 0x0) open(0x0, 0x80242, 0x0) kexec_load(0xff0f, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x40, 0x59}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 13.866751481s ago: executing program 5 (id=1115): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0xc990, 0x3, 0x7f, 0x0, 0xc07}}, 0x120) 13.619627285s ago: executing program 2 (id=1116): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 13.520774206s ago: executing program 5 (id=1117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getrlimit(0x1, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) 13.463024027s ago: executing program 4 (id=1118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getrlimit(0x1, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) 13.391631358s ago: executing program 6 (id=1119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000300)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240017da5ee29d340a71040000000001000005000000000000000000000000000000000000009d8d96094ee681ccbcbfca1979c2bf47df0ea5a6e7498a440817ca0f748609d17a733657c126ef75a4045d8f8ed2ebc08ec5275e04"], 0x0, 0x40, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) symlink(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) 13.374014818s ago: executing program 2 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, 0x0, &(0x7f0000000440)=""/236}, 0x20) 13.091918432s ago: executing program 1 (id=1121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x6, 0x0, 0x0) 12.013703558s ago: executing program 6 (id=1122): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$FUSE(r0, 0x0, 0x0) 6.534517177s ago: executing program 1 (id=1123): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x85) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x48001018, r2, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x103b, r2, 0x0) open(0x0, 0x80242, 0x0) kexec_load(0xff0f, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x40, 0x59}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 6.399226379s ago: executing program 5 (id=1124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r4}) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x4d6, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8, 0xc, 0xc6c}]}, 0x140}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x802) socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 6.379790369s ago: executing program 4 (id=1125): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f00000000c0)) io_setup(0x3ff, &(0x7f0000000500)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f000098d000/0x2000)=nil, 0x2000}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x18) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x80) socket$inet6(0x10, 0x3, 0x0) 6.29171284s ago: executing program 2 (id=1126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x6, 0x0, 0x0) 6.246556021s ago: executing program 6 (id=1127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020101020000081c5db68e87cb54"], 0x1c}, 0x1, 0x0, 0x0, 0x24006018}, 0x40044) 5.216708465s ago: executing program 2 (id=1128): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0xa, @loopback, 0x80000000}, 0x1c) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000000c0)=0x32) r8 = syz_open_dev$cec(0x0, 0x0, 0x401) ioctl$CEC_S_MODE(r8, 0xc05c6104, &(0x7f00000000c0)=0xa) sendto$packet(r2, &(0x7f0000000240)="783a206bfee0cb07000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x8, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x305, 0x0, 0x4, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4.819097471s ago: executing program 1 (id=1129): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x85) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x48001018, r3, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x103b, r3, 0x0) open(0x0, 0x80242, 0x0) kexec_load(0xff0f, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x40, 0x59}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.047478707s ago: executing program 6 (id=1130): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/148, 0x94}, {&(0x7f00000005c0)=""/137, 0x89}, {0x0}, {&(0x7f0000000680)=""/151, 0x97}, {0x0}, {&(0x7f0000000500)=""/66, 0x42}], 0x6}, 0x40002003) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4655}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000001100)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, r3, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040c4}, 0x810) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x8000) setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='hfsplus\x00', 0x8, 0x2) 1.878513863s ago: executing program 5 (id=1131): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000002040)=""/4067, 0xfe3}, {0x0}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000000)=""/13, 0xd}], 0x7}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 1.435686199s ago: executing program 2 (id=1132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000300)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240017da5ee29d340a71040000000001000005000000000000000000000000000000000000009d8d96094ee681ccbcbfca1979c2bf47df0ea5a6e7498a440817ca0f748609d17a733657c126ef75a4045d8f8ed2ebc08ec5275e04"], 0x0, 0x40, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) symlink(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) 698.13608ms ago: executing program 5 (id=1133): write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) read$hiddev(r5, &(0x7f0000000080)=""/39, 0x27) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$unix(r7, 0x0, 0x0, 0x80000) 606.668352ms ago: executing program 1 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 0s ago: executing program 2 (id=1135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getrlimit(0x1, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) kernel console output (not intermixed with test programs): [ 361.789502][ T6377] F2FS-fs (loop4): invalid crc value [ 361.846635][ T6385] hfsplus: request for non-existent node 16777216 in B*Tree [ 361.855983][ T6385] hfsplus: request for non-existent node 16777216 in B*Tree [ 361.866313][ T6385] hfsplus: request for non-existent node 16777216 in B*Tree [ 361.877859][ T6377] F2FS-fs (loop4): Found nat_bits in checkpoint [ 361.914410][ T6385] hfsplus: request for non-existent node 16777216 in B*Tree [ 361.986681][ T6377] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 361.987702][ T6385] hfsplus: request for non-existent node 16777216 in B*Tree [ 361.993876][ T6377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 362.092143][ T6385] hfsplus: request for non-existent node 16777216 in B*Tree [ 362.150437][ T6389] hfsplus: cannot replace xattr [ 362.226306][ T26] audit: type=1800 audit(1747269521.010:19): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.601" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 362.417419][ T6397] loop2: detected capacity change from 0 to 1024 [ 362.458458][ T6397] hfsplus: request for non-existent node 16777216 in B*Tree [ 362.476166][ T6397] hfsplus: request for non-existent node 16777216 in B*Tree [ 362.490118][ T6397] hfsplus: request for non-existent node 16777216 in B*Tree [ 362.498071][ T6397] hfsplus: request for non-existent node 16777216 in B*Tree [ 362.515263][ T6397] hfsplus: request for non-existent node 16777216 in B*Tree [ 362.526793][ T6397] hfsplus: request for non-existent node 16777216 in B*Tree [ 362.535635][ T6400] hfsplus: cannot replace xattr [ 362.552345][ T26] audit: type=1800 audit(1747269521.330:20): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.603" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 362.815671][ T6406] loop0: detected capacity change from 0 to 64 [ 363.361737][ T6411] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 363.368704][ T6411] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.149249][ T6427] loop1: detected capacity change from 0 to 512 [ 364.252665][ T6427] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 364.942916][ T6427] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.612: bad orphan inode 17 [ 364.982501][ T6427] EXT4-fs (loop1): Remounting filesystem read-only [ 364.989200][ T6427] ext4_test_bit(bit=16, block=4) = 1 [ 364.994601][ T6427] is_bad_inode(inode)=0 [ 364.998952][ T6427] NEXT_ORPHAN(inode)=2147418128 [ 365.003857][ T6427] max_ino=32 [ 365.007152][ T6427] i_nlink=0 [ 365.011096][ T6427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 365.814327][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 366.267296][ T6438] loop1: detected capacity change from 0 to 1024 [ 366.311109][ T6438] hfsplus: request for non-existent node 16777216 in B*Tree [ 366.326120][ T6438] hfsplus: request for non-existent node 16777216 in B*Tree [ 366.333504][ T6438] hfsplus: request for non-existent node 16777216 in B*Tree [ 366.361539][ T6438] hfsplus: request for non-existent node 16777216 in B*Tree [ 366.416767][ T6438] hfsplus: request for non-existent node 16777216 in B*Tree [ 366.548804][ T6438] hfsplus: request for non-existent node 16777216 in B*Tree [ 366.938274][ T26] audit: type=1800 audit(1747269525.710:21): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.616" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 367.026398][ T6446] hfsplus: cannot replace xattr [ 370.245223][ T6448] sctp: [Deprecated]: syz.2.619 (pid 6448) Use of int in max_burst socket option. [ 370.245223][ T6448] Use struct sctp_assoc_value instead [ 370.322561][ T6448] netlink: 164 bytes leftover after parsing attributes in process `syz.2.619'. [ 370.334760][ T6448] netlink: 164 bytes leftover after parsing attributes in process `syz.2.619'. [ 370.344989][ T6448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.619'. [ 370.395128][ T6461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.617'. [ 372.248493][ T6468] loop3: detected capacity change from 0 to 512 [ 372.900976][ T6468] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 373.151265][ T6468] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.625: bad orphan inode 17 [ 373.166649][ T6468] EXT4-fs (loop3): Remounting filesystem read-only [ 373.173253][ T6468] ext4_test_bit(bit=16, block=4) = 1 [ 373.178698][ T6468] is_bad_inode(inode)=0 [ 373.182894][ T6468] NEXT_ORPHAN(inode)=2147418128 [ 373.188340][ T6468] max_ino=32 [ 373.191581][ T6468] i_nlink=0 [ 373.195492][ T6468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 373.630583][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 373.995520][ T6482] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.630'. [ 374.132499][ T6476] loop3: detected capacity change from 0 to 40427 [ 374.152040][ T6476] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 374.159977][ T6476] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 374.169765][ T6476] F2FS-fs (loop3): invalid crc value [ 374.203541][ T6476] F2FS-fs (loop3): Found nat_bits in checkpoint [ 374.261569][ T6476] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 374.268750][ T6476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 375.519511][ T6501] loop2: detected capacity change from 0 to 512 [ 375.650007][ T6501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 375.765344][ T6501] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.634: bad orphan inode 17 [ 375.780172][ T6501] EXT4-fs (loop2): Remounting filesystem read-only [ 375.786922][ T6501] ext4_test_bit(bit=16, block=4) = 1 [ 375.792326][ T6501] is_bad_inode(inode)=0 [ 375.796680][ T6501] NEXT_ORPHAN(inode)=2147418128 [ 375.801576][ T6501] max_ino=32 [ 375.804836][ T6501] i_nlink=0 [ 375.808845][ T6501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 376.230011][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 376.437077][ T6511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.638'. [ 376.957100][ T6515] loop2: detected capacity change from 0 to 512 [ 376.976359][ T6515] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 377.140740][ T6515] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.637: bad orphan inode 17 [ 377.152280][ T6515] EXT4-fs (loop2): Remounting filesystem read-only [ 377.159523][ T6515] ext4_test_bit(bit=16, block=4) = 1 [ 377.165059][ T6515] is_bad_inode(inode)=0 [ 377.169323][ T6515] NEXT_ORPHAN(inode)=2147418128 [ 377.174237][ T6515] max_ino=32 [ 377.177524][ T6515] i_nlink=0 [ 377.181327][ T6515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 377.677185][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 378.894228][ T6539] loop2: detected capacity change from 0 to 512 [ 378.906094][ T6539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 379.717759][ T6539] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.647: bad orphan inode 17 [ 379.730610][ T6539] EXT4-fs (loop2): Remounting filesystem read-only [ 379.737248][ T6539] ext4_test_bit(bit=16, block=4) = 1 [ 379.742595][ T6539] is_bad_inode(inode)=0 [ 379.748472][ T6539] NEXT_ORPHAN(inode)=2147418128 [ 379.753489][ T6539] max_ino=32 [ 379.756755][ T6539] i_nlink=0 [ 379.760183][ T6539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 380.098816][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 381.191097][ T6561] loop2: detected capacity change from 0 to 512 [ 381.331447][ T6561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 381.645156][ T6561] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.655: bad orphan inode 17 [ 381.659035][ T6561] EXT4-fs (loop2): Remounting filesystem read-only [ 381.666114][ T6561] ext4_test_bit(bit=16, block=4) = 1 [ 381.671758][ T6561] is_bad_inode(inode)=0 [ 381.676026][ T6561] NEXT_ORPHAN(inode)=2147418128 [ 381.680915][ T6561] max_ino=32 [ 381.684178][ T6561] i_nlink=0 [ 381.688133][ T6561] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 382.062068][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 382.994125][ T6574] loop0: detected capacity change from 0 to 1024 [ 383.141973][ T6578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.653'. [ 383.436341][ T6574] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.443691][ T6574] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.481686][ T6574] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.565972][ T6574] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.630504][ T6584] hfsplus: cannot replace xattr [ 383.658164][ T26] audit: type=1800 audit(1747269542.440:22): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.660" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 384.365190][ T6599] loop0: detected capacity change from 0 to 512 [ 384.373055][ T6599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 385.460341][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.492419][ T6599] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.665: bad orphan inode 17 [ 385.503047][ T6599] EXT4-fs (loop0): Remounting filesystem read-only [ 385.509663][ T6599] ext4_test_bit(bit=16, block=4) = 1 [ 385.515004][ T6599] is_bad_inode(inode)=0 [ 385.519257][ T6599] NEXT_ORPHAN(inode)=2147418128 [ 385.524125][ T6599] max_ino=32 [ 385.527427][ T6599] i_nlink=0 [ 385.530735][ T6599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 385.741605][ T6591] sctp: [Deprecated]: syz.3.664 (pid 6591) Use of int in max_burst socket option. [ 385.741605][ T6591] Use struct sctp_assoc_value instead [ 385.830695][ T6591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.664'. [ 386.373434][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 386.464674][ T6591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.664'. [ 386.593671][ T6591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.664'. [ 387.136626][ T6618] netlink: 'syz.2.672': attribute type 21 has an invalid length. [ 387.179417][ T6618] netlink: 'syz.2.672': attribute type 20 has an invalid length. [ 387.217989][ T6618] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.131833][ T6625] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 388.369712][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.3.674'. [ 389.671818][ T6642] loop2: detected capacity change from 0 to 512 [ 391.101127][ T6642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.675934][ T6642] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.678: bad orphan inode 17 [ 391.687429][ T6642] EXT4-fs (loop2): Remounting filesystem read-only [ 391.693993][ T6642] ext4_test_bit(bit=16, block=4) = 1 [ 391.699947][ T6642] is_bad_inode(inode)=0 [ 391.704148][ T6642] NEXT_ORPHAN(inode)=2147418128 [ 391.709069][ T6642] max_ino=32 [ 391.712299][ T6642] i_nlink=0 [ 391.715616][ T6642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 392.041094][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 392.593697][ T6658] loop3: detected capacity change from 0 to 64 [ 393.754197][ T6669] netlink: 48 bytes leftover after parsing attributes in process `syz.1.688'. [ 395.344435][ T6670] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 396.069603][ T6684] loop0: detected capacity change from 0 to 512 [ 396.633876][ T6684] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 396.982980][ T6684] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.693: bad orphan inode 17 [ 397.190360][ T6684] EXT4-fs (loop0): Remounting filesystem read-only [ 397.199069][ T6684] ext4_test_bit(bit=16, block=4) = 1 [ 397.204404][ T6684] is_bad_inode(inode)=0 [ 397.208664][ T6684] NEXT_ORPHAN(inode)=2147418128 [ 397.213540][ T6684] max_ino=32 [ 397.216831][ T6684] i_nlink=0 [ 397.220134][ T6684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 397.477779][ T6691] loop4: detected capacity change from 0 to 512 [ 397.522866][ T6691] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 397.645496][ T6691] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.691: bad orphan inode 17 [ 397.659039][ T6691] EXT4-fs (loop4): Remounting filesystem read-only [ 397.665642][ T6691] ext4_test_bit(bit=16, block=4) = 1 [ 397.671466][ T6691] is_bad_inode(inode)=0 [ 397.675681][ T6691] NEXT_ORPHAN(inode)=2147418128 [ 397.680629][ T6691] max_ino=32 [ 397.683891][ T6691] i_nlink=0 [ 397.687945][ T6691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 398.077469][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 398.270059][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 398.274377][ T6698] sctp: [Deprecated]: syz.0.696 (pid 6698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.274377][ T6698] Use struct sctp_sack_info instead [ 398.434178][ T6704] loop3: detected capacity change from 0 to 64 [ 398.565336][ T6704] minix_free_block (loop3:1): bit already cleared [ 398.571986][ T6704] minix_free_block (loop3:4): bit already cleared [ 398.578606][ T6704] minix_free_block (loop3:3): bit already cleared [ 398.585018][ T6704] minix_free_block (loop3:2): bit already cleared [ 398.591470][ T6704] minix_free_block (loop3:1): bit already cleared [ 399.426838][ T6709] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 400.178115][ T6722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.704'. [ 402.446512][ T6734] loop3: detected capacity change from 0 to 512 [ 403.482952][ T6734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 404.071165][ T6740] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.711'. [ 404.111984][ T6734] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.706: bad orphan inode 17 [ 404.122604][ T6734] EXT4-fs (loop3): Remounting filesystem read-only [ 404.129268][ T6734] ext4_test_bit(bit=16, block=4) = 1 [ 404.134625][ T6734] is_bad_inode(inode)=0 [ 404.138919][ T6734] NEXT_ORPHAN(inode)=2147418128 [ 404.143815][ T6734] max_ino=32 [ 404.147365][ T6734] i_nlink=0 [ 404.150644][ T6734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 404.191061][ T6740] netlink: 6072 bytes leftover after parsing attributes in process `syz.4.711'. [ 404.345338][ T6743] Bluetooth: MGMT ver 1.22 [ 404.517111][ T6744] loop1: detected capacity change from 0 to 512 [ 405.006802][ T6744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 405.018458][ T6740] netlink: 244 bytes leftover after parsing attributes in process `syz.4.711'. [ 405.056061][ T6744] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.710: bad orphan inode 17 [ 405.066959][ T6744] EXT4-fs (loop1): Remounting filesystem read-only [ 405.073519][ T6744] ext4_test_bit(bit=16, block=4) = 1 [ 405.078912][ T6744] is_bad_inode(inode)=0 [ 405.083092][ T6744] NEXT_ORPHAN(inode)=2147418128 [ 405.088787][ T6744] max_ino=32 [ 405.092026][ T6744] i_nlink=0 [ 405.095335][ T6744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 405.211380][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 406.328194][ T6754] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 406.509350][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 407.275038][ T6770] netlink: 48 bytes leftover after parsing attributes in process `syz.3.720'. [ 407.455119][ T6772] loop2: detected capacity change from 0 to 512 [ 409.491907][ T6772] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 409.624256][ T6772] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.719: bad orphan inode 17 [ 409.634851][ T6772] EXT4-fs (loop2): Remounting filesystem read-only [ 409.641488][ T6772] ext4_test_bit(bit=16, block=4) = 1 [ 409.646921][ T6772] is_bad_inode(inode)=0 [ 409.651107][ T6772] NEXT_ORPHAN(inode)=2147418128 [ 409.656036][ T6772] max_ino=32 [ 409.659259][ T6772] i_nlink=0 [ 409.662559][ T6772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 410.010697][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 410.375361][ T6788] loop4: detected capacity change from 0 to 512 [ 411.491813][ T6788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 411.694070][ T6788] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.724: bad orphan inode 17 [ 411.704724][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 411.711415][ T6788] ext4_test_bit(bit=16, block=4) = 1 [ 411.717234][ T6788] is_bad_inode(inode)=0 [ 411.721385][ T6788] NEXT_ORPHAN(inode)=2147418128 [ 411.726356][ T6788] max_ino=32 [ 411.729568][ T6788] i_nlink=0 [ 411.732801][ T6788] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 412.108606][ T6794] loop2: detected capacity change from 0 to 512 [ 412.400497][ T6794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 412.733123][ T6798] loop1: detected capacity change from 0 to 1024 [ 412.747874][ T6794] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.725: bad orphan inode 17 [ 412.758559][ T6794] EXT4-fs (loop2): Remounting filesystem read-only [ 412.765210][ T6794] ext4_test_bit(bit=16, block=4) = 1 [ 412.770631][ T6794] is_bad_inode(inode)=0 [ 412.774794][ T6794] NEXT_ORPHAN(inode)=2147418128 [ 412.779834][ T6794] max_ino=32 [ 412.783049][ T6794] i_nlink=0 [ 412.786398][ T6794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 412.836256][ T6798] hfsplus: request for non-existent node 16777216 in B*Tree [ 412.865216][ T6798] hfsplus: request for non-existent node 16777216 in B*Tree [ 412.937928][ T6798] hfsplus: request for non-existent node 16777216 in B*Tree [ 413.007800][ T6798] hfsplus: request for non-existent node 16777216 in B*Tree [ 413.107735][ T6798] hfsplus: request for non-existent node 16777216 in B*Tree [ 413.121275][ T6798] hfsplus: request for non-existent node 16777216 in B*Tree [ 413.126634][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 413.130201][ T6798] hfsplus: request for non-existent node 16777216 in B*Tree [ 413.199503][ T6798] hfsplus: request for non-existent node 16777216 in B*Tree [ 413.220088][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 413.263224][ T6802] hfsplus: cannot replace xattr [ 413.293922][ T26] audit: type=1800 audit(1747270084.076:23): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.727" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 413.539085][ T6805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.729'. [ 415.819329][ T6814] netlink: 48 bytes leftover after parsing attributes in process `syz.1.733'. [ 419.261736][ T6822] UBIFS error (pid: 6822): cannot open "(null)", error -22 [ 420.132709][ T5039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.296509][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.305479][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.349744][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.357931][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.370345][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 420.380891][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.479190][ T6833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.738'. [ 420.632189][ T6832] loop2: detected capacity change from 0 to 512 [ 420.645490][ T6832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 420.801403][ T6832] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.736: bad orphan inode 17 [ 420.813162][ T6832] EXT4-fs (loop2): Remounting filesystem read-only [ 420.819893][ T6832] ext4_test_bit(bit=16, block=4) = 1 [ 420.825285][ T6832] is_bad_inode(inode)=0 [ 420.829578][ T6832] NEXT_ORPHAN(inode)=2147418128 [ 420.834503][ T6832] max_ino=32 [ 420.837818][ T6832] i_nlink=0 [ 420.841750][ T6832] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 421.065187][ T5039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.129041][ T6833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.738'. [ 421.193440][ T6831] netlink: 60 bytes leftover after parsing attributes in process `syz.1.738'. [ 421.255992][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 421.377412][ T5039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.905673][ T6850] loop2: detected capacity change from 0 to 512 [ 421.974239][ T6850] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 422.107111][ T6850] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.739: bad orphan inode 17 [ 422.121887][ T6850] EXT4-fs (loop2): Remounting filesystem read-only [ 422.128690][ T6850] ext4_test_bit(bit=16, block=4) = 1 [ 422.134043][ T6850] is_bad_inode(inode)=0 [ 422.138434][ T6850] NEXT_ORPHAN(inode)=2147418128 [ 422.143339][ T6850] max_ino=32 [ 422.146661][ T6850] i_nlink=0 [ 422.150605][ T6850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 422.482694][ T5039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.164200][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 423.386478][ T6859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.742'. [ 424.217198][ T4259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 424.232483][ T4259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 424.240444][ T4259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 424.247054][ T6867] sctp: [Deprecated]: syz.4.744 (pid 6867) Use of int in max_burst socket option. [ 424.247054][ T6867] Use struct sctp_assoc_value instead [ 424.249739][ T4259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 424.270476][ T4259] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 424.277814][ T4259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 424.423613][ T6867] netlink: 164 bytes leftover after parsing attributes in process `syz.4.744'. [ 424.453333][ T6867] netlink: 164 bytes leftover after parsing attributes in process `syz.4.744'. [ 424.522987][ T6867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.744'. [ 425.369821][ T6887] netlink: 48 bytes leftover after parsing attributes in process `syz.4.747'. [ 426.305926][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 427.013495][ T6886] loop1: detected capacity change from 0 to 512 [ 427.089605][ T6886] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 427.165959][ T6886] EXT4-fs (loop1): 1 truncate cleaned up [ 427.177218][ T6886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 427.289678][ T4259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.305046][ T4259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.313574][ T4259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.350051][ T4259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.388689][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 427.396350][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.524149][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 427.607113][ T4262] Bluetooth: hci4: Unknown advertising packet type: 0x14 [ 427.607193][ T4262] Bluetooth: hci4: Unknown advertising packet type: 0x20 [ 427.733409][ T6902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.751'. [ 428.061573][ T6902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.751'. [ 428.385987][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 428.588681][ T6900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.751'. [ 429.140509][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 429.426096][ T4262] Bluetooth: hci5: command 0x0409 tx timeout [ 430.466428][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 431.609458][ T4262] Bluetooth: hci5: command 0x041b tx timeout [ 432.107157][ T6920] Bluetooth: MGMT ver 1.22 [ 433.827795][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 433.834146][ T4262] Bluetooth: hci5: command 0x040f tx timeout [ 433.867035][ T6921] loop4: detected capacity change from 0 to 512 [ 433.874982][ T6921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 434.024765][ T6921] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.752: bad orphan inode 17 [ 434.053738][ T6921] EXT4-fs (loop4): Remounting filesystem read-only [ 434.060579][ T6921] ext4_test_bit(bit=16, block=4) = 1 [ 434.065970][ T6921] is_bad_inode(inode)=0 [ 434.070141][ T6921] NEXT_ORPHAN(inode)=2147418128 [ 434.075012][ T6921] max_ino=32 [ 434.078295][ T6921] i_nlink=0 [ 434.081559][ T6921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 434.555694][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 435.017831][ T6933] loop4: detected capacity change from 0 to 40427 [ 435.039812][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.058187][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.074862][ T6933] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 435.082909][ T6933] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 435.097936][ T6933] F2FS-fs (loop4): invalid crc value [ 435.108568][ T6937] sctp: [Deprecated]: syz.2.756 (pid 6937) Use of int in max_burst socket option. [ 435.108568][ T6937] Use struct sctp_assoc_value instead [ 435.236945][ T6864] device bridge_slave_0 entered promiscuous mode [ 435.276659][ T6933] F2FS-fs (loop4): Found nat_bits in checkpoint [ 435.314063][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.314312][ T6933] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 435.328777][ T6933] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 435.488871][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.500572][ T6864] device bridge_slave_1 entered promiscuous mode [ 435.906275][ T4262] Bluetooth: hci5: command 0x0419 tx timeout [ 436.075867][ T5039] device hsr_slave_0 left promiscuous mode [ 436.098745][ T5039] device hsr_slave_1 left promiscuous mode [ 436.118338][ T5039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.125936][ T5039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.141187][ T5039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.154543][ T5039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.177082][ T5039] device bridge_slave_1 left promiscuous mode [ 436.183506][ T5039] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.205946][ T5039] device bridge_slave_0 left promiscuous mode [ 436.212285][ T5039] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.329706][ T5039] device veth1_macvtap left promiscuous mode [ 436.346681][ T5039] device veth0_macvtap left promiscuous mode [ 436.361554][ T5039] device veth0_vlan left promiscuous mode [ 437.165688][ T5039] team0 (unregistering): Port device team_slave_1 removed [ 437.241421][ T5039] team0 (unregistering): Port device team_slave_0 removed [ 437.300940][ T5039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.355269][ T5039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.893200][ T5039] bond0 (unregistering): Released all slaves [ 438.004624][ T6943] netlink: 164 bytes leftover after parsing attributes in process `syz.2.756'. [ 438.014376][ T6943] netlink: 164 bytes leftover after parsing attributes in process `syz.2.756'. [ 438.030364][ T6943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.756'. [ 438.455837][ T6954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.759'. [ 440.321517][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'. [ 440.604766][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.478885][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.569951][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 441.586907][ T6967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.762'. [ 441.642265][ T6967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.762'. [ 441.784514][ T6963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.762'. [ 441.950553][ T6864] team0: Port device team_slave_0 added [ 441.957589][ T6968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.762'. [ 441.986411][ T6864] team0: Port device team_slave_1 added [ 442.783025][ T4299] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 443.055997][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 443.068571][ T4299] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 443.221637][ T4299] usb 5-1: config 179 has no interface number 0 [ 443.314552][ T4299] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 443.422115][ T4299] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 443.504255][ T4299] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.590578][ T4299] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 443.701920][ T4299] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 443.810372][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.059120][ T6971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 444.314965][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.463780][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.692961][ T6890] device bridge_slave_0 entered promiscuous mode [ 445.165307][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.241139][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.734213][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.873626][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.899210][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.984394][ T6890] device bridge_slave_1 entered promiscuous mode [ 445.989823][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.021354][ T4300] usb 5-1: USB disconnect, device number 2 [ 446.021373][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 446.035972][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 446.046964][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.054055][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.325112][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.688726][ T7016] netlink: 48 bytes leftover after parsing attributes in process `syz.4.769'. [ 449.241541][ T6864] device hsr_slave_0 entered promiscuous mode [ 449.311643][ T6864] device hsr_slave_1 entered promiscuous mode [ 449.333338][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.373337][ T6864] Cannot create hsr debugfs directory [ 449.398343][ T7017] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 449.411525][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.526575][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.771'. [ 449.607751][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.775809][ T7027] tmpfs: Bad value for 'mpol' [ 450.500801][ T6890] team0: Port device team_slave_0 added [ 450.511597][ T6890] team0: Port device team_slave_1 added [ 450.838480][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.862811][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.966222][ T7038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.774'. [ 451.057507][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.125675][ T7038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.774'. [ 451.186395][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.193896][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.404815][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.470665][ T7035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.774'. [ 451.592947][ T7039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.774'. [ 451.896414][ T6890] device hsr_slave_0 entered promiscuous mode [ 451.905245][ T6890] device hsr_slave_1 entered promiscuous mode [ 452.006790][ T6890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.027137][ T6890] Cannot create hsr debugfs directory [ 452.357045][ T7062] netlink: 60 bytes leftover after parsing attributes in process `syz.4.776'. [ 452.367771][ T7062] unsupported nlmsg_type 40 [ 454.195333][ T7074] netlink: 48 bytes leftover after parsing attributes in process `syz.1.780'. [ 456.429603][ T6864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 456.571094][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 456.634402][ T6864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 456.662244][ T6864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 456.690220][ T6864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 456.885860][ T7086] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.783' sets config #1 [ 456.893496][ T4383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.200186][ T4383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.307838][ T7099] loop2: detected capacity change from 0 to 512 [ 457.317703][ T7099] ext3: Bad value for 'max_batch_time' [ 457.721704][ T7104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.787'. [ 457.881895][ T5962] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.961796][ T7104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.787'. [ 457.981779][ T7103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.787'. [ 458.055818][ T4383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.080061][ T7105] netlink: 60 bytes leftover after parsing attributes in process `syz.4.787'. [ 458.189586][ T4383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.419736][ T7114] netlink: 48 bytes leftover after parsing attributes in process `syz.1.789'. [ 459.689912][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.748181][ T6890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 459.783873][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.005637][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.024940][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.054253][ T6890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 460.123285][ T7131] tmpfs: Bad value for 'mpol' [ 460.843586][ T6864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.903924][ T6864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.924312][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.003170][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.129173][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.137513][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.322288][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.471259][ T7137] fuse: Bad value for 'fd' [ 461.478552][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.792993][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.800196][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.940418][ T7139] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 461.949357][ T7139] UDF-fs: Scanning with blocksize 512 failed [ 461.965913][ T7139] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 461.975611][ T7139] UDF-fs: Scanning with blocksize 1024 failed [ 462.021157][ T7139] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 462.029712][ T7139] UDF-fs: Scanning with blocksize 2048 failed [ 462.066846][ T7139] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 462.075024][ T7139] UDF-fs: Scanning with blocksize 4096 failed [ 462.407548][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 462.478952][ T7141] loop1: detected capacity change from 0 to 1024 [ 462.520406][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 462.568711][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 462.576479][ T7141] hfsplus: request for non-existent node 16777216 in B*Tree [ 462.601035][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 462.613095][ T7141] hfsplus: request for non-existent node 16777216 in B*Tree [ 463.360068][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.276640][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.285446][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.291918][ T7141] hfsplus: request for non-existent node 16777216 in B*Tree [ 464.294253][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.310741][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.319484][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.328241][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.336579][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.344749][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.353068][ T7149] hfsplus: cannot replace xattr [ 464.355919][ T6890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 464.426927][ T7141] hfsplus: request for non-existent node 16777216 in B*Tree [ 464.476317][ T26] audit: type=1800 audit(1747270135.266:24): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.797" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 464.504915][ T6890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 464.853933][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.891775][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 464.941242][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.008428][ T6890] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.075121][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.084660][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.123266][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.130492][ T5036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.205919][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.246850][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 465.476988][ T7167] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 466.993921][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.072346][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.079568][ T5036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.218827][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.296667][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.393922][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.499018][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.569886][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.437299][ T7161] syz.4.802 (7161): drop_caches: 2 [ 469.586291][ T7161] syz.4.802 (7161): drop_caches: 2 [ 469.725405][ T7181] sctp: [Deprecated]: syz.1.803 (pid 7181) Use of int in max_burst socket option. [ 469.725405][ T7181] Use struct sctp_assoc_value instead [ 469.913199][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.947372][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.982386][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.013642][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.050249][ T7179] netlink: 164 bytes leftover after parsing attributes in process `syz.1.803'. [ 470.067888][ T7179] netlink: 164 bytes leftover after parsing attributes in process `syz.1.803'. [ 470.101666][ T7179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'. [ 470.133205][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.170962][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.382808][ T6890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.409107][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.590059][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.446842][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.071225][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 472.152508][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 472.280424][ T7218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 472.308966][ T7223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 472.693645][ T7230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.811'. [ 474.914952][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.915122][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.956542][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.605042][ T4383] device hsr_slave_0 left promiscuous mode [ 475.626851][ T4383] device hsr_slave_1 left promiscuous mode [ 475.678431][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.803341][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.875494][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.883813][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.897303][ T4383] device bridge_slave_1 left promiscuous mode [ 475.906505][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.947926][ T4383] device bridge_slave_0 left promiscuous mode [ 475.958494][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.243938][ T4383] device veth1_macvtap left promiscuous mode [ 476.299788][ T4383] device veth0_macvtap left promiscuous mode [ 476.339679][ T4383] device veth1_vlan left promiscuous mode [ 476.370329][ T4383] device veth0_vlan left promiscuous mode [ 476.520502][ T7251] loop2: detected capacity change from 0 to 512 [ 476.555851][ T7251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 476.749196][ T7253] loop1: detected capacity change from 0 to 512 [ 477.589006][ T7251] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.814: bad orphan inode 17 [ 477.596975][ T7253] ext3: Bad value for 'max_batch_time' [ 477.605304][ T7251] EXT4-fs (loop2): Remounting filesystem read-only [ 477.612930][ T7251] ext4_test_bit(bit=16, block=4) = 1 [ 477.618385][ T7251] is_bad_inode(inode)=0 [ 477.622577][ T7251] NEXT_ORPHAN(inode)=2147418128 [ 477.627567][ T7251] max_ino=32 [ 477.630803][ T7251] i_nlink=0 [ 477.634108][ T7251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 477.965447][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 478.095090][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 478.458489][ T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 478.472343][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.287551][ T27] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.312278][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 479.366830][ T27] usb 5-1: can't set config #1, error -71 [ 479.449657][ T27] usb 5-1: USB disconnect, device number 3 [ 479.639582][ T7272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.820'. [ 479.662283][ T4383] team0 (unregistering): Port device team_slave_1 removed [ 479.715270][ T4383] team0 (unregistering): Port device team_slave_0 removed [ 479.769358][ T4383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.821586][ T4383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.301932][ T4383] bond0 (unregistering): Released all slaves [ 480.425778][ T7272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.820'. [ 480.472535][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.494633][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.607467][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.643320][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.653013][ T7276] loop4: detected capacity change from 0 to 1024 [ 480.702823][ T6864] device veth0_vlan entered promiscuous mode [ 480.753075][ T7276] hfsplus: request for non-existent node 16777216 in B*Tree [ 480.788533][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.825241][ T7280] netlink: 48 bytes leftover after parsing attributes in process `syz.2.822'. [ 480.924331][ T7276] hfsplus: request for non-existent node 16777216 in B*Tree [ 480.945007][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.117284][ T6864] device veth1_vlan entered promiscuous mode [ 481.321833][ T7281] hfsplus: cannot replace xattr [ 481.412003][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 481.471426][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 481.605152][ T26] audit: type=1800 audit(1747270152.386:25): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.821" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 481.699210][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.740608][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.844662][ T6864] device veth0_macvtap entered promiscuous mode [ 482.286821][ T7294] loop4: detected capacity change from 0 to 512 [ 483.680869][ T7294] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 483.752893][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 483.858050][ T7294] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.824: bad orphan inode 17 [ 483.880244][ T7294] EXT4-fs (loop4): Remounting filesystem read-only [ 483.887231][ T7294] ext4_test_bit(bit=16, block=4) = 1 [ 483.892555][ T7294] is_bad_inode(inode)=0 [ 483.896870][ T7294] NEXT_ORPHAN(inode)=2147418128 [ 483.901744][ T7294] max_ino=32 [ 483.904972][ T7294] i_nlink=0 [ 483.908364][ T7294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 484.384417][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 485.336717][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.390702][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.412278][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.422332][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.432042][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.441600][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.452667][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 485.460290][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.507297][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 487.821207][ T7343] loop2: detected capacity change from 0 to 1024 [ 487.858534][ T7344] loop4: detected capacity change from 0 to 512 [ 487.877343][ T7344] ext3: Bad value for 'max_batch_time' [ 487.946867][ T7343] hfsplus: request for non-existent node 16777216 in B*Tree [ 488.023429][ T7343] hfsplus: request for non-existent node 16777216 in B*Tree [ 488.091390][ T7347] hfsplus: cannot replace xattr [ 488.128041][ T7343] hfsplus: request for non-existent node 16777216 in B*Tree [ 488.135406][ T7343] hfsplus: request for non-existent node 16777216 in B*Tree [ 488.212205][ T26] audit: type=1800 audit(1747270158.996:26): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.834" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 488.352008][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 488.361685][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 488.439727][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 488.470759][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 488.728620][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 488.739133][ T4262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.668767][ T7367] Bluetooth: MGMT ver 1.22 [ 489.685950][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 490.654169][ T7371] loop1: detected capacity change from 0 to 512 [ 490.693073][ T7371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 490.892183][ T7371] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.837: bad orphan inode 17 [ 490.909771][ T7371] EXT4-fs (loop1): Remounting filesystem read-only [ 490.916496][ T7371] ext4_test_bit(bit=16, block=4) = 1 [ 490.921880][ T7371] is_bad_inode(inode)=0 [ 490.926498][ T7371] NEXT_ORPHAN(inode)=2147418128 [ 490.931412][ T7371] max_ino=32 [ 490.934670][ T7371] i_nlink=0 [ 490.938767][ T7371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 491.097188][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 491.345295][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 491.371369][ T7319] chnl_net:caif_netlink_parms(): no params data found [ 491.535463][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 491.745996][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 492.873199][ T7394] tty tty1: ldisc open failed (-12), clearing slot 0 [ 493.559736][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 493.825863][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 494.789225][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.811345][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.230156][ T7319] device bridge_slave_0 entered promiscuous mode [ 495.402683][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.410129][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.419533][ T7350] device bridge_slave_0 entered promiscuous mode [ 495.428968][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.442652][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.515232][ T7319] device bridge_slave_1 entered promiscuous mode [ 495.585796][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 496.165106][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.174567][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.183076][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.191478][ T7350] device bridge_slave_1 entered promiscuous mode [ 496.327574][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.670220][ T7430] loop2: detected capacity change from 0 to 512 [ 497.282522][ T7430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 497.666096][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 497.961300][ T7430] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.850: bad orphan inode 17 [ 497.975140][ T7430] EXT4-fs (loop2): Remounting filesystem read-only [ 497.982391][ T7430] ext4_test_bit(bit=16, block=4) = 1 [ 497.987781][ T7430] is_bad_inode(inode)=0 [ 497.992376][ T7430] NEXT_ORPHAN(inode)=2147418128 [ 497.997318][ T7430] max_ino=32 [ 498.000541][ T7430] i_nlink=0 [ 498.003857][ T7430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 498.079461][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.101244][ T7319] team0: Port device team_slave_0 added [ 498.199066][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.224810][ T7319] team0: Port device team_slave_1 added [ 498.342941][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.353093][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.407944][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 498.424716][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.464093][ T7350] team0: Port device team_slave_0 added [ 498.566662][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.573666][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.613195][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.634063][ T7350] team0: Port device team_slave_1 added [ 498.792985][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.808972][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.926203][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.958463][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.969166][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.154635][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.181427][ T4381] device hsr_slave_0 left promiscuous mode [ 499.193421][ T4381] device hsr_slave_1 left promiscuous mode [ 499.565607][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.977581][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.997422][ T4381] device bridge_slave_1 left promiscuous mode [ 500.015406][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.051074][ T4381] device bridge_slave_0 left promiscuous mode [ 500.074765][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.410797][ T4381] device veth0_macvtap left promiscuous mode [ 500.417220][ T4381] device veth1_vlan left promiscuous mode [ 500.423227][ T4381] device veth0_vlan left promiscuous mode [ 500.714940][ T7484] tmpfs: Bad value for 'mpol' [ 501.423568][ T7488] loop1: detected capacity change from 0 to 512 [ 501.439664][ T7488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 501.651362][ T7488] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.864: bad orphan inode 17 [ 501.664896][ T7488] EXT4-fs (loop1): Remounting filesystem read-only [ 501.672016][ T7488] ext4_test_bit(bit=16, block=4) = 1 [ 501.677778][ T7488] is_bad_inode(inode)=0 [ 501.682173][ T7488] NEXT_ORPHAN(inode)=2147418128 [ 501.687148][ T7488] max_ino=32 [ 501.690415][ T7488] i_nlink=0 [ 501.694385][ T7488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 502.200248][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 502.459733][ T7501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.869'. [ 504.812534][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 505.688564][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 505.792509][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.975594][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.425929][ T7517] tmpfs: Bad value for 'mpol' [ 507.428583][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.895299][ T4381] bond0 (unregistering): Released all slaves [ 509.238800][ T7319] device hsr_slave_0 entered promiscuous mode [ 509.251436][ T7319] device hsr_slave_1 entered promiscuous mode [ 509.315374][ T7532] loop1: detected capacity change from 0 to 512 [ 509.340682][ T7532] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 509.365136][ T7319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.387015][ T7319] Cannot create hsr debugfs directory [ 509.569566][ T7532] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.878: bad orphan inode 17 [ 509.750102][ T7532] EXT4-fs (loop1): Remounting filesystem read-only [ 509.756928][ T7532] ext4_test_bit(bit=16, block=4) = 1 [ 509.762321][ T7532] is_bad_inode(inode)=0 [ 509.767032][ T7532] NEXT_ORPHAN(inode)=2147418128 [ 509.771941][ T7532] max_ino=32 [ 509.775193][ T7532] i_nlink=0 [ 509.779341][ T7532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 510.098820][ T7350] device hsr_slave_0 entered promiscuous mode [ 510.137578][ T7350] device hsr_slave_1 entered promiscuous mode [ 510.154164][ T7350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.162548][ T7537] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 424: padding at end of block bitmap is not set [ 510.187729][ T7350] Cannot create hsr debugfs directory [ 510.194695][ T7537] EXT4-fs (loop1): Remounting filesystem read-only [ 510.268737][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 511.134793][ T7549] overlayfs: failed to resolve './file1': -2 [ 517.055527][ T7579] loop4: detected capacity change from 0 to 512 [ 518.261911][ T7579] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 518.304100][ T7579] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.887: bad orphan inode 17 [ 518.314783][ T7579] EXT4-fs (loop4): Remounting filesystem read-only [ 518.321467][ T7579] ext4_test_bit(bit=16, block=4) = 1 [ 518.326849][ T7579] is_bad_inode(inode)=0 [ 518.331025][ T7579] NEXT_ORPHAN(inode)=2147418128 [ 518.335939][ T7579] max_ino=32 [ 518.339157][ T7579] i_nlink=0 [ 518.342445][ T7579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 518.649978][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 518.884899][ T7319] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 519.440564][ T7319] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 519.593351][ T7319] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 519.715236][ T7319] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 519.939910][ T4381] device hsr_slave_0 left promiscuous mode [ 520.146186][ T4381] device hsr_slave_1 left promiscuous mode [ 520.288048][ T7607] loop2: detected capacity change from 0 to 512 [ 521.640349][ T7607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 521.645748][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.770281][ T7607] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.891: bad orphan inode 17 [ 521.780960][ T7607] EXT4-fs (loop2): Remounting filesystem read-only [ 521.787611][ T7607] ext4_test_bit(bit=16, block=4) = 1 [ 521.792964][ T7607] is_bad_inode(inode)=0 [ 521.797234][ T7607] NEXT_ORPHAN(inode)=2147418128 [ 521.802129][ T7607] max_ino=32 [ 521.805338][ T7607] i_nlink=0 [ 521.808680][ T7607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 521.825010][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.842444][ T4381] device bridge_slave_1 left promiscuous mode [ 521.883939][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.971449][ T4381] device bridge_slave_0 left promiscuous mode [ 522.539492][ T7609] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 424: padding at end of block bitmap is not set [ 522.579581][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.707528][ T7609] EXT4-fs (loop2): Remounting filesystem read-only [ 522.723410][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 523.265802][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 523.615888][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 524.182398][ T22] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 524.195720][ T22] usb 3-1: config 179 has no interface number 0 [ 524.202044][ T22] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 524.222001][ T22] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 524.233373][ T22] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.255790][ T22] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 524.283152][ T22] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 524.292647][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.322393][ T7615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.769855][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 527.836544][ T5277] usb 3-1: USB disconnect, device number 4 [ 527.836624][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 527.854034][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 528.048403][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 528.208052][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.287603][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.964116][ T7638] loop2: detected capacity change from 0 to 1024 [ 529.039030][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.066177][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.073575][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.099073][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.107028][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.114358][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.123575][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.131297][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.138814][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.152687][ T7638] hfsplus: request for non-existent node 16777216 in B*Tree [ 529.205876][ T26] audit: type=1800 audit(1747270199.956:27): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.897" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 529.228492][ T7638] hfsplus: cannot replace xattr [ 529.311107][ T4381] bond0 (unregistering): Released all slaves [ 530.134040][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.203948][ T7350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 530.237051][ T7350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.257274][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.280392][ T7350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.526389][ T7350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 530.600797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.707883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.196679][ T7660] loop1: detected capacity change from 0 to 512 [ 531.302973][ T7660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 531.376561][ T7660] EXT4-fs (loop1): 1 truncate cleaned up [ 531.408988][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.424548][ T7660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 531.436586][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.637614][ T7669] loop4: detected capacity change from 0 to 512 [ 532.008650][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.015847][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.033449][ T7669] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 532.169090][ T7669] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.903: bad orphan inode 17 [ 532.179747][ T7669] EXT4-fs (loop4): Remounting filesystem read-only [ 532.186409][ T7669] ext4_test_bit(bit=16, block=4) = 1 [ 532.192051][ T7669] is_bad_inode(inode)=0 [ 532.196271][ T7669] NEXT_ORPHAN(inode)=2147418128 [ 532.201116][ T7669] max_ino=32 [ 532.204316][ T7669] i_nlink=0 [ 532.207623][ T7669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 532.585635][ T4242] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 532.651481][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.653384][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 532.660528][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.674392][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.681538][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.690014][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 532.699235][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.726669][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 532.816849][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.835859][ T4242] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 532.844943][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.865493][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 532.866582][ T4242] usb 3-1: config 0 descriptor?? [ 533.217741][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.248358][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.525017][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.538544][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.591638][ T4242] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 533.676420][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 533.708075][ T4242] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 534.209061][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.233242][ T7319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.313868][ T4242] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 534.356132][ T7319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.393379][ T4242] usb 3-1: USB disconnect, device number 5 [ 534.455390][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.475226][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.865162][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 535.074705][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 535.315207][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.367523][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 535.397976][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 535.436391][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 535.446813][ T7684] fido_id[7684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 535.488890][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 535.511644][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 535.544637][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.551862][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.599593][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 535.633698][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 535.680926][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.715989][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.741337][ T7702] loop1: detected capacity change from 0 to 1024 [ 535.778736][ T7685] device bridge_slave_0 left promiscuous mode [ 535.785217][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.840827][ T7685] device bridge_slave_1 left promiscuous mode [ 535.917785][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.954319][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 535.973436][ T7685] bond0: (slave bond_slave_0): Releasing backup interface [ 535.996183][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 536.053796][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 536.074169][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 536.151040][ T7711] tmpfs: Bad value for 'mpol' [ 536.400759][ T7685] bond0: (slave bond_slave_1): Releasing backup interface [ 536.497112][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 536.854893][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 536.930704][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 536.949284][ T7685] team0: Port device team_slave_0 removed [ 536.957935][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 536.992914][ T7710] hfsplus: cannot replace xattr [ 537.024308][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 537.059355][ T7685] team0: Port device team_slave_1 removed [ 537.065222][ T7702] hfsplus: request for non-existent node 16777216 in B*Tree [ 537.099904][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.138066][ T26] audit: type=1800 audit(1747270207.916:28): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.909" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 537.170680][ T7685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.192529][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.200130][ T7685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.210894][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.225268][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 537.243103][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 537.663141][ T7696] team0: Mode changed to "loadbalance" [ 537.755858][ T4366] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 537.986451][ T4366] usb 3-1: Using ep0 maxpacket: 8 [ 537.994691][ T4366] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.005360][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 538.046115][ T4366] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.087697][ T4366] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 538.105008][ T4366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.113802][ T4366] usb 3-1: Product: syz [ 538.119687][ T4366] usb 3-1: Manufacturer: syz [ 538.124446][ T4366] usb 3-1: SerialNumber: syz [ 538.137498][ T4366] usb 3-1: config 0 descriptor?? [ 538.521783][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 538.532914][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 538.549332][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.556540][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.565632][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 538.574912][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 538.612358][ T7350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.623117][ T7350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.700392][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 538.742138][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.961921][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 539.215368][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 539.291597][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 539.311789][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 539.326319][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 539.335138][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 539.350788][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 539.362317][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 539.469929][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 539.501347][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 539.551373][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.580184][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.915'. [ 539.606873][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.915'. [ 539.619150][ T7736] netlink: 60 bytes leftover after parsing attributes in process `syz.4.915'. [ 539.657589][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.915'. [ 539.878344][ T7747] loop4: detected capacity change from 0 to 64 [ 539.888232][ T4340] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 540.497597][ T4242] usb 3-1: USB disconnect, device number 6 [ 540.596598][ T4340] usb 2-1: Using ep0 maxpacket: 32 [ 540.618696][ T4340] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 540.769741][ T4340] usb 2-1: config 0 has no interface number 0 [ 540.835942][ T4340] usb 2-1: config 0 interface 184 has no altsetting 0 [ 540.878035][ T4340] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 540.918886][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.972184][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.975902][ T4340] usb 2-1: Product: syz [ 540.993956][ T4340] usb 2-1: Manufacturer: syz [ 540.999390][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.014218][ T4340] usb 2-1: SerialNumber: syz [ 541.031231][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.046653][ T4340] usb 2-1: config 0 descriptor?? [ 541.072309][ T4340] smsc75xx v1.0.0 [ 542.101224][ T4340] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 542.303210][ T4340] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 542.338015][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 542.355453][ T4340] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 542.376441][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 542.412732][ T4340] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 542.464086][ T4340] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 542.485967][ T7783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.921'. [ 542.513774][ T4340] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 542.561972][ T4340] usb 2-1: USB disconnect, device number 2 [ 544.493457][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 544.513033][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.636979][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 544.656267][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.726380][ T7350] device veth0_vlan entered promiscuous mode [ 544.748269][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.758165][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.789733][ T7350] device veth1_vlan entered promiscuous mode [ 545.291363][ T7813] loop4: detected capacity change from 0 to 512 [ 545.355315][ T7813] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 545.614281][ T7813] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.928: bad orphan inode 17 [ 545.631927][ T7813] EXT4-fs (loop4): Remounting filesystem read-only [ 545.638798][ T7813] ext4_test_bit(bit=16, block=4) = 1 [ 545.644196][ T7813] is_bad_inode(inode)=0 [ 545.648477][ T7813] NEXT_ORPHAN(inode)=2147418128 [ 545.653505][ T7813] max_ino=32 [ 545.656831][ T7813] i_nlink=0 [ 545.661848][ T7813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 545.717033][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 545.728448][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 545.844775][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 545.855352][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 545.864158][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 545.872540][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 545.881304][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 545.900041][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 546.019370][ T7821] loop1: detected capacity change from 0 to 512 [ 546.058134][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 546.086495][ T7821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 546.195217][ T7821] EXT4-fs (loop1): 1 truncate cleaned up [ 546.250452][ T7821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 547.375759][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 547.986912][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 549.774067][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 549.812747][ T4259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 549.821406][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 549.829559][ T4259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 549.853697][ T4259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 549.867963][ T4259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 550.090517][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 550.380688][ T7867] sctp: [Deprecated]: syz.2.939 (pid 7867) Use of int in max_burst socket option. [ 550.380688][ T7867] Use struct sctp_assoc_value instead [ 550.541642][ T7874] netlink: 164 bytes leftover after parsing attributes in process `syz.2.939'. [ 550.574304][ T7874] netlink: 164 bytes leftover after parsing attributes in process `syz.2.939'. [ 550.609437][ T7874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.939'. [ 550.652275][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 551.681909][ T7882] loop2: detected capacity change from 0 to 512 [ 551.710873][ T7882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 551.915505][ T7882] EXT4-fs (loop2): 1 truncate cleaned up [ 551.928470][ T7882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 552.145810][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 552.145957][ T4259] Bluetooth: hci2: command 0x0409 tx timeout [ 553.896506][ T7904] loop4: detected capacity change from 0 to 512 [ 553.904170][ T7904] ext3: Bad value for 'max_batch_time' [ 553.979171][ T7183] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 554.046029][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 554.226591][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 554.233737][ T4259] Bluetooth: hci0: command 0x0419 tx timeout [ 555.027700][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.034846][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.056359][ T7817] device bridge_slave_0 entered promiscuous mode [ 555.576579][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.583735][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.617161][ T7817] device bridge_slave_1 entered promiscuous mode [ 555.635961][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 555.881347][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.965270][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.998450][ T7857] chnl_net:caif_netlink_parms(): no params data found [ 556.146580][ T7930] sctp: [Deprecated]: syz.1.951 (pid 7930) Use of int in max_burst socket option. [ 556.146580][ T7930] Use struct sctp_assoc_value instead [ 556.166999][ T11] device hsr_slave_0 left promiscuous mode [ 556.182369][ T7935] netlink: 60 bytes leftover after parsing attributes in process `syz.4.954'. [ 556.204944][ T11] device hsr_slave_1 left promiscuous mode [ 556.215088][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.256306][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.278363][ T11] device bridge_slave_1 left promiscuous mode [ 556.295624][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.317877][ T11] device bridge_slave_0 left promiscuous mode [ 556.330974][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.365832][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 556.522303][ T7943] tmpfs: Bad value for 'mpol' [ 557.735247][ T11] team0 (unregistering): Port device team_slave_1 removed [ 557.930071][ T11] team0 (unregistering): Port device team_slave_0 removed [ 558.021528][ T7960] loop2: detected capacity change from 0 to 512 [ 558.028885][ T7960] ext3: Bad value for 'max_batch_time' [ 558.153242][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.207802][ T7687] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 558.259587][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.396188][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 558.773954][ T11] bond0 (unregistering): Released all slaves [ 558.863086][ T7817] team0: Port device team_slave_0 added [ 558.869334][ T7930] netlink: 164 bytes leftover after parsing attributes in process `syz.1.951'. [ 558.879195][ T7930] netlink: 164 bytes leftover after parsing attributes in process `syz.1.951'. [ 558.888313][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.951'. [ 558.905348][ T7935] netlink: 60 bytes leftover after parsing attributes in process `syz.4.954'. [ 559.153647][ T7817] team0: Port device team_slave_1 added [ 559.774884][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.868157][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.757396][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.950182][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.980226][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.225577][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.414758][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.482345][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.725391][ T7857] device bridge_slave_0 entered promiscuous mode [ 562.894062][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 563.349997][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.385161][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.444493][ T7857] device bridge_slave_1 entered promiscuous mode [ 563.590440][ T7817] device hsr_slave_0 entered promiscuous mode [ 563.627541][ T7817] device hsr_slave_1 entered promiscuous mode [ 563.686088][ T7817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.725081][ T7817] Cannot create hsr debugfs directory [ 563.800865][ T7987] loop2: detected capacity change from 0 to 40427 [ 563.914740][ T7987] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 563.922706][ T7987] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 564.041468][ T7987] F2FS-fs (loop2): invalid crc value [ 564.101036][ T7987] F2FS-fs (loop2): Found nat_bits in checkpoint [ 564.156366][ T7987] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 564.163475][ T7987] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 564.366798][ T8003] tmpfs: Bad value for 'mpol' [ 566.348200][ T7990] syz.1.965 (7990) used greatest stack depth: 18176 bytes left [ 566.403316][ T7857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.573663][ T7857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.641386][ T8012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 566.697748][ T8015] sctp: [Deprecated]: syz.4.968 (pid 8015) Use of int in max_burst socket option. [ 566.697748][ T8015] Use struct sctp_assoc_value instead [ 566.750978][ T7857] team0: Port device team_slave_0 added [ 566.774265][ T8012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 566.810769][ T7857] team0: Port device team_slave_1 added [ 566.849577][ T8011] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 566.942726][ T8006] netlink: 164 bytes leftover after parsing attributes in process `syz.4.968'. [ 566.962046][ T8006] netlink: 164 bytes leftover after parsing attributes in process `syz.4.968'. [ 566.998417][ T8006] netlink: 60 bytes leftover after parsing attributes in process `syz.4.968'. [ 567.048056][ T8016] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 567.076109][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.083130][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.185856][ T7857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.311727][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.389788][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.475892][ T7857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.549408][ T7857] device hsr_slave_0 entered promiscuous mode [ 568.596431][ T7857] device hsr_slave_1 entered promiscuous mode [ 568.633006][ T7857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.657094][ T7857] Cannot create hsr debugfs directory [ 568.869948][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.932354][ T8033] loop2: detected capacity change from 0 to 512 [ 568.969841][ T8033] ext3: Bad value for 'max_batch_time' [ 571.142979][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'. [ 572.702849][ T7817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 572.776649][ T8058] Bluetooth: MGMT ver 1.22 [ 572.848975][ T8059] loop4: detected capacity change from 0 to 512 [ 572.879885][ T8059] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 573.609333][ T8059] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.976: bad orphan inode 17 [ 573.620036][ T8059] EXT4-fs (loop4): Remounting filesystem read-only [ 573.626726][ T8059] ext4_test_bit(bit=16, block=4) = 1 [ 573.632090][ T8059] is_bad_inode(inode)=0 [ 573.636369][ T8059] NEXT_ORPHAN(inode)=2147418128 [ 573.641236][ T8059] max_ino=32 [ 573.644452][ T8059] i_nlink=0 [ 573.647846][ T8059] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 573.782445][ T7817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 573.810240][ T7817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 573.844141][ T7817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 573.971575][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 574.310389][ T8071] tmpfs: Bad value for 'mpol' [ 575.428549][ T8087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.981'. [ 575.792367][ T8087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.981'. [ 575.921319][ T8085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.981'. [ 575.957199][ T8090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.981'. [ 576.818556][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 577.012983][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.278732][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.289260][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.780787][ T11] device hsr_slave_0 left promiscuous mode [ 578.817895][ T11] device hsr_slave_1 left promiscuous mode [ 578.894422][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.938836][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.972473][ T11] device bridge_slave_1 left promiscuous mode [ 579.016018][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.042715][ T8127] loop2: detected capacity change from 0 to 512 [ 579.057762][ T11] device bridge_slave_0 left promiscuous mode [ 579.070599][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.164668][ T11] device veth1_vlan left promiscuous mode [ 579.429765][ T8130] tmpfs: Bad value for 'mpol' [ 580.080413][ T11] device veth0_vlan left promiscuous mode [ 580.110340][ T8127] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 580.472795][ T8127] EXT4-fs: failed to create workqueue [ 580.484359][ T8127] EXT4-fs (loop2): mount failed [ 581.517693][ T8142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.995'. [ 581.718330][ T11] team0 (unregistering): Port device team_slave_1 removed [ 581.770716][ T11] team0 (unregistering): Port device team_slave_0 removed [ 581.827848][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.912830][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.774487][ T11] bond0 (unregistering): Released all slaves [ 583.967446][ T7857] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 584.013563][ T8142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.995'. [ 584.056963][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.085851][ T7857] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 584.294993][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 584.353916][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.492125][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.499329][ T5036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.734905][ T7857] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 587.456666][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.540662][ T7857] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 587.865292][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 587.937077][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.990331][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.997513][ T5036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.066079][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 588.102499][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.175566][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 588.238267][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 588.275462][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 588.309772][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 588.361619][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.417745][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 588.443893][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.481957][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 588.505020][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 588.542486][ T7817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.645759][ T5144] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 588.696480][ T8180] tmpfs: Bad value for 'mpol' [ 588.734708][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.807148][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 588.817526][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.845871][ T5144] usb 2-1: Using ep0 maxpacket: 8 [ 588.852792][ T5144] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 588.878006][ T7857] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.935554][ T5144] usb 2-1: config 179 has no interface number 0 [ 588.970308][ T5144] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 588.988417][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 589.022350][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 589.046026][ T5144] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 589.064145][ T5039] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.071378][ T5039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.122354][ T5144] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.162564][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 589.185925][ T5144] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 589.207706][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 589.247292][ T5039] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.254485][ T5039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.269000][ T5144] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 589.310778][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.380325][ T8176] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 589.396437][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 589.445354][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 589.528546][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 589.577585][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 589.647543][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 589.750212][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 589.829588][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 589.856625][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 589.944093][ T5144] usb 2-1: USB disconnect, device number 3 [ 589.950025][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 589.950059][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 590.026624][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 590.036103][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 590.048218][ T7857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.089272][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 590.140045][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 590.161695][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 590.221008][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.271301][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 590.313989][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 591.621027][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 592.115005][ T22] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 592.338560][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.659702][ T22] usb 5-1: config 0 descriptor?? [ 592.707288][ T22] cp210x 5-1:0.0: cp210x converter detected [ 592.856199][ T8224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1008'. [ 592.915731][ T8224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1008'. [ 592.932233][ T22] usb 5-1: cp210x converter now attached to ttyUSB0 [ 592.976305][ T8222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1008'. [ 592.999550][ T8226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1008'. [ 593.082459][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 593.096578][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 593.172426][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.260046][ T22] usb 5-1: USB disconnect, device number 4 [ 594.478201][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 594.653148][ T22] cp210x 5-1:0.0: device disconnected [ 595.679291][ T8256] loop2: detected capacity change from 0 to 512 [ 595.692558][ T8256] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 595.845846][ T8256] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1013: bad orphan inode 17 [ 595.857556][ T8256] EXT4-fs (loop2): Remounting filesystem read-only [ 595.864115][ T8256] ext4_test_bit(bit=16, block=4) = 1 [ 595.869592][ T8256] is_bad_inode(inode)=0 [ 595.872956][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 595.873746][ T8256] NEXT_ORPHAN(inode)=2147418128 [ 595.884171][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 595.887379][ T8256] max_ino=32 [ 595.898357][ T8256] i_nlink=0 [ 595.901673][ T8256] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 595.932727][ T7817] device veth0_vlan entered promiscuous mode [ 595.940420][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 595.950164][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 595.966312][ T7817] device veth1_vlan entered promiscuous mode [ 595.994738][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 596.009998][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 596.090776][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 596.293468][ T7817] device veth0_macvtap entered promiscuous mode [ 596.371637][ T7817] device veth1_macvtap entered promiscuous mode [ 596.854306][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 597.089728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 597.099138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 597.109495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 597.119813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 597.128648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 597.178103][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.207108][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.253497][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.321412][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.417949][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.453081][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.463647][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.473745][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.495750][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.518837][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.543295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 597.565375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 597.568959][ T8283] loop2: detected capacity change from 0 to 512 [ 597.582536][ T8283] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 597.608433][ T8283] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1016: bad orphan inode 17 [ 597.612720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 597.622350][ T8283] EXT4-fs (loop2): Remounting filesystem read-only [ 597.633787][ T8283] ext4_test_bit(bit=16, block=4) = 1 [ 597.639252][ T8283] is_bad_inode(inode)=0 [ 597.643436][ T8283] NEXT_ORPHAN(inode)=2147418128 [ 597.648388][ T8283] max_ino=32 [ 597.651607][ T8283] i_nlink=0 [ 597.654903][ T8283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 597.686627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 597.732151][ T7817] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.756781][ T7817] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.805712][ T22] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 597.807202][ T7817] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.853885][ T7817] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.999798][ T22] usb 2-1: config 0 has no interfaces? [ 598.008928][ T22] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 598.050518][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.118415][ T22] usb 2-1: config 0 descriptor?? [ 598.133569][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 598.221640][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 598.231121][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 598.335321][ T7857] device veth0_vlan entered promiscuous mode [ 598.377322][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 598.394476][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 598.553652][ T4340] usb 2-1: USB disconnect, device number 4 [ 598.561410][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 598.586070][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 599.346758][ T5039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.376984][ T5039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.388945][ T7857] device veth1_vlan entered promiscuous mode [ 599.438598][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 599.481050][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 599.493844][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 599.519041][ T7857] device veth0_macvtap entered promiscuous mode [ 599.556476][ T5039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.569700][ T5039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.571475][ T7857] device veth1_macvtap entered promiscuous mode [ 599.616786][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 599.629146][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 599.639887][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 599.665156][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.696070][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.732233][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.781540][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.835750][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.863220][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.934971][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.092640][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 600.122442][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 600.153655][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.179046][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.195143][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.196797][ T8314] loop2: detected capacity change from 0 to 512 [ 600.217638][ T8314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 600.246099][ T8314] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1025: bad orphan inode 17 [ 600.260246][ T8314] EXT4-fs (loop2): Remounting filesystem read-only [ 600.261422][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.266838][ T8314] ext4_test_bit(bit=16, block=4) = 1 [ 600.266855][ T8314] is_bad_inode(inode)=0 [ 600.266864][ T8314] NEXT_ORPHAN(inode)=2147418128 [ 600.266874][ T8314] max_ino=32 [ 600.266882][ T8314] i_nlink=0 [ 600.267069][ T8314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 600.421906][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.461155][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.507875][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.524855][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 600.560022][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 600.638150][ T7857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.761608][ T8321] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 601.227651][ T7857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.265818][ T7857] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.274674][ T7857] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.065867][ T8316] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 424: padding at end of block bitmap is not set [ 602.527682][ T8316] EXT4-fs (loop2): Remounting filesystem read-only [ 602.644446][ T5039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.653486][ T5039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.654421][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 602.924343][ T8333] loop5: detected capacity change from 0 to 40427 [ 602.964828][ T8333] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 602.972664][ T8333] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 602.993802][ T8333] F2FS-fs (loop5): invalid crc value [ 603.016966][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.087285][ T8333] F2FS-fs (loop5): Found nat_bits in checkpoint [ 603.111061][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.156434][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.205675][ T8333] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 603.212783][ T8333] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 603.262979][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.845193][ T8356] loop6: detected capacity change from 0 to 1024 [ 604.883895][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 605.020200][ T8356] hfsplus: request for non-existent node 16777216 in B*Tree [ 605.298509][ T8356] hfsplus: request for non-existent node 16777216 in B*Tree [ 605.494928][ T8356] hfsplus: request for non-existent node 16777216 in B*Tree [ 605.581523][ T8356] hfsplus: request for non-existent node 16777216 in B*Tree [ 605.682911][ T8356] hfsplus: request for non-existent node 16777216 in B*Tree [ 605.734189][ T8367] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 605.866806][ T8356] hfsplus: request for non-existent node 16777216 in B*Tree [ 606.068319][ T8361] hfsplus: cannot replace xattr [ 606.526290][ T26] audit: type=1800 audit(1747270277.316:29): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.746" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 606.984968][ T8378] loop5: detected capacity change from 0 to 512 [ 607.269687][ T8378] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 607.819359][ T8378] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1032: bad orphan inode 17 [ 608.176276][ T8378] EXT4-fs (loop5): Remounting filesystem read-only [ 608.182886][ T8378] ext4_test_bit(bit=16, block=4) = 1 [ 608.188438][ T8378] is_bad_inode(inode)=0 [ 608.192608][ T8378] NEXT_ORPHAN(inode)=2147418128 [ 608.197509][ T8378] max_ino=32 [ 608.200697][ T8378] i_nlink=0 [ 608.203931][ T8378] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 610.178362][ T7817] EXT4-fs (loop5): unmounting filesystem. [ 613.910654][ T8397] loop2: detected capacity change from 0 to 40427 [ 613.919207][ T8397] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 613.927417][ T8397] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 613.937531][ T8397] F2FS-fs (loop2): invalid crc value [ 614.015494][ T8397] F2FS-fs (loop2): Found nat_bits in checkpoint [ 614.072320][ T8397] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 614.079520][ T8397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 616.687825][ T8433] loop5: detected capacity change from 0 to 40427 [ 616.700634][ T8433] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 616.708610][ T8433] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 616.727628][ T8433] F2FS-fs (loop5): invalid crc value [ 616.756809][ T8433] F2FS-fs (loop5): Found nat_bits in checkpoint [ 616.873477][ T8443] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 617.598961][ T8433] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 617.606155][ T8433] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 618.837966][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1053'. [ 619.697149][ T8464] loop1: detected capacity change from 0 to 512 [ 619.704270][ T8464] ext3: Bad value for 'max_batch_time' [ 621.298292][ T8479] tmpfs: Bad value for 'mpol' [ 624.717796][ T8504] loop5: detected capacity change from 0 to 40427 [ 624.783352][ T8504] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 624.791315][ T8504] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 624.801223][ T8504] F2FS-fs (loop5): invalid crc value [ 624.867199][ T8504] F2FS-fs (loop5): Found nat_bits in checkpoint [ 624.986686][ T8515] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 625.723692][ T8504] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 625.731027][ T8504] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 629.394405][ T8544] tmpfs: Bad value for 'mpol' [ 630.309618][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.256793][ T8554] loop6: detected capacity change from 0 to 40427 [ 631.286331][ T8554] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 631.294132][ T8554] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 632.008636][ T8554] F2FS-fs (loop6): invalid crc value [ 632.353899][ T8567] loop4: detected capacity change from 0 to 512 [ 632.364432][ T8567] ext3: Bad value for 'max_batch_time' [ 633.012937][ T8554] F2FS-fs (loop6): Found nat_bits in checkpoint [ 633.099088][ T7184] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 633.180457][ T8554] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 633.187772][ T8554] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 634.343923][ T8583] loop5: detected capacity change from 0 to 512 [ 634.365121][ T8583] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 634.465918][ T8583] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1080: bad orphan inode 17 [ 634.481322][ T8583] EXT4-fs (loop5): Remounting filesystem read-only [ 634.490638][ T8583] ext4_test_bit(bit=16, block=4) = 1 [ 634.496083][ T8583] is_bad_inode(inode)=0 [ 634.500319][ T8583] NEXT_ORPHAN(inode)=2147418128 [ 634.505280][ T8583] max_ino=32 [ 634.508710][ T8583] i_nlink=0 [ 634.512101][ T8583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 635.678004][ T7817] EXT4-fs (loop5): unmounting filesystem. [ 636.044808][ T8603] tmpfs: Bad value for 'mpol' [ 638.057176][ T8618] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 639.212236][ T8630] loop4: detected capacity change from 0 to 40427 [ 639.230724][ T8630] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 639.238540][ T8630] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 639.250202][ T8630] F2FS-fs (loop4): invalid crc value [ 639.330027][ T8630] F2FS-fs (loop4): Found nat_bits in checkpoint [ 639.475177][ T8630] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 639.482770][ T8630] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 639.666322][ T8641] loop6: detected capacity change from 0 to 1024 [ 640.620125][ T8650] loop5: detected capacity change from 0 to 512 [ 640.638862][ T8650] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 640.823038][ T8650] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1094: bad orphan inode 17 [ 640.839479][ T8650] EXT4-fs (loop5): Remounting filesystem read-only [ 640.846239][ T8650] ext4_test_bit(bit=16, block=4) = 1 [ 640.851549][ T8650] is_bad_inode(inode)=0 [ 640.855868][ T8650] NEXT_ORPHAN(inode)=2147418128 [ 640.860737][ T8650] max_ino=32 [ 640.863993][ T8650] i_nlink=0 [ 640.867383][ T8650] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 640.893006][ T8641] hfsplus: request for non-existent node 16777216 in B*Tree [ 641.036283][ T8641] hfsplus: request for non-existent node 16777216 in B*Tree [ 641.048359][ T8654] hfsplus: cannot replace xattr [ 641.132102][ T26] audit: type=1800 audit(1747270311.916:30): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1093" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 641.237163][ T7817] EXT4-fs (loop5): unmounting filesystem. [ 642.549490][ T4299] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 642.613209][ T8668] fuse: Bad value for 'fd' [ 642.633092][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1099'. [ 642.848482][ T8670] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 642.856385][ T8670] UDF-fs: Scanning with blocksize 512 failed [ 642.866235][ T8670] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 642.875095][ T8670] UDF-fs: Scanning with blocksize 1024 failed [ 642.897505][ T8670] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 642.905439][ T8670] UDF-fs: Scanning with blocksize 2048 failed [ 642.915422][ T8670] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 642.923458][ T8670] UDF-fs: Scanning with blocksize 4096 failed [ 642.973301][ T4299] usb 6-1: config 0 has no interfaces? [ 643.325178][ T4299] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 643.375333][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.418596][ T4299] usb 6-1: config 0 descriptor?? [ 643.670134][ T4299] usb 6-1: USB disconnect, device number 2 [ 644.770121][ T8686] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1102'. [ 644.864673][ T8686] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1102'. [ 645.010964][ T8679] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1102'. [ 645.373428][ T8688] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1102'. [ 647.207406][ T8699] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1107'. [ 648.575309][ T8725] fuse: Bad value for 'fd' [ 649.526659][ T8725] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 649.534184][ T8725] UDF-fs: Scanning with blocksize 512 failed [ 649.541169][ T8725] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 649.548941][ T8725] UDF-fs: Scanning with blocksize 1024 failed [ 649.555392][ T8725] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 649.562955][ T8725] UDF-fs: Scanning with blocksize 2048 failed [ 649.569372][ T8725] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 649.576944][ T8725] UDF-fs: Scanning with blocksize 4096 failed [ 649.658959][ T8734] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1114'. [ 650.295769][ T8747] loop5: detected capacity change from 0 to 40427 [ 650.311017][ T8747] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 650.319190][ T8747] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 650.329159][ T8747] F2FS-fs (loop5): invalid crc value [ 650.657860][ T8749] loop4: detected capacity change from 0 to 40427 [ 650.676232][ T8749] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 650.684038][ T8749] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 651.405764][ T8749] F2FS-fs (loop4): invalid crc value [ 651.440269][ T8749] F2FS-fs (loop4): Found nat_bits in checkpoint [ 651.469354][ T8747] F2FS-fs (loop5): Found nat_bits in checkpoint [ 651.526385][ T8747] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 651.533538][ T8747] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 651.746343][ T8749] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 651.753576][ T8749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 657.299946][ T8780] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1123'. [ 658.100889][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1127'. [ 658.861622][ T8794] batman_adv: batadv0: Adding interface: dummy0 [ 658.868064][ T8794] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.893504][ T8794] batman_adv: batadv0: Interface activated: dummy0 [ 658.918681][ T8794] batadv0: mtu less than device minimum [ 658.926513][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 658.939382][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 658.951800][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 658.964196][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 658.976624][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 658.988992][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.001358][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.013733][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.026133][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.816156][ T8802] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1129'. [ 661.844213][ T8807] loop6: detected capacity change from 0 to 1024 [ 661.947806][ T8813] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1131'. [ 662.017981][ T8813] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1131'. [ 662.141955][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1131'. [ 662.419075][ T8813] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1131'. [ 662.486531][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 662.587057][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 662.594809][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 662.612058][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 662.776833][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 662.784448][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.459499][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.506068][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.513514][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.718631][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.726107][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.733452][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.740890][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.748644][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.756160][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 663.977409][ T8831] loop2: detected capacity change from 0 to 40427 [ 664.248153][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 664.272698][ T8831] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 664.280731][ T8831] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 664.657486][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 664.676808][ T8833] [ 664.679191][ T8833] ====================================================== [ 664.686223][ T8833] WARNING: possible circular locking dependency detected [ 664.693272][ T8833] 6.1.138-syzkaller #0 Not tainted [ 664.697649][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 664.698377][ T8833] ------------------------------------------------------ [ 664.698385][ T8833] syz.5.1133/8833 is trying to acquire lock: [ 664.718817][ T8833] ffff888018359450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd4/0xa60 [ 664.725665][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 664.730268][ T8833] [ 664.730268][ T8833] but task is already holding lock: [ 664.730276][ T8833] ffff888018358130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 664.754098][ T8833] [ 664.754098][ T8833] which lock already depends on the new lock. [ 664.754098][ T8833] [ 664.762734][ T8831] F2FS-fs (loop2): invalid crc value [ 664.764501][ T8833] [ 664.764501][ T8833] the existing dependency chain (in reverse order) is: [ 664.764510][ T8833] [ 664.764510][ T8833] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 664.786608][ T8833] lock_sock_nested+0x44/0x100 [ 664.791926][ T8833] smc_listen_out+0x109/0x3d0 [ 664.797146][ T8833] process_one_work+0x898/0x1160 [ 664.802614][ T8833] worker_thread+0xaa2/0x1250 [ 664.807818][ T8833] kthread+0x29d/0x330 [ 664.812427][ T8833] ret_from_fork+0x1f/0x30 [ 664.817376][ T8833] [ 664.817376][ T8833] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 664.827546][ T8833] __lock_acquire+0x2cf8/0x7c50 [ 664.832925][ T8833] lock_acquire+0x1b4/0x490 [ 664.837963][ T8833] __flush_work+0xed/0xa60 [ 664.842920][ T8833] __cancel_work_timer+0x3ac/0x520 [ 664.848561][ T8833] smc_clcsock_release+0x5c/0xe0 [ 664.854027][ T8833] __smc_release+0x661/0x7d0 [ 664.859145][ T8833] smc_close_non_accepted+0xd1/0x1f0 [ 664.864957][ T8833] smc_close_active+0xb00/0xea0 [ 664.870338][ T8833] __smc_release+0x8d/0x7d0 [ 664.875367][ T8833] smc_release+0x2ca/0x530 [ 664.880311][ T8833] sock_close+0xd5/0x240 [ 664.885075][ T8833] __fput+0x22c/0x920 [ 664.889587][ T8833] task_work_run+0x1ca/0x250 [ 664.894708][ T8833] get_signal+0x11a6/0x1350 [ 664.899916][ T8833] arch_do_signal_or_restart+0xb0/0x1230 [ 664.906086][ T8833] exit_to_user_mode_loop+0x70/0x110 [ 664.911909][ T8833] exit_to_user_mode_prepare+0xb1/0x140 [ 664.917987][ T8833] syscall_exit_to_user_mode+0x16/0x40 [ 664.923965][ T8833] do_syscall_64+0x58/0xa0 [ 664.928911][ T8833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.935337][ T8833] [ 664.935337][ T8833] other info that might help us debug this: [ 664.935337][ T8833] [ 664.945563][ T8833] Possible unsafe locking scenario: [ 664.945563][ T8833] [ 664.953008][ T8833] CPU0 CPU1 [ 664.958370][ T8833] ---- ---- [ 664.963733][ T8833] lock(sk_lock-AF_SMC/1); [ 664.968247][ T8833] lock((work_completion)(&new_smc->smc_listen_work)); [ 664.978050][ T8833] lock(sk_lock-AF_SMC/1); [ 664.985079][ T8833] lock((work_completion)(&new_smc->smc_listen_work)); [ 664.992014][ T8833] [ 664.992014][ T8833] *** DEADLOCK *** [ 664.992014][ T8833] [ 665.000151][ T8833] 2 locks held by syz.5.1133/8833: [ 665.005255][ T8833] #0: ffff8880544c8e10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 665.015454][ T8833] #1: ffff888018358130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 665.024868][ T8833] [ 665.024868][ T8833] stack backtrace: [ 665.030768][ T8833] CPU: 1 PID: 8833 Comm: syz.5.1133 Not tainted 6.1.138-syzkaller #0 [ 665.038838][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 665.048901][ T8833] Call Trace: [ 665.052184][ T8833] [ 665.055113][ T8833] dump_stack_lvl+0x168/0x22e [ 665.059809][ T8833] ? load_image+0x3b0/0x3b0 [ 665.064314][ T8833] ? show_regs_print_info+0x12/0x12 [ 665.069520][ T8833] ? print_circular_bug+0x12b/0x1a0 [ 665.074728][ T8833] check_noncircular+0x274/0x310 [ 665.079675][ T8833] ? add_chain_block+0x940/0x940 [ 665.084620][ T8833] ? lockdep_lock+0xdc/0x1e0 [ 665.089228][ T8833] ? rcu_is_watching+0x11/0xa0 [ 665.093998][ T8833] ? lock_release+0xd4/0x910 [ 665.098595][ T8833] ? _find_first_zero_bit+0xcf/0x100 [ 665.103883][ T8833] __lock_acquire+0x2cf8/0x7c50 [ 665.108739][ T8833] ? __lock_acquire+0x7c50/0x7c50 [ 665.113776][ T8833] ? is_bpf_text_address+0x28b/0x2a0 [ 665.119070][ T8833] ? hlock_conflict+0x59/0x1f0 [ 665.123854][ T8833] ? verify_lock_unused+0x140/0x140 [ 665.129058][ T8833] ? __bfs+0x2a3/0x5c0 [ 665.133133][ T8833] ? check_path+0x40/0x40 [ 665.137471][ T8833] ? mark_lock+0x94/0x320 [ 665.141808][ T8833] ? __lock_acquire+0x13c0/0x7c50 [ 665.146839][ T8833] ? add_chain_block+0x940/0x940 [ 665.151797][ T8833] lock_acquire+0x1b4/0x490 [ 665.156309][ T8833] ? __flush_work+0xd4/0xa60 [ 665.160914][ T8833] ? __lock_acquire+0x13c0/0x7c50 [ 665.165959][ T8833] ? read_lock_is_recursive+0x10/0x10 [ 665.171339][ T8833] ? verify_lock_unused+0x140/0x140 [ 665.176546][ T8833] ? __flush_work+0xd4/0xa60 [ 665.181147][ T8833] __flush_work+0xed/0xa60 [ 665.185574][ T8833] ? __flush_work+0xd4/0xa60 [ 665.190189][ T8833] ? verify_lock_unused+0x140/0x140 [ 665.195401][ T8833] ? flush_work+0x20/0x20 [ 665.199739][ T8833] ? try_to_grab_pending+0xf1/0x840 [ 665.204975][ T8833] ? lockdep_hardirqs_off+0x70/0x100 [ 665.210272][ T8833] ? mark_lock+0x94/0x320 [ 665.214615][ T8833] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 665.220625][ T8833] ? lock_chain_count+0x20/0x20 [ 665.225483][ T8833] ? __cancel_work_timer+0x331/0x520 [ 665.230780][ T8833] __cancel_work_timer+0x3ac/0x520 [ 665.235906][ T8833] ? cancel_work_sync+0x20/0x20 [ 665.240770][ T8833] ? __smc_release+0x659/0x7d0 [ 665.245542][ T8833] ? __local_bh_enable_ip+0x12a/0x1b0 [ 665.250930][ T8833] ? lockdep_hardirqs_on+0x94/0x140 [ 665.256144][ T8833] ? __local_bh_enable_ip+0x12a/0x1b0 [ 665.261530][ T8833] ? _local_bh_enable+0xa0/0xa0 [ 665.266392][ T8833] smc_clcsock_release+0x5c/0xe0 [ 665.271346][ T8833] __smc_release+0x661/0x7d0 [ 665.275947][ T8833] ? do_raw_spin_unlock+0x11d/0x230 [ 665.281164][ T8833] smc_close_non_accepted+0xd1/0x1f0 [ 665.286460][ T8833] smc_close_active+0xb00/0xea0 [ 665.291325][ T8833] ? sock_no_sendpage_locked+0x160/0x160 [ 665.296970][ T8833] __smc_release+0x8d/0x7d0 [ 665.301476][ T8833] ? do_raw_spin_unlock+0x11d/0x230 [ 665.306683][ T8833] smc_release+0x2ca/0x530 [ 665.311107][ T8833] sock_close+0xd5/0x240 [ 665.315350][ T8833] ? sock_mmap+0x90/0x90 [ 665.319604][ T8833] __fput+0x22c/0x920 [ 665.323595][ T8833] task_work_run+0x1ca/0x250 [ 665.328194][ T8833] ? task_work_cancel+0x230/0x230 [ 665.333223][ T8833] ? kasan_save_stack+0x4c/0x60 [ 665.338083][ T8833] ? __kasan_record_aux_stack+0xb2/0xc0 [ 665.343655][ T8833] ? task_work_add+0x79/0x330 [ 665.348336][ T8833] ? fput+0xd9/0x1a0 [ 665.352233][ T8833] ? __sys_accept4+0xe7/0x100 [ 665.356918][ T8833] ? __x64_sys_accept4+0x96/0xb0 [ 665.361872][ T8833] get_signal+0x11a6/0x1350 [ 665.366395][ T8833] arch_do_signal_or_restart+0xb0/0x1230 [ 665.372040][ T8833] ? __phys_addr+0xb6/0x170 [ 665.376548][ T8833] ? get_sigframe_size+0x10/0x10 [ 665.381492][ T8833] ? task_work_add+0x250/0x330 [ 665.386266][ T8833] ? exit_to_user_mode_loop+0x3b/0x110 [ 665.391736][ T8833] exit_to_user_mode_loop+0x70/0x110 [ 665.397033][ T8833] exit_to_user_mode_prepare+0xb1/0x140 [ 665.402589][ T8833] syscall_exit_to_user_mode+0x16/0x40 [ 665.408049][ T8833] do_syscall_64+0x58/0xa0 [ 665.412474][ T8833] ? clear_bhb_loop+0x45/0xa0 [ 665.417152][ T8833] ? clear_bhb_loop+0x45/0xa0 [ 665.421831][ T8833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.427733][ T8833] RIP: 0033:0x7fc5d7f8e969 [ 665.432165][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.451777][ T8833] RSP: 002b:00007fc5d8e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 665.460197][ T8833] RAX: fffffffffffffe00 RBX: 00007fc5d81b6160 RCX: 00007fc5d7f8e969 [ 665.468172][ T8833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 665.476146][ T8833] RBP: 00007fc5d8010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 665.484130][ T8833] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 665.492116][ T8833] R13: 0000000000000000 R14: 00007fc5d81b6160 R15: 00007ffc6f588778 [ 665.500104][ T8833] [ 665.503234][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.583478][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.590966][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.592250][ T8831] F2FS-fs (loop2): Found nat_bits in checkpoint [ 665.598442][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.598547][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.598557][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.598587][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.598597][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.598627][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.598636][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.598665][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.598675][ T8807] hfsplus: request for non-existent node 16777216 in B*Tree [ 665.600074][ T8807] hfsplus: unable to mark blocks free: error -4 [ 665.678515][ T26] audit: type=1800 audit(1747270336.386:31): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1130" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 665.705806][ T8807] hfsplus: can't free extent [ 665.712728][ T8831] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 665.720513][ T8831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 673.345666][ T4262] Bluetooth: hci2: command 0x0406 tx timeout