last executing test programs: 22m13.565818155s ago: executing program 5 (id=1340): socket$inet6(0xa, 0x11, 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 22m13.178504101s ago: executing program 5 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 22m12.263570926s ago: executing program 5 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) unshare(0x80) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000c80)={{0x5, 0x1, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x213, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe8eb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc9f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61928afd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4000000000]}) 22m5.832074371s ago: executing program 5 (id=1365): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="6469725f756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d5854282b2c636f6465706167653d63703836342c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d63703933362c00ba1cc62fbe041529634cde88021ff02412206543ae25eb5d122f77a94c2113ab796077de9bf46a3b2ed6ec105974f75d13331615810ad28e84c8f2bbd75c4ede6d5a1180afc5acdd01cf83c26042fcc06e0fa14c46671668ded793e0abb1906ae7dbe9e9685e464b1f1d9084009fd14442fac19683285a28a602058e1679c2eac481d62ed27f76c08da8a3e927b48e15d64c837cb723680909354543caa3aafc79fbd2f1a373e039f041072f2b67e922c7e3e492f2b60c93910734743df706deea148a3a296485c2c4f2d611428112a5592bc4eee256ddd27fafd8f3b8de832e181ef5be014215e88cdd7356cdc1bd8d7587c3d604f4f4f0b058dd1d15c6938aa1ffc162"], 0x1, 0x30e, &(0x7f0000000900)="$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") ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 22m5.113760716s ago: executing program 5 (id=1367): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x1010800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147042, 0x32) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) sendfile(r0, r0, 0x0, 0x7a680000) 22m4.40816144s ago: executing program 5 (id=1373): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000000180000006000a004e24000014000900fec0ffffffffffff0000000000000001050002000a"], 0x38}}, 0x0) socketpair(0x28, 0xa, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000000500010006000000"], 0x4c}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 22m3.762373943s ago: executing program 32 (id=1373): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000000180000006000a004e24000014000900fec0ffffffffffff0000000000000001050002000a"], 0x38}}, 0x0) socketpair(0x28, 0xa, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000000500010006000000"], 0x4c}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 8m38.603342951s ago: executing program 3 (id=3482): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) rename(0x0, &(0x7f00000001c0)='./file0\x00') removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'osx.', 'inode_readahead_blks'}) 8m36.318898096s ago: executing program 3 (id=3487): syz_open_dev$dri(0x0, 0x1, 0x181a01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) waitid(0x11, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 8m34.771643849s ago: executing program 3 (id=3491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000073000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r1, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x81) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x6, 0xfffffffc, {{0x18, 0x4, 0x1, 0x30, 0x60, 0x66, 0x0, 0x5a, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x18, 0xee, 0x0, 0x7, [0x8000, 0x800, 0xb73c, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0xb, [{@remote, 0x25b066fe}, {@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@remote, 0xff}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xe7, [@multicast1, @multicast2]}, @end]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0x5, 0x8000, 0x1240, 0xffffffffffffffff, 0xfffffffc, '\x00', r2, r3, 0x5, 0x3, 0x0, 0x4, @void, @value, @void, @value}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117300000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x38, 0x0, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x937dd188e8a291e3}, 0x4000) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r8, 0x0, 0xffffffff000) sendmsg$RDMA_NLDEV_CMD_SET(r5, 0x0, 0x4040001) openat$cgroup_ro(r8, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) 8m31.278037124s ago: executing program 3 (id=3498): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) lgetxattr(0x0, &(0x7f0000000040)=@known='system.posix_acl_default\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$inet6(0xa, 0x2, 0x3a) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x0, {0x2, 0xfffd, @multicast1}, 'veth0\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 8m28.458361869s ago: executing program 3 (id=3504): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000180), 0x403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x4d7, &(0x7f0000000200)={0x0, 0x7a7b, 0x10000, 0x3, 0x92}, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r4, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040), 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 8m26.94829359s ago: executing program 3 (id=3508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 8m11.655846783s ago: executing program 33 (id=3508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 12.980470873s ago: executing program 6 (id=4678): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 12.324335828s ago: executing program 0 (id=4680): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_open_dev$usbfs(0x0, 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e120, 0x3, 0xfffe}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x200, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.129794198s ago: executing program 2 (id=4682): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)}], 0x2, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xfe0}, 0x10) setpgid(r0, 0x0) setpgid(0x0, r0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) mkdir(&(0x7f0000001640)='./file1\x00', 0x1) 11.077458043s ago: executing program 0 (id=4684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES8], 0x1, 0x5a0c, &(0x7f00000001c0)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 11.022020943s ago: executing program 6 (id=4685): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 9.873902674s ago: executing program 6 (id=4688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "9806d1267c49cd76", "c442e6adcb511ad19648396c5352e18f", "6086c2ca", "b973738a82366fb2"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 9.47670072s ago: executing program 6 (id=4690): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0) 9.417211768s ago: executing program 2 (id=4691): io_setup(0xacf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6163746976655f6c6f67733d342c6163746976655f6c6f67733d342c6a71666d743d766673763100006f896e6c696e655f646174612c757365725f78617474722c636865636b706f696e743d64697361626c652c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c007a9c3781c551aad3da"], 0x21, 0x552d, &(0x7f000000abc0)="$eJzs3M2LG2UYAPBndrv9ti7iwVsHirALTWi2H+itaosf2FKqHjxpNklD2iSzbNJ07cmDR/HgfyIKnjz6N3jw7E08KOJFUDLvrHarBWGzG7f7+8Hkmfedd55532FZeGZCAji0lvNff87iTJyIiMWIOB1R7mfVVrqawgsRcTYiFh7Zsqr/r46jEXEyIs5Mk6ecWXXo8/OTc5d/euuXb747duTUF19/P79VA/P2YkQMNtL+g0GKRTfFu1V/c9Ir4+DSpIrpwOBe1S5SfNBZLzM8aG6Pa5bxYjeNLzbuj6bxTr/ZmsZu707ZvzFMFxxNutt5yhPuNjfLdruzXsbeqChj92Ga19bD9L/t4Wic8rSrfB+V6WM83o6pv7PVSevZuFfG1nBc9ae8RbuzNY2TKlaXi1bRb5fzWN/Nnf7/+i2LeLs3vL+VTzqbo14xzC/XGy/VG1dqjc2i3Rl3LtWag/aVS/lKtz8dVht3moOr3aLo9jv1VjFYzVe6rVat0chXrnXWe81h3mjUL9Yv1C6vVnvn89dvvpf32/nKNL7aG94f9/qj/E6xmaczVvO1+sWXV/NzjfydG7fyW7evX79x690Prr1/85Ubb75WDfrHtPKVtQtra7XGhdpaY3V39+BArf+TatIzXD/sSjbvCQAcPOp/YB72rv7fvB2x9/V/qP9n4kDVv4e9/t+D9cOuqP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6tH5a+fKPcWU7tU1X/M1XXc1U7i4iFiPjjXyzG0R05F6s8S08Yv/TYHL7NoswwvcaxajsZEVer7fdn9/ouAAAAwNPrq4/Pfpaq9fSxPO8JsZ/SQ5uF0x/OKF8WEUvLP84o28L04/kZJSv/vo/E1oyylQ+wjs8oWXrkdmRW2f6TxR3h+CMhS2Hh8TNmtloAAGBudlYC+1uFAAAAsJ8+feKRe/s6D/ZZFtuvMrffBZffvP/7Zd+J1PbqDwAAAA6ubN4TAAAAAPZcWf/7/T8AAAB4uqXf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9m5l9y0gTgOwH8bXOhLRVX3vUp3cIweocsuKw7QS3AEcoVcgDOQXY4QQYTHQSEiD+IxVqLvk+zBlvnNDI/FzEgDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpqlrOLv79/N82Z7NtJ09vAAAAgGPW1XJWv5ik68/N/a/Nre/NdRERZUQcG7sP4sNB5qDJqR55vnrQhsuIOmFXx6g5PkXEr3Rs41vXnwIAAAC8S8PdaTVfTNNoPZ0mfbeK1k74DtOkTfnld6aqi4ioJteZ0spd3o9MYfXvexh/M6XVE1jjTGFpym2YK+1F6r/7ftZufK8oUlE+/f5sfQcAAM5ocFCcdxQCAADAOf3puwF04eOzTxRxt5S5XwocpWJ8EGGxDwAAAN6uou8GAAAAAJ2rx/+n7P8X/ez/Fzf2/wMAAIBXS/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KV1tZyt5otp25zNtp08vQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCW/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB487u//J+YGmeSudfG0vNIsnZqbJ0ae+fG0R/G168BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7od7/8n5gaZ5K508bS8UiydtXYumrsPWgcPRhv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527t83bioOAPizfb7+AMQR0A1BCCQGWOj1Wlq6IQZQxMCfgBSl1xJ65UebgVYVUhY2lLkLghEhJFDY+g8wdUNqpS5l63BDkVhYDtln55ymEhei2Jfk85Ge3/ccx+/7bCnK188JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlEbvTeMk23QmcVzsu/f41krW33+iz9zZeLCYtSyO6kz6YHil+iHqNpcIAAAAR0dS1vchhIfp5lLWx528/k/LY7Ka//vnJnFZzz9Z95d9Wftn7bdfH720NVBnMk520kurw8Hpnam09m+W8+35/zyilV/5/NlLkt+Q+MP1F0dpfj2jb+/efb+dh8fqyBYA+D9OlX0RlL8PZX2/ycQAODJalcK7rP+TTrM5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANRhtB6eKeMohLDYmsaZ+49vrTytv7PxYLFs52/f3qieMztFGkK4tDocnK5xLvPu+o2bV5aHw8G1+oNXQwhNjf5uMf0rH89wcAiNXJ/9Cv4Zj8e7+q7jzee8pyAubva85HMwggZ/KAEAcCilRcvq+ofp5lK2L1oIYfzD9vr/jUocZqz/H31y/l51rGr9369thvOvt3b1i971GzffWr26fHlwefDZ22f67/TPXjh37kIvf1bS88QEAACAvWkXrVr/xws71/9PVuIwY/3/5Xf9r6cj/ZFv1f87TRf9ms4EAADgaHvhtb//ip6yP2q3w1fLa2vX+pPt1uczk20Dqe7asaJV6/9koemsAAAAgDqM1qNt6/8XK3GYcf3/2R9f/rl6ziSEcKJY/z+18vnwYn3TmWt1/Dlx03MEAACgWSeKVl3/T/P3/+OtVx7iEMKbr0/i4t8AzlT/Jx9881N1rKTy/v/Z+qY4l+Lu5HrkfTeEVnfbl39vLDEAAAAOpeNFy4r9P9PNpU9/OflR2/v/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHX7NwAA//8nb0N3") 9.306002446s ago: executing program 0 (id=4692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b6a, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfeff200d, 0x0, 0x0}) 9.086996785s ago: executing program 6 (id=4694): socket$inet6(0xa, 0x11, 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) 8.523800571s ago: executing program 7 (id=4695): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0xf00e3901f2fa3c73, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r0]) 7.257531256s ago: executing program 4 (id=4697): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_open_dev$usbfs(0x0, 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e120, 0x3, 0xfffe}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x200, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.332952891s ago: executing program 1 (id=4699): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000440)=ANY=[@ANYBLOB="636865636b3d72656c617865642c757466382c6f76657272696465726f636b7065726d2c636865636b3d7374726963742c6e6f726f636b2c696f636861727365743d63703836392c636865636b3d7374726963742c626c6f636b3d30783030b0303030303030303030303230302c6d6f64653d3078303030303030303030303030303030342c6d61703d61636f726e2c636865636b3d7374726963742c6f76657272696465726f636b7065726d2c756e686964652c756e686964652c636865636b3d7374726963742c00"], 0x1, 0xa23, &(0x7f0000000e80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) 5.327135331s ago: executing program 2 (id=4700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) 5.009904141s ago: executing program 4 (id=4701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f00000006c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000008c0)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7977ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453a5e3f66a46bb0d1151d677b39ea96b1e0df37938a43869aff5ef6877c00111c7dac90bf1400828b2e8d7480538629ae1c49cdb837a0982effd", 0xf9, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={r5, r4, r4}, &(0x7f0000000780)=""/86, 0x56, &(0x7f0000000400)={&(0x7f00000002c0)={'crc32c\x00'}}) 4.960182168s ago: executing program 7 (id=4702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "9806d1267c49cd76", "c442e6adcb511ad19648396c5352e18f", "6086c2ca", "b973738a82366fb2"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 4.608155904s ago: executing program 1 (id=4703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "aaed7e5ba3da1eda", "a78239a747645802caa73be57ff46b9e95cda20ebe1ccdb4da076c850bd79da3", "1a1c2f6d", "97119af0cb3910e5"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) 3.780752692s ago: executing program 2 (id=4704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000001c0)=""/103, 0x67, 0x0, &(0x7f0000000340)=""/214, 0xd6}}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='fdb_delete\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x4) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) signalfd(r3, &(0x7f0000000240)={[0x2]}, 0x8) tkill(0x0, 0x16) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 3.751795679s ago: executing program 7 (id=4705): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000540)=ANY=[], 0x7, 0x2dd, &(0x7f0000000600)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') 3.731609264s ago: executing program 4 (id=4706): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.65394981s ago: executing program 1 (id=4707): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0044159743df776a5de9392543da7d297b3dea"], 0xf, 0xa02, &(0x7f0000001ec0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ftruncate(r0, 0xc17a) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x4, 0x0) fdatasync(r0) 3.596275077s ago: executing program 6 (id=4708): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x151f3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000080)) 3.325148165s ago: executing program 7 (id=4709): openat$userio(0xffffffffffffff9c, 0x0, 0x80000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x55, 0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") syz_open_procfs(0x0, &(0x7f0000002000)='net/ip_mr_vif\x00') execve(&(0x7f0000001600)='./file1\x00', &(0x7f00000016c0)={[&(0x7f0000001640)='bridge_slave_0\x00']}, &(0x7f0000001840)={[&(0x7f0000001700)='\x00', &(0x7f0000001740)='ext4\x00', 0x0]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xb5) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.233935839s ago: executing program 4 (id=4710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2}, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r3], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 3.117638502s ago: executing program 1 (id=4711): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fallocate(r2, 0xb, 0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a0000000000006111a80000000000180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.610533839s ago: executing program 1 (id=4712): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee01}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x5}, {0x2, 0x1}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x5c, 0x3) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x7, 0xb5, 0x5, 0xf, 0x10001}) 1.579203127s ago: executing program 7 (id=4713): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_open_dev$usbfs(0x0, 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e120, 0x3, 0xfffe}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x200, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.578375618s ago: executing program 4 (id=4714): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4$netrom(r0, 0x0, 0x0, 0x80000) 1.457951655s ago: executing program 2 (id=4715): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000080)={0x28, 0x3, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 1.435153517s ago: executing program 0 (id=4716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) 1.196167189s ago: executing program 0 (id=4717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "9806d1267c49cd76", "c442e6adcb511ad19648396c5352e18f", "6086c2ca", "b973738a82366fb2"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 1.039032805s ago: executing program 1 (id=4718): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) 937.105113ms ago: executing program 2 (id=4719): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 789.602389ms ago: executing program 0 (id=4720): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) alarm(0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 24.775457ms ago: executing program 7 (id=4721): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000540)=ANY=[], 0x7, 0x2dd, &(0x7f0000000600)="$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") setresuid(0x0, 0xee00, 0xee01) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) 0s ago: executing program 4 (id=4722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000240)={[{@clear_cache}, {}, {@compress_force}, {@discard_sync}, {@user_subvol_rm}, {@nossd}, {@notreelog}, {@noflushoncommit}, {@user_subvol_rm}, {@noflushoncommit}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x65) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0xfc2, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x6, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x402, 0x1}}, {0x0, 0x13}}}, 0xa0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000080000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="0000006137c212f2e3df14c0b900f7"]) kernel console output (not intermixed with test programs): ory 'hsr0' with parent 'hsr' already present! [ 1574.707493][T19413] Cannot create hsr debugfs directory [ 1574.758245][T19762] loop2: detected capacity change from 0 to 1024 [ 1575.228470][T19376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1575.321406][T19376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1575.387117][T19376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1575.536565][T19376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1575.664791][T19777] loop2: detected capacity change from 0 to 1024 [ 1575.759828][T19777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.799684][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3976'. [ 1575.972525][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.322972][T19376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.430541][T19376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.469560][ T30] audit: type=1326 audit(1750193854.420:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19797 comm="syz.0.3979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd80fd8e929 code=0x0 [ 1576.493170][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.500348][ T9602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.555012][ T9602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.562233][ T9602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.889873][T19413] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1576.929325][T19413] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1576.963233][T19413] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1576.994038][T19413] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1577.412205][T19413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.480477][T19413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.533199][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.540446][ T7738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.578104][T19810] netlink: 'syz.0.3980': attribute type 1 has an invalid length. [ 1577.589196][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.596382][ T7738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.760804][T19810] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1577.844582][T19815] loop1: detected capacity change from 0 to 256 [ 1577.916028][T19376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.965723][T19815] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 1578.020436][T19413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1579.124352][T19413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.482988][T19376] veth0_vlan: entered promiscuous mode [ 1579.559842][T19376] veth1_vlan: entered promiscuous mode [ 1579.686939][T19825] loop1: detected capacity change from 0 to 32768 [ 1579.703373][T19376] veth0_macvtap: entered promiscuous mode [ 1579.727273][T19825] (syz.1.3984,19825,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1579.771038][T19376] veth1_macvtap: entered promiscuous mode [ 1579.775474][T19825] (syz.1.3984,19825,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1579.845357][T19376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.866482][T19825] JBD2: Ignoring recovery information on journal [ 1579.913922][T19376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.925731][T19376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.938963][T19376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.948074][T19376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.956898][T19376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.074801][T19825] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1580.126914][T19825] (syz.1.3984,19825,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1580.172833][T19849] autofs: Bad value for 'fd' [ 1580.288720][T17722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.331444][T17722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.424413][T19825] (syz.1.3984,19825,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 1580.469892][ T7738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.489302][ T7738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.497545][T19825] (syz.1.3984,19825,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 1580.519981][T19825] (syz.1.3984,19825,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1580.530660][T19852] loop0: detected capacity change from 0 to 512 [ 1580.567618][T19852] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1580.580263][T19413] veth0_vlan: entered promiscuous mode [ 1580.597810][T19825] (syz.1.3984,19825,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1580.610768][T19852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 1580.635848][T19852] System zones: 1-12 [ 1580.639492][T19825] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 1580.656551][T19413] veth1_vlan: entered promiscuous mode [ 1580.673935][T19852] EXT4-fs (loop0): 1 truncate cleaned up [ 1580.698856][ T30] audit: type=1326 audit(1750193858.638:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.2.3991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f411238e929 code=0x0 [ 1580.738855][T19825] (syz.1.3984,19825,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1580.811660][T19852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.876287][T19413] veth0_macvtap: entered promiscuous mode [ 1580.932099][T18581] ocfs2: Unmounting device (7,1) on (node local) [ 1580.945474][T19413] veth1_macvtap: entered promiscuous mode [ 1581.038946][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.053406][T19413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.328277][T19413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.397194][T19413] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.429649][T19413] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.444277][T19413] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.454563][T19413] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.018660][ T9602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.026524][ T9602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.133419][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.169651][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.267411][T19876] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 1582.320116][T19878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3993'. [ 1582.432482][T19878] vlan2: entered allmulticast mode [ 1582.569711][T19876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1584.100959][T19891] netlink: 'syz.4.4000': attribute type 9 has an invalid length. [ 1584.212157][T19895] autofs: Bad value for 'fd' [ 1585.459619][T19894] loop7: detected capacity change from 0 to 131072 [ 1585.505083][T19655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1585.524454][T19655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1585.539033][ T30] audit: type=1326 audit(1750193863.465:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19907 comm="syz.1.4008" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc02dd8e929 code=0x0 [ 1585.568036][T19655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1585.585169][T19894] F2FS-fs (loop7): Test dummy encryption mode enabled [ 1585.598991][T19894] F2FS-fs (loop7): invalid crc value [ 1585.626958][T19655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1585.641719][T19655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1585.729450][T19894] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1585.965889][T14709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.190541][T19910] lo speed is unknown, defaulting to 1000 [ 1587.238249][T19926] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 1587.320738][T19930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1587.353319][T14709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.505927][T19934] loop1: detected capacity change from 0 to 256 [ 1587.535490][T19926] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1587.710295][T14709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.727951][T19936] autofs: Unknown parameter '0x0000000000000000' [ 1587.798515][T19655] Bluetooth: hci0: command tx timeout [ 1588.044288][T14709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.629150][T19946] loop1: detected capacity change from 0 to 1764 [ 1589.162844][T14709] gretap0: left allmulticast mode [ 1589.168025][T14709] gretap0: left promiscuous mode [ 1589.176374][T14709] bridge0: port 4(gretap0) entered disabled state [ 1589.445453][T14709] bond2: left allmulticast mode [ 1589.515185][T14709] bond2: left promiscuous mode [ 1589.567677][T14709] bridge0: port 3(bond2) entered disabled state [ 1589.683681][T14709] bridge_slave_1: left allmulticast mode [ 1589.689387][T14709] bridge_slave_1: left promiscuous mode [ 1589.762955][T14709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.829999][T14709] bridge_slave_0: left allmulticast mode [ 1589.873042][T19655] Bluetooth: hci0: command tx timeout [ 1589.878610][T14709] bridge_slave_0: left promiscuous mode [ 1589.931738][T14709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.380828][T19940] loop2: detected capacity change from 0 to 32768 [ 1590.505357][T19952] loop4: detected capacity change from 0 to 131072 [ 1590.507128][T19940] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1590.515364][T19952] F2FS-fs (loop4): Test dummy encryption mode enabled [ 1590.530668][T19952] F2FS-fs (loop4): invalid crc value [ 1590.651835][T19952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1590.825547][T19940] XFS (loop2): Ending clean mount [ 1590.888839][T19940] XFS (loop2): Quotacheck needed: Please wait. [ 1591.059416][T19940] XFS (loop2): Quotacheck: Done. [ 1591.266263][ T5844] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1591.483135][T14709] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1591.626449][T14709] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1591.953997][T19655] Bluetooth: hci0: command tx timeout [ 1592.612448][T19984] netlink: 'syz.1.4030': attribute type 1 has an invalid length. [ 1592.666967][T19986] autofs: Unknown parameter '0x0000000000000000' [ 1592.676111][T19987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4030'. [ 1594.123817][T19655] Bluetooth: hci0: command tx timeout [ 1596.758734][T14709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.782303][T14709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.804811][T14709] bond0 (unregistering): Released all slaves [ 1598.068977][T14709] bond1 (unregistering): Released all slaves [ 1598.128262][T20022] loop4: detected capacity change from 0 to 32768 [ 1598.156356][T20022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4039 (20022) [ 1598.161678][T20030] autofs: Unknown parameter '0x0000000000000000' [ 1598.219516][T20022] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1598.250235][T20022] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 1598.277143][T20022] BTRFS info (device loop4): disk space caching is enabled [ 1598.284637][T20022] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1598.381747][T14709] bond2 (unregistering): Released all slaves [ 1598.500541][T20022] BTRFS info (device loop4): rebuilding free space tree [ 1598.587683][T20022] BTRFS info (device loop4): disabling free space tree [ 1598.595414][T20022] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1598.617288][T20022] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1598.679710][T14709] bond3 (unregistering): Released all slaves [ 1599.993697][ T7733] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1600.056812][T14709] bond4 (unregistering): Released all slaves [ 1600.108572][T19376] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1600.166069][T19984] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1600.179754][T19988] vlan2: entered allmulticast mode [ 1600.568562][T19910] chnl_net:caif_netlink_parms(): no params data found [ 1600.953858][T20068] loop1: detected capacity change from 0 to 512 [ 1601.416718][T20068] EXT4-fs (loop1): 1 orphan inode deleted [ 1601.447844][ T59] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1601.454126][T20068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.509201][ T59] EXT4-fs error (device loop1): ext4_release_dquot:6967: comm kworker/u8:4: Failed to release dquot type 1 [ 1601.579350][T20068] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.946619][T18581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.032235][T19910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.059928][T19910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.067309][T19910] bridge_slave_0: entered allmulticast mode [ 1602.092833][T19910] bridge_slave_0: entered promiscuous mode [ 1602.140627][T19910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.147783][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.184226][T19910] bridge_slave_1: entered allmulticast mode [ 1602.195423][T20087] autofs: Unknown parameter '0x0000000000000000' [ 1602.207836][T19910] bridge_slave_1: entered promiscuous mode [ 1602.581508][T14709] hsr_slave_0: left promiscuous mode [ 1602.605675][T14709] hsr_slave_1: left promiscuous mode [ 1602.643027][T14709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.674132][T14709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.680448][T20093] loop4: detected capacity change from 0 to 512 [ 1602.706154][T14709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.714058][T20093] EXT4-fs: quotafile must be on filesystem root [ 1603.060316][T14709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1603.812601][T14709] veth1_macvtap: left promiscuous mode [ 1603.820104][T14709] veth0_macvtap: left promiscuous mode [ 1603.825911][T14709] veth1_vlan: left promiscuous mode [ 1603.831492][T14709] veth0_vlan: left promiscuous mode [ 1604.555968][T20089] loop1: detected capacity change from 0 to 32768 [ 1604.562235][T20106] netlink: 'syz.7.4061': attribute type 1 has an invalid length. [ 1604.625502][T20089] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1604.644943][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4061'. [ 1604.678086][T20089] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1606.002558][T20124] loop2: detected capacity change from 0 to 256 [ 1606.020186][T20124] exfat: Deprecated parameter 'namecase' [ 1606.045908][T20124] exfat: Deprecated parameter 'utf8' [ 1606.137325][T20124] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1606.166656][T18581] ocfs2: Unmounting device (7,1) on (node local) [ 1606.381821][ T30] audit: type=1326 audit(1750193884.315:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20127 comm="syz.6.4068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70dbf8e929 code=0x0 [ 1606.635773][T20131] autofs: Unknown parameter '0x0000000000000000' [ 1606.775368][T20108] loop4: detected capacity change from 0 to 40427 [ 1606.792706][T20108] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1606.808328][T20108] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1606.830643][T20108] F2FS-fs (loop4): invalid crc value [ 1608.370954][T20153] 9pnet_fd: Insufficient options for proto=fd [ 1609.895093][T19910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.942008][T19910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.021588][T20114] vlan2: entered allmulticast mode [ 1610.077774][T20114] veth1: entered allmulticast mode [ 1610.169994][T20146] veth1_to_bond: entered allmulticast mode [ 1610.176746][T20146] veth1_to_bond: left allmulticast mode [ 1610.398546][T19910] team0: Port device team_slave_0 added [ 1610.441662][T19910] team0: Port device team_slave_1 added [ 1610.539009][T20170] loop2: detected capacity change from 0 to 1024 [ 1610.598393][T20170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.633367][T20170] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1610.639583][T19910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.692720][T19910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.838053][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1610.871078][T19910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.888549][T19910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.896181][T19910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.922188][T19910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.953439][T20175] autofs: Unknown parameter '0x0000000000000000' [ 1611.080697][T20179] loop2: detected capacity change from 0 to 1024 [ 1612.361455][T19910] hsr_slave_0: entered promiscuous mode [ 1612.401911][T19910] hsr_slave_1: entered promiscuous mode [ 1612.416421][T20188] 9pnet_fd: Insufficient options for proto=fd [ 1612.504887][T20190] loop4: detected capacity change from 0 to 256 [ 1612.669657][T20190] FAT-fs (loop4): Directory bread(block 64) failed [ 1612.713467][T20190] FAT-fs (loop4): Directory bread(block 65) failed [ 1612.734643][T20190] FAT-fs (loop4): Directory bread(block 66) failed [ 1612.741422][T20190] FAT-fs (loop4): Directory bread(block 67) failed [ 1612.760185][T20190] FAT-fs (loop4): Directory bread(block 68) failed [ 1612.798144][T20190] FAT-fs (loop4): Directory bread(block 69) failed [ 1612.821370][T20168] loop1: detected capacity change from 0 to 32768 [ 1612.828023][T20190] FAT-fs (loop4): Directory bread(block 70) failed [ 1612.828068][T20190] FAT-fs (loop4): Directory bread(block 71) failed [ 1612.828185][T20190] FAT-fs (loop4): Directory bread(block 72) failed [ 1612.905336][T20190] FAT-fs (loop4): Directory bread(block 73) failed [ 1612.923631][T20168] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1612.963807][T20168] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1616.917852][T19655] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1617.188519][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.194870][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.221378][T18581] ocfs2: Unmounting device (7,1) on (node local) [ 1617.223569][T20209] netlink: 'syz.4.4092': attribute type 1 has an invalid length. [ 1617.491576][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4092'. [ 1617.751794][T20209] vlan2: entered allmulticast mode [ 1617.793307][T20209] veth1: entered allmulticast mode [ 1618.337051][T19910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1618.635243][T19910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1618.759176][T20224] overlayfs: empty lowerdir [ 1622.053242][T19910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1622.316799][T19910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1622.375724][T20228] loop1: detected capacity change from 0 to 4096 [ 1623.453051][T19910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.474740][T19910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.547731][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.555048][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1623.618994][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.626228][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.733263][T19910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1626.996165][T19910] veth0_vlan: entered promiscuous mode [ 1627.072250][T19910] veth1_vlan: entered promiscuous mode [ 1627.274138][T19910] veth0_macvtap: entered promiscuous mode [ 1627.314103][T19910] veth1_macvtap: entered promiscuous mode [ 1627.377912][T20255] loop1: detected capacity change from 0 to 32768 [ 1627.474704][T20255] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1627.523300][T20255] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1629.099808][T19910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.168120][T19910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.257540][T19910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.283710][T19910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.301548][T19910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.342558][T19910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.455118][T20292] loop4: detected capacity change from 0 to 512 [ 1629.464514][T18581] ocfs2: Unmounting device (7,1) on (node local) [ 1629.481089][T20292] EXT4-fs: Ignoring removed bh option [ 1629.528066][T20292] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1629.584029][T20292] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1629.607082][T20292] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1629.622293][T20292] EXT4-fs error (device loop4): ext4_quota_enable:7119: comm syz.4.4115: Bad quota inum: 4294967291, type: 0 [ 1629.643729][T20292] EXT4-fs (loop4): Remounting filesystem read-only [ 1629.660860][T20292] EXT4-fs warning (device loop4): ext4_enable_quotas:7164: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 1629.747528][T20292] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1629.783236][T20292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1630.772513][T14709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.823540][T14709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.885437][T19376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.025242][ T7733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.033979][ T7733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.035449][T20317] tipc: Started in network mode [ 1632.043652][T20317] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1632.133677][T20317] tipc: Enabled bearer , priority 10 [ 1632.673348][T20313] netlink: 'syz.1.4116': attribute type 1 has an invalid length. [ 1632.694110][T20320] loop0: detected capacity change from 0 to 512 [ 1632.921457][T20324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1633.002087][T20320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.112110][T20320] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.137395][ T5946] tipc: Node number set to 1 [ 1633.221828][T20313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1633.293606][T20325] vlan2: entered allmulticast mode [ 1633.425233][T20325] bond2: (slave vlan2): making interface the new active one [ 1633.429142][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1633.486929][T20325] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1633.789786][T18009] bridge0: port 3(syz_tun) entered disabled state [ 1633.909043][T18009] syz_tun (unregistering): left allmulticast mode [ 1633.916297][T18009] syz_tun (unregistering): left promiscuous mode [ 1633.922907][T18009] bridge0: port 3(syz_tun) entered disabled state [ 1634.211703][T20343] loop1: detected capacity change from 0 to 64 [ 1634.429743][T20345] Cannot find add_set index 0 as target [ 1637.456951][T19377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1637.471921][T19377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1637.495106][T19377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1637.505103][T19377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1637.514249][T19377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1637.561720][ T7723] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.638460][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1637.638460][ T7733] loop1: rw=1, sector=385, nr_sectors = 1 limit=64 [ 1637.699594][ T7733] buffer_io_error: 4 callbacks suppressed [ 1637.699617][ T7733] Buffer I/O error on dev loop1, logical block 385, lost async page write [ 1637.730993][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1637.730993][ T7733] loop1: rw=1, sector=386, nr_sectors = 1 limit=64 [ 1637.783789][ T7733] Buffer I/O error on dev loop1, logical block 386, lost async page write [ 1637.785983][T20355] lo speed is unknown, defaulting to 1000 [ 1637.829724][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1637.829724][ T7733] loop1: rw=1, sector=387, nr_sectors = 1 limit=64 [ 1637.875618][ T7733] Buffer I/O error on dev loop1, logical block 387, lost async page write [ 1637.889661][ T7723] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.901865][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1637.901865][ T7733] loop1: rw=1, sector=388, nr_sectors = 1 limit=64 [ 1637.928857][ T7733] Buffer I/O error on dev loop1, logical block 388, lost async page write [ 1637.938516][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1637.938516][ T7733] loop1: rw=1, sector=389, nr_sectors = 1 limit=64 [ 1637.995942][ T7733] Buffer I/O error on dev loop1, logical block 389, lost async page write [ 1638.017087][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1638.017087][ T7733] loop1: rw=1, sector=390, nr_sectors = 1 limit=64 [ 1638.066520][ T7733] Buffer I/O error on dev loop1, logical block 390, lost async page write [ 1638.094397][ T7723] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.096709][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1638.096709][ T7733] loop1: rw=1, sector=395, nr_sectors = 1 limit=64 [ 1638.169467][ T7733] Buffer I/O error on dev loop1, logical block 395, lost async page write [ 1638.196412][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1638.196412][ T7733] loop1: rw=1, sector=396, nr_sectors = 1 limit=64 [ 1638.247210][ T7733] Buffer I/O error on dev loop1, logical block 396, lost async page write [ 1638.268469][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1638.268469][ T7733] loop1: rw=1, sector=397, nr_sectors = 1 limit=64 [ 1638.295006][ T7723] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.302746][ T7733] Buffer I/O error on dev loop1, logical block 397, lost async page write [ 1638.341603][ T7733] kworker/u8:18: attempt to access beyond end of device [ 1638.341603][ T7733] loop1: rw=1, sector=398, nr_sectors = 1 limit=64 [ 1638.365224][ T7733] Buffer I/O error on dev loop1, logical block 398, lost async page write [ 1639.585768][T19655] Bluetooth: hci3: command tx timeout [ 1640.152625][T20376] loop2: detected capacity change from 0 to 40427 [ 1640.180017][ T7723] bridge_slave_1: left allmulticast mode [ 1640.517796][ T7723] bridge_slave_1: left promiscuous mode [ 1640.523661][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.532218][T20376] F2FS-fs (loop2): build fault injection rate: 690 [ 1640.543092][T20376] F2FS-fs (loop2): Image doesn't support compression [ 1640.549921][T20376] F2FS-fs (loop2): Image doesn't support compression [ 1640.556889][T20376] F2FS-fs (loop2): build fault injection type: 0x4 [ 1640.570444][T20376] F2FS-fs (loop2): invalid crc value [ 1640.702440][T20376] F2FS-fs (loop2): Start checkpoint disabled! [ 1640.749786][T20376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1640.805945][T20383] netlink: 'syz.7.4139': attribute type 1 has an invalid length. [ 1640.829777][ T7723] bridge_slave_0: left allmulticast mode [ 1640.859002][ T7723] bridge_slave_0: left promiscuous mode [ 1640.884295][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.893714][T20385] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4139'. [ 1641.658421][T19655] Bluetooth: hci3: command tx timeout [ 1641.926173][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1641.926224][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1641.926243][ T49] Workqueue: writeback wb_workfn (flush-7:2) [ 1641.926298][ T49] Call Trace: [ 1641.926307][ T49] [ 1641.926318][ T49] dump_stack_lvl+0x16c/0x1f0 [ 1641.926367][ T49] f2fs_handle_critical_error+0x621/0x9f0 [ 1641.926406][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.926440][ T49] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1641.926476][ T49] f2fs_write_end_io+0x785/0xc20 [ 1641.926515][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1641.926557][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.926599][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1641.926634][ T49] bio_endio+0x70d/0x850 [ 1641.926665][ T49] submit_bio_noacct+0x56d/0x1eb0 [ 1641.926710][ T49] __submit_merged_bio+0x33c/0x770 [ 1641.926751][ T49] __submit_merged_write_cond+0x319/0x3f0 [ 1641.926798][ T49] f2fs_write_cache_pages+0x2067/0x2570 [ 1641.926863][ T49] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1641.926912][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.926947][ T49] ? __lock_acquire+0x622/0x1c90 [ 1641.926995][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.927028][ T49] ? __lock_acquire+0xb8a/0x1c90 [ 1641.927085][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.927118][ T49] ? __lock_acquire+0xb8a/0x1c90 [ 1641.927177][ T49] ? lock_acquire+0x179/0x350 [ 1641.927223][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.927256][ T49] ? find_held_lock+0x2b/0x80 [ 1641.927327][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.927367][ T49] f2fs_write_data_pages+0x4ad/0xd90 [ 1641.927416][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1641.927469][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.927502][ T49] ? __lock_acquire+0xb8a/0x1c90 [ 1641.927546][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1641.927591][ T49] do_writepages+0x27a/0x600 [ 1641.927640][ T49] ? __pfx_do_writepages+0x10/0x10 [ 1641.927682][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.927715][ T49] ? reacquire_held_locks+0xcd/0x1f0 [ 1641.927758][ T49] ? writeback_sb_inodes+0x3a4/0xf90 [ 1641.927807][ T49] __writeback_single_inode+0x160/0xfb0 [ 1641.927855][ T49] ? __pfx___writeback_single_inode+0x10/0x10 [ 1641.927899][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.927932][ T49] ? do_raw_spin_unlock+0x172/0x230 [ 1641.927964][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928003][ T49] writeback_sb_inodes+0x601/0xf90 [ 1641.928065][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1641.928163][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928199][ T49] ? rcu_is_watching+0x12/0xc0 [ 1641.928233][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928267][ T49] ? queue_io+0x3f6/0x520 [ 1641.928310][ T49] wb_writeback+0x419/0xb70 [ 1641.928363][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 1641.928421][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928477][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928511][ T49] ? mark_held_locks+0x49/0x80 [ 1641.928561][ T49] wb_workfn+0x14d/0xbe0 [ 1641.928610][ T49] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1641.928655][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 1641.928704][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928741][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928779][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928812][ T49] ? rcu_is_watching+0x12/0xc0 [ 1641.928852][ T49] process_one_work+0x9cf/0x1b70 [ 1641.928897][ T49] ? __pfx_process_one_work+0x10/0x10 [ 1641.928926][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.928968][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.929002][ T49] ? assign_work+0x1a0/0x250 [ 1641.929051][ T49] worker_thread+0x6c8/0xf10 [ 1641.929097][ T49] ? __pfx_worker_thread+0x10/0x10 [ 1641.929126][ T49] kthread+0x3c5/0x780 [ 1641.929152][ T49] ? __pfx_kthread+0x10/0x10 [ 1641.929179][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1641.929216][ T49] ? rcu_is_watching+0x12/0xc0 [ 1641.929251][ T49] ? __pfx_kthread+0x10/0x10 [ 1641.929278][ T49] ret_from_fork+0x5d7/0x6f0 [ 1641.929318][ T49] ? __pfx_kthread+0x10/0x10 [ 1641.929344][ T49] ret_from_fork_asm+0x1a/0x30 [ 1641.929392][ T49] [ 1642.537945][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1643.743829][T19655] Bluetooth: hci3: command tx timeout [ 1643.902665][T20402] Bluetooth: MGMT ver 1.23 [ 1645.209318][T20414] loop2: detected capacity change from 0 to 256 [ 1645.225204][T20414] exfat: Deprecated parameter 'namecase' [ 1645.286576][T20414] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1645.834381][T19655] Bluetooth: hci3: command tx timeout [ 1646.506966][ T7723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.801106][ T7723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1646.820431][ T7723] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1646.830345][T20425] loop4: detected capacity change from 0 to 1024 [ 1647.194805][ T7723] bond0 (unregistering): Released all slaves [ 1648.175080][ T7723] bond1 (unregistering): (slave vlan2): Releasing backup interface [ 1648.202272][ T7723] bond1 (unregistering): Released all slaves [ 1649.352413][T20441] loop4: detected capacity change from 0 to 1024 [ 1649.398603][ T7723] bond2 (unregistering): Released all slaves [ 1649.525119][ T49] hfsplus: bad catalog file entry [ 1649.626710][T20443] loop4: detected capacity change from 0 to 64 [ 1649.640153][T20443] hfs: unable to locate alternate MDB [ 1649.654403][T20443] hfs: continuing without an alternate MDB [ 1649.986441][ T7723] bond3 (unregistering): Released all slaves [ 1652.905286][ T7723] bond4 (unregistering): Released all slaves [ 1652.972415][T20383] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1652.982740][T20387] vlan2: entered allmulticast mode [ 1653.184422][T20355] chnl_net:caif_netlink_parms(): no params data found [ 1653.398116][T20465] loop2: detected capacity change from 0 to 256 [ 1653.405618][T20465] exfat: Deprecated parameter 'namecase' [ 1653.462099][T20465] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1653.846092][T20463] block nbd4: shutting down sockets [ 1655.845790][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4164'. [ 1656.262884][T20355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.278970][T20355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.343063][T20355] bridge_slave_0: entered allmulticast mode [ 1656.351817][T20355] bridge_slave_0: entered promiscuous mode [ 1656.360717][T20355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.367919][T20355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.375121][T20355] bridge_slave_1: entered allmulticast mode [ 1656.383427][T20355] bridge_slave_1: entered promiscuous mode [ 1656.597951][ T7723] hsr_slave_0: left promiscuous mode [ 1656.618935][T20499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1657.582294][ T7723] hsr_slave_1: left promiscuous mode [ 1657.610104][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.903180][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.232116][T20509] netlink: 'syz.0.4172': attribute type 1 has an invalid length. [ 1658.275222][T20511] loop2: detected capacity change from 0 to 256 [ 1658.288443][T20511] exfat: Deprecated parameter 'namecase' [ 1658.309667][T20512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4172'. [ 1658.320253][T20511] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1658.466981][ T7723] veth1_macvtap: left promiscuous mode [ 1658.494646][ T7723] veth0_macvtap: left promiscuous mode [ 1658.521629][ T7723] veth1_vlan: left promiscuous mode [ 1658.536044][ T7723] veth0_vlan: left promiscuous mode [ 1659.960749][ T7723] team0 (unregistering): Port device team_slave_1 removed [ 1660.793848][T19655] Bluetooth: hci1: command 0x0406 tx timeout [ 1660.921505][ T7723] team0 (unregistering): Port device team_slave_0 removed [ 1661.563992][T20355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.677284][T20513] vlan2: entered allmulticast mode [ 1661.685865][T20513] veth1: entered allmulticast mode [ 1661.740065][T20355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1662.022717][T20539] loop1: detected capacity change from 0 to 512 [ 1662.075795][T20539] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1662.136630][T20543] loop2: detected capacity change from 0 to 1024 [ 1662.157910][T20355] team0: Port device team_slave_0 added [ 1662.180442][T20539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz.1.4181: bg 0: block 104: invalid block bitmap [ 1662.208146][T20539] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1662.371741][T20539] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.4181: invalid indirect mapped block 1 (level 1) [ 1662.513674][T20355] team0: Port device team_slave_1 added [ 1662.698207][T20539] EXT4-fs (loop1): 1 truncate cleaned up [ 1662.914618][T20539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1663.002684][T14709] hfsplus: bad catalog file entry [ 1663.232921][T18581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.248285][T20553] loop4: detected capacity change from 0 to 1024 [ 1663.263234][T20355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.312594][T20355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.380603][T20355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.412961][T20355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.421598][T20355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.473314][T20355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.668210][T20555] loop2: detected capacity change from 0 to 4096 [ 1664.022313][T20561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1665.350260][T19655] Bluetooth: hci4: command 0x0406 tx timeout [ 1665.730339][T20355] hsr_slave_0: entered promiscuous mode [ 1665.811772][T20355] hsr_slave_1: entered promiscuous mode [ 1665.818173][T20355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1665.858408][T20355] Cannot create hsr debugfs directory [ 1667.120530][T20588] loop4: detected capacity change from 0 to 1024 [ 1667.159014][T20586] loop0: detected capacity change from 0 to 1024 [ 1667.190014][T20586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.215803][T20592] netlink: 'syz.2.4195': attribute type 1 has an invalid length. [ 1667.318381][T20597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4195'. [ 1667.887046][T20592] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1667.943766][ T7735] hfsplus: bad catalog file entry [ 1668.017601][T20606] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4199'. [ 1668.036713][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.276899][T20610] loop1: detected capacity change from 0 to 256 [ 1668.566544][T20616] loop7: detected capacity change from 0 to 4096 [ 1668.619619][T20616] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1670.364095][T20355] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1670.505514][T20355] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1670.618927][T20355] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1670.668665][T20355] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1670.689829][T20635] loop2: detected capacity change from 0 to 1024 [ 1671.017909][ T7735] hfsplus: bad catalog file entry [ 1671.338720][T20650] netlink: 'syz.7.4214': attribute type 1 has an invalid length. [ 1671.465950][T20652] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4214'. [ 1671.760448][T20650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1671.869990][T20658] vlan2: entered allmulticast mode [ 1671.890931][T20658] bond1: (slave vlan2): making interface the new active one [ 1671.915183][T20658] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1672.363190][T20355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.487000][T20355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.566819][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.574070][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.656422][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.663659][ T7738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.478971][T20355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1674.489529][T20355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1674.509902][T20687] loop7: detected capacity change from 0 to 256 [ 1674.610478][T20687] exfat: Deprecated parameter 'namecase' [ 1674.676059][T20687] exfat: Deprecated parameter 'utf8' [ 1674.701134][T20691] loop1: detected capacity change from 0 to 512 [ 1674.729300][T20687] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1674.844405][T20696] loop0: detected capacity change from 0 to 1024 [ 1674.888987][T20691] EXT4-fs (loop1): 1 orphan inode deleted [ 1674.907566][ T9605] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1674.923886][T20691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1674.969343][T20691] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1674.990591][ T9605] EXT4-fs error (device loop1): ext4_release_dquot:6967: comm kworker/u8:25: Failed to release dquot type 1 [ 1675.137185][T18581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.423837][T20355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1675.455103][T20706] loop1: detected capacity change from 0 to 256 [ 1675.492010][T20706] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1675.519758][T20706] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1675.632313][T20706] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1675.759639][T20706] netlink: 'syz.1.4229': attribute type 8 has an invalid length. [ 1677.897235][T20738] loop1: detected capacity change from 0 to 128 [ 1677.912103][T20738] Invalid source name [ 1677.916176][T20738] UBIFS error (pid: 20738): cannot open "/dev/loop1", error -22 [ 1678.726914][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.740570][T20355] veth0_vlan: entered promiscuous mode [ 1678.756068][T20355] veth1_vlan: entered promiscuous mode [ 1678.787000][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.899590][T20355] veth0_macvtap: entered promiscuous mode [ 1679.108686][T20743] loop1: detected capacity change from 0 to 1024 [ 1679.207186][T20745] fuse: Bad value for 'fd' [ 1680.032570][T20355] veth1_macvtap: entered promiscuous mode [ 1680.034422][T20747] loop2: detected capacity change from 0 to 1024 [ 1680.046256][T20747] EXT4-fs: Ignoring removed bh option [ 1680.077651][T20747] ext4: Unknown parameter 'seclabel' [ 1680.354329][T20355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.518465][T20355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.585365][T20355] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.629208][T20355] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.662930][T20355] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.692467][T20355] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.424667][ T7738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.463366][ T7738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.631493][ T7733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.664277][ T7733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.347526][T20776] loop0: detected capacity change from 0 to 2048 [ 1683.939422][T20784] fuse: Bad value for 'fd' [ 1685.219541][T20787] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1688.001076][ T9605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.525309][T20812] loop6: detected capacity change from 0 to 764 [ 1688.582389][T20812] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1689.011481][T20814] loop7: detected capacity change from 0 to 64 [ 1689.082183][T20814] hfs: unable to locate alternate MDB [ 1689.118019][T20814] hfs: continuing without an alternate MDB [ 1689.221726][T19655] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1689.236600][T19655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1689.244508][T19655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1689.252695][T19655] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1689.271360][T19655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1689.280063][T20818] netlink: 'syz.0.4263': attribute type 1 has an invalid length. [ 1689.345072][ T9605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.363754][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4263'. [ 1689.471105][T20821] loop4: detected capacity change from 0 to 1024 [ 1689.511301][T20818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1689.543828][T20821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1689.752936][T20822] vlan2: entered allmulticast mode [ 1689.867924][T20822] bond1: (slave vlan2): making interface the new active one [ 1689.901746][T20822] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1690.274020][T20828] loop6: detected capacity change from 0 to 4096 [ 1691.583798][T19655] Bluetooth: hci5: command tx timeout [ 1691.682337][T20828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1691.754227][ T9605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.829724][T19376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.936599][T20355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.982660][T20816] lo speed is unknown, defaulting to 1000 [ 1692.061268][ T9605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.606122][T19655] Bluetooth: hci5: command tx timeout [ 1694.139732][T20862] loop4: detected capacity change from 0 to 4096 [ 1694.589663][ T9605] bridge_slave_1: left allmulticast mode [ 1694.603006][ T9605] bridge_slave_1: left promiscuous mode [ 1694.615519][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.650385][T20872] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1695.643179][ T9605] bridge_slave_0: left allmulticast mode [ 1695.683473][ T9605] bridge_slave_0: left promiscuous mode [ 1695.690304][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.695614][T19655] Bluetooth: hci5: command tx timeout [ 1696.607927][T19655] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1696.623457][T19655] CPU: 1 UID: 0 PID: 19655 Comm: kworker/u9:3 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1696.623509][T19655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1696.623534][T19655] Workqueue: hci2 hci_rx_work [ 1696.623573][T19655] Call Trace: [ 1696.623585][T19655] [ 1696.623599][T19655] dump_stack_lvl+0x16c/0x1f0 [ 1696.623663][T19655] sysfs_warn_dup+0x7f/0xa0 [ 1696.623710][T19655] sysfs_create_dir_ns+0x24b/0x2b0 [ 1696.623753][T19655] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1696.623803][T19655] ? find_held_lock+0x2b/0x80 [ 1696.623858][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.623904][T19655] ? do_raw_spin_unlock+0x172/0x230 [ 1696.623949][T19655] kobject_add_internal+0x2c4/0x9b0 [ 1696.624007][T19655] kobject_add+0x16e/0x240 [ 1696.624047][T19655] ? __pfx_kobject_add+0x10/0x10 [ 1696.624095][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.624141][T19655] ? kobject_put+0xab/0x5a0 [ 1696.624181][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.624237][T19655] device_add+0x288/0x1a70 [ 1696.624276][T19655] ? __pfx_dev_set_name+0x10/0x10 [ 1696.624321][T19655] ? __pfx_device_add+0x10/0x10 [ 1696.624360][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.624409][T19655] ? mgmt_send_event_skb+0x2fb/0x460 [ 1696.624485][T19655] hci_conn_add_sysfs+0x17e/0x230 [ 1696.624530][T19655] le_conn_complete_evt+0x1075/0x1d70 [ 1696.624606][T19655] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1696.624688][T19655] hci_le_conn_complete_evt+0x23c/0x370 [ 1696.624762][T19655] hci_le_meta_evt+0x357/0x5e0 [ 1696.624800][T19655] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1696.624871][T19655] hci_event_packet+0x685/0x11c0 [ 1696.624933][T19655] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1696.624979][T19655] ? __pfx_hci_event_packet+0x10/0x10 [ 1696.625051][T19655] ? kcov_remote_start+0x3d9/0x6d0 [ 1696.625105][T19655] hci_rx_work+0x2c5/0x16b0 [ 1696.625156][T19655] process_one_work+0x9cf/0x1b70 [ 1696.625215][T19655] ? __pfx_process_one_work+0x10/0x10 [ 1696.625254][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.625311][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.625357][T19655] ? assign_work+0x1a0/0x250 [ 1696.625424][T19655] worker_thread+0x6c8/0xf10 [ 1696.625473][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.625521][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.625566][T19655] ? __kthread_parkme+0x19e/0x250 [ 1696.625618][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.625667][T19655] ? __pfx_worker_thread+0x10/0x10 [ 1696.625706][T19655] kthread+0x3c5/0x780 [ 1696.625741][T19655] ? __pfx_kthread+0x10/0x10 [ 1696.625778][T19655] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1696.625823][T19655] ? rcu_is_watching+0x12/0xc0 [ 1696.625871][T19655] ? __pfx_kthread+0x10/0x10 [ 1696.625907][T19655] ret_from_fork+0x5d7/0x6f0 [ 1696.625962][T19655] ? __pfx_kthread+0x10/0x10 [ 1696.626001][T19655] ret_from_fork_asm+0x1a/0x30 [ 1696.626064][T19655] [ 1697.052103][T19655] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1697.066324][T19655] Bluetooth: hci2: failed to register connection device [ 1697.766627][T19655] Bluetooth: hci5: command tx timeout [ 1697.977020][T20898] loop7: detected capacity change from 0 to 1024 [ 1699.275870][T20909] loop6: detected capacity change from 0 to 40427 [ 1699.574200][T20909] F2FS-fs (loop6): invalid crc value [ 1699.583722][T20909] F2FS-fs (loop6): Wrong cp_pack_start_sum: 1 [ 1699.590701][T20909] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1702.158231][ T9605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.208178][ T9605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.263481][ T9605] bond0 (unregistering): Released all slaves [ 1702.434408][T20919] loop1: detected capacity change from 0 to 32768 [ 1702.452557][T20919] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4290 (20919) [ 1702.512711][T20919] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1702.558507][T20919] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 1702.604653][T20919] BTRFS info (device loop1): using free-space-tree [ 1702.664078][ T9605] bond1 (unregistering): Released all slaves [ 1702.988002][T18581] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1703.093719][ T9605] bond2 (unregistering): Released all slaves [ 1703.707461][ T9605] bond3 (unregistering): Released all slaves [ 1703.862982][T20970] loop4: detected capacity change from 0 to 2048 [ 1703.870115][T20970] nilfs2: Unknown parameter 'rcnHwC" -8/' [ 1704.641857][ T9605] bond4 (unregistering): Released all slaves [ 1704.807873][T20977] loop1: detected capacity change from 0 to 512 [ 1704.827323][T20977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1704.870588][T20977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 1704.879627][T20977] System zones: 1-12 [ 1704.920682][T20977] EXT4-fs (loop1): 1 truncate cleaned up [ 1704.924058][T20980] loop0: detected capacity change from 0 to 512 [ 1704.930691][T20977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1704.973784][T20980] EXT4-fs (loop0): 1 orphan inode deleted [ 1705.003191][T20980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1705.020103][ T13] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1705.020341][ T9605] bond5 (unregistering): Released all slaves [ 1705.037656][ T13] EXT4-fs error (device loop0): ext4_release_dquot:6967: comm kworker/u8:1: Failed to release dquot type 1 [ 1705.049785][T20980] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.119267][T18581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.174516][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.335309][T20988] loop0: detected capacity change from 0 to 2048 [ 1705.385902][ T9605] bond6 (unregistering): Released all slaves [ 1705.401152][T20991] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1705.735832][T20995] overlayfs: failed to resolve './file0': -2 [ 1705.744174][ T9605] bond7 (unregistering): Released all slaves [ 1706.674868][ T9605] tipc: Disabling bearer [ 1706.801371][ T9605] tipc: Left network mode [ 1706.952119][T21002] loop1: detected capacity change from 0 to 1024 [ 1707.354200][T20816] chnl_net:caif_netlink_parms(): no params data found [ 1708.304625][T21017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4317'. [ 1709.361003][ T9605] hsr_slave_0: left promiscuous mode [ 1709.361183][T21027] loop6: detected capacity change from 0 to 512 [ 1709.393854][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4323'. [ 1709.430390][ T9605] hsr_slave_1: left promiscuous mode [ 1709.437211][T21027] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1709.458414][ T9605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1709.506185][T21027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 1709.524751][ T9605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1709.542818][T21027] System zones: 1-12 [ 1709.549801][T21027] EXT4-fs (loop6): 1 truncate cleaned up [ 1709.566931][ T9605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1709.625187][ T9605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.642050][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054ef7c00: rx timeout, send abort [ 1709.673406][T21027] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1709.732421][ T9605] veth1_macvtap: left promiscuous mode [ 1709.750116][ T9605] veth0_macvtap: left promiscuous mode [ 1709.762761][ T9605] veth1_vlan: left promiscuous mode [ 1709.774930][ T9605] veth0_vlan: left promiscuous mode [ 1709.998318][T20355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.143303][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880549c6c00: rx timeout, send abort [ 1710.152944][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054ef7c00: abort rx timeout. Force session deactivation [ 1710.520181][T21025] loop7: detected capacity change from 0 to 32768 [ 1710.536571][T21025] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4321 (21025) [ 1710.602045][T21025] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1710.644180][T21025] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 1710.653144][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880549c6c00: abort rx timeout. Force session deactivation [ 1710.669800][T21025] BTRFS info (device loop7): using free-space-tree [ 1711.093934][T19413] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1711.463248][T19377] Bluetooth: hci0: command 0x0406 tx timeout [ 1712.400819][T21068] loop7: detected capacity change from 0 to 1024 [ 1712.420093][ T9605] team0 (unregistering): Port device team_slave_1 removed [ 1713.194274][ T9605] team0 (unregistering): Port device team_slave_0 removed [ 1715.722250][T19655] Bluetooth: hci4: unexpected event for opcode 0xffff [ 1715.954941][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4338'. [ 1715.964087][T21091] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4338'. [ 1716.589027][T21097] loop7: detected capacity change from 0 to 512 [ 1716.694470][T21097] EXT4-fs (loop7): 1 orphan inode deleted [ 1716.703553][T21097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.725541][T21097] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1716.727206][ T7723] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1716.746344][ T7723] EXT4-fs error (device loop7): ext4_release_dquot:6967: comm kworker/u8:14: Failed to release dquot type 1 [ 1716.858216][T19413] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.958324][T15422] lo speed is unknown, defaulting to 1000 [ 1716.964942][T15422] syz2: Port: 1 Link DOWN [ 1717.055888][T21095] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4340'. [ 1717.066402][T21095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1717.389556][T21103] loop7: detected capacity change from 0 to 32768 [ 1717.414777][T21103] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1717.473545][T20816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.515122][T20816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.687329][T21103] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1718.283730][T20816] bridge_slave_0: entered allmulticast mode [ 1718.661024][T20816] bridge_slave_0: entered promiscuous mode [ 1719.009969][T20816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.020101][T20816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.031781][T20816] bridge_slave_1: entered allmulticast mode [ 1719.040036][T20816] bridge_slave_1: entered promiscuous mode [ 1719.811815][T21107] loop1: detected capacity change from 0 to 4096 [ 1720.771986][T21107] ntfs3(loop1): Failed to read $AttrDef (-4). [ 1720.844152][T20816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.314530][T21136] sd 0:0:1:0: PR command failed: 1026 [ 1721.320311][T21136] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1721.327481][T21136] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1721.906243][T20816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.973126][T19413] ocfs2: Unmounting device (7,7) on (node local) [ 1723.174511][T20816] team0: Port device team_slave_0 added [ 1723.284512][T20816] team0: Port device team_slave_1 added [ 1723.850223][T20816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.575683][T20816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.610684][T20816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.639930][T20816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.646952][T20816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.702405][T21162] loop4: detected capacity change from 0 to 1024 [ 1724.717091][T20816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.758024][T21162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1726.154915][T19376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.258035][T20816] hsr_slave_0: entered promiscuous mode [ 1726.282030][T20816] hsr_slave_1: entered promiscuous mode [ 1726.289114][T20816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1726.357905][T20816] Cannot create hsr debugfs directory [ 1726.374640][T21183] loop6: detected capacity change from 0 to 256 [ 1726.421778][T21183] exfat: Deprecated parameter 'namecase' [ 1726.644305][T21183] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1726.732748][T21180] loop0: detected capacity change from 0 to 4096 [ 1728.705688][T21193] loop4: detected capacity change from 0 to 32768 [ 1728.889251][T21193] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1728.977323][T21193] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1731.991096][T21216] loop0: detected capacity change from 0 to 512 [ 1732.082909][T21216] EXT4-fs (loop0): 1 orphan inode deleted [ 1732.093814][ T6049] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1732.111028][T21216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1732.136069][ T6049] EXT4-fs error (device loop0): ext4_release_dquot:6967: comm kworker/u8:9: Failed to release dquot type 1 [ 1732.188295][T21216] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1732.317277][T19376] ocfs2: Unmounting device (7,4) on (node local) [ 1732.378283][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1733.421570][T20816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1733.832523][T20816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1734.623874][T21244] loop4: detected capacity change from 0 to 1024 [ 1734.641631][T21248] loop1: detected capacity change from 0 to 256 [ 1734.649177][T21248] exfat: Deprecated parameter 'namecase' [ 1734.659366][T20816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1734.668051][T21243] loop7: detected capacity change from 0 to 1024 [ 1734.719202][T21244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1734.748521][T20816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1734.749851][T21248] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1736.581092][ T6049] hfsplus: bad catalog file entry [ 1737.284467][T21273] loop6: detected capacity change from 0 to 4096 [ 1737.469252][T20816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1737.721327][T21279] loop0: detected capacity change from 0 to 32768 [ 1737.768131][T21279] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1737.785295][T20816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.804361][T21279] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1737.827622][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.834922][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1737.855882][T19376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.013415][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.020715][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1740.126746][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.137595][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.293378][T21299] overlayfs: failed to resolve './file0': -2 [ 1741.892560][T20816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1741.952242][T20816] veth0_vlan: entered promiscuous mode [ 1741.970573][T20816] veth1_vlan: entered promiscuous mode [ 1742.137203][T20816] veth0_macvtap: entered promiscuous mode [ 1742.186935][T19910] ocfs2: Unmounting device (7,0) on (node local) [ 1742.222650][T20816] veth1_macvtap: entered promiscuous mode [ 1743.282563][T20816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1743.295123][T20816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1743.307197][T20816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.509785][T20816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.739876][T20816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.799864][T20816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.141787][T21322] loop4: detected capacity change from 0 to 256 [ 1744.200461][T21322] exfat: Deprecated parameter 'namecase' [ 1744.553233][T21322] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1745.260380][ T7738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.288609][ T7738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.718335][T21332] loop0: detected capacity change from 0 to 64 [ 1745.793135][T21332] bio_check_eod: 238 callbacks suppressed [ 1745.793185][T21332] syz.0.4394: attempt to access beyond end of device [ 1745.793185][T21332] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 1745.812892][T21332] buffer_io_error: 230 callbacks suppressed [ 1745.812914][T21332] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 1746.088919][T21332] Trying to free block not in datazone [ 1748.499097][T21345] loop0: detected capacity change from 0 to 4096 [ 1748.660990][T21337] loop1: detected capacity change from 0 to 32768 [ 1748.694816][T21334] loop6: detected capacity change from 0 to 32768 [ 1748.777443][T21337] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 1748.777491][T21337] allowing incompatible features above 0.0: (unknown version) [ 1748.777512][T21337] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1748.823526][T21337] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 1748.834656][T21337] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 1748.855017][T21337] bcachefs (loop1): Version upgrade required: [ 1748.855017][T21337] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1748.855017][T21337] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 1748.855017][T21337] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1748.855500][T19377] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1748.952259][T19377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1748.960525][T19377] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1748.970256][T19377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1748.982900][T19377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1749.017935][T21337] bcachefs (loop1): dropping and reconstructing all alloc info [ 1749.054088][ T7738] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.227280][T21337] bcachefs (loop1): accounting_read... done [ 1749.331266][T21337] bcachefs (loop1): alloc_read... done [ 1749.340806][T21337] bcachefs (loop1): snapshots_read... done [ 1749.349680][T21337] bcachefs (loop1): done starting filesystem [ 1749.395566][ T7738] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.635750][T18581] bcachefs (loop1): shutting down [ 1751.077772][T19377] Bluetooth: hci5: command tx timeout [ 1751.824384][T21375] loop4: detected capacity change from 0 to 4096 [ 1751.961021][T21375] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1752.125702][ T7738] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.135689][T18581] bcachefs (loop1): shutdown complete [ 1752.351934][T21376] loop6: detected capacity change from 0 to 256 [ 1752.381118][T21376] exfat: Deprecated parameter 'namecase' [ 1752.494060][T21376] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1754.044597][T19377] Bluetooth: hci5: command tx timeout [ 1754.102625][ T7738] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.048724][T21378] loop0: detected capacity change from 0 to 32768 [ 1755.075647][T21378] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1755.141378][T21352] chnl_net:caif_netlink_parms(): no params data found [ 1755.150262][T21378] XFS (loop0): Ending clean mount [ 1755.321017][ T7738] bridge_slave_1: left allmulticast mode [ 1755.370018][ T7738] bridge_slave_1: left promiscuous mode [ 1755.376098][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.428585][ T7738] bridge_slave_0: left allmulticast mode [ 1755.446026][ T7738] bridge_slave_0: left promiscuous mode [ 1755.453552][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.627254][T21416] loop6: detected capacity change from 0 to 64 [ 1756.221529][T19377] Bluetooth: hci5: command tx timeout [ 1756.876494][T21420] loop4: detected capacity change from 0 to 2048 [ 1756.939558][T21420] NILFS (loop4): invalid segment: Magic number mismatch [ 1756.976012][T21420] NILFS (loop4): trying rollback from an earlier position [ 1757.097995][T21420] NILFS (loop4): recovery complete [ 1757.148577][T21429] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1758.286676][T19377] Bluetooth: hci5: command tx timeout [ 1759.575929][T21446] loop4: detected capacity change from 0 to 24 [ 1760.224731][T21446] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1760.291434][T21446] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1760.376175][T21446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1760.726480][T21455] loop6: detected capacity change from 0 to 1024 [ 1762.131636][ T7738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.451384][ T7738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1763.098304][T19377] Bluetooth: hci3: command 0x0406 tx timeout [ 1763.137042][ T7738] bond0 (unregistering): Released all slaves [ 1763.826739][T19910] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1764.656159][T21481] loop1: detected capacity change from 0 to 8 [ 1764.796010][T21481] unable to read id index table [ 1765.048838][T21486] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4440'. [ 1765.089584][T21352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.099355][T21486] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4440'. [ 1765.121794][T21352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.135617][T21352] bridge_slave_0: entered allmulticast mode [ 1765.163949][T21352] bridge_slave_0: entered promiscuous mode [ 1765.264336][T21352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.300788][T21352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1765.337780][T21352] bridge_slave_1: entered allmulticast mode [ 1765.391353][T21352] bridge_slave_1: entered promiscuous mode [ 1765.989043][T21492] netlink: 'syz.7.4443': attribute type 1 has an invalid length. [ 1766.065257][T21495] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4443'. [ 1766.119517][T21352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1766.222060][T21492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1766.247855][T21499] loop4: detected capacity change from 0 to 512 [ 1766.272310][T21499] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1766.297922][ T7738] hsr_slave_0: left promiscuous mode [ 1766.305416][ T7738] hsr_slave_1: left promiscuous mode [ 1766.307953][T21499] EXT4-fs (loop4): group descriptors corrupted! [ 1766.311602][ T7738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1766.324656][ T7738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1766.338521][ T7738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1766.361096][ T7738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1766.431037][ T7738] veth1_macvtap: left promiscuous mode [ 1766.451212][ T7738] veth0_macvtap: left promiscuous mode [ 1766.468140][T21501] loop1: detected capacity change from 0 to 1024 [ 1766.474943][ T7738] veth1_vlan: left promiscuous mode [ 1766.480371][ T7738] veth0_vlan: left promiscuous mode [ 1771.922839][T21532] loop4: detected capacity change from 0 to 1024 [ 1772.460859][T21532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1772.916601][ T7738] team0 (unregistering): Port device team_slave_1 removed [ 1773.085427][ T7738] team0 (unregistering): Port device team_slave_0 removed [ 1773.929010][T21548] xt_nfacct: accounting object `syz1' does not exists [ 1775.014841][T21550] loop1: detected capacity change from 0 to 4096 [ 1775.029749][T21352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.364494][T21352] team0: Port device team_slave_0 added [ 1775.403212][T21554] loop7: detected capacity change from 0 to 1024 [ 1775.428690][T21352] team0: Port device team_slave_1 added [ 1776.506230][T21352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.514300][T21352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.583857][T21352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.658488][T21352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.733937][T21352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.843352][T21352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1780.037962][T21352] hsr_slave_0: entered promiscuous mode [ 1780.044462][T21352] hsr_slave_1: entered promiscuous mode [ 1780.075365][T21352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1780.086031][T21352] Cannot create hsr debugfs directory [ 1780.370380][T19376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1780.463655][T21588] netlink: 'syz.7.4470': attribute type 1 has an invalid length. [ 1780.515813][T21589] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4470'. [ 1780.635761][T21588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1781.590398][T21600] loop7: detected capacity change from 0 to 1024 [ 1782.709452][T21611] loop4: detected capacity change from 0 to 8 [ 1786.077324][T21633] netlink: 'syz.4.4484': attribute type 1 has an invalid length. [ 1786.089755][T21634] loop7: detected capacity change from 0 to 1024 [ 1786.143653][T21637] sd 0:0:1:0: PR command failed: 1026 [ 1786.147926][T21638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4484'. [ 1786.149133][T21637] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1786.165036][T21637] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1786.173096][T21629] loop1: detected capacity change from 0 to 4096 [ 1786.197646][T21629] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1786.217323][T21634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1786.345835][T21633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1786.446724][T21629] overlayfs: upper fs does not support tmpfile. [ 1786.454803][T21646] delete_channel: no stack [ 1786.466607][T21629] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1786.589707][T21352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1786.648936][T21352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1786.678264][T21651] loop6: detected capacity change from 0 to 1024 [ 1786.716067][T21352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1786.769745][T21352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1787.818227][T21352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1787.900595][T21352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1787.975853][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.983104][ T7738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1788.214977][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.222236][ T7733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1789.839652][T21685] loop6: detected capacity change from 0 to 1024 [ 1789.976715][T21685] hfsplus: bad catalog entry type [ 1790.300850][ T7738] hfsplus: b-tree write err: -5, ino 4 [ 1791.426127][T21352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.688131][T19413] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.720317][T21352] veth0_vlan: entered promiscuous mode [ 1791.795665][T21352] veth1_vlan: entered promiscuous mode [ 1792.099678][T21352] veth0_macvtap: entered promiscuous mode [ 1792.234715][T21706] netlink: 'syz.4.4501': attribute type 1 has an invalid length. [ 1793.285294][T21713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1793.876986][T21706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1793.900074][T21352] veth1_macvtap: entered promiscuous mode [ 1793.912979][T21715] loop1: detected capacity change from 0 to 32768 [ 1793.926409][T21715] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4502 (21715) [ 1793.948259][T21715] BTRFS info (device loop1 state S): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 1793.959246][T21715] BTRFS info (device loop1 state S): using sha256 (sha256-x86_64) checksum algorithm [ 1793.968806][T21715] BTRFS error (device loop1 state S): ignoremetacsums must be used with ro mount option [ 1793.979325][T21715] BTRFS info (device loop1 state S): using free-space-tree [ 1793.987071][T21715] BTRFS error (device loop1 state S): open_ctree failed: -22 [ 1794.076300][T21352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1794.151786][T21352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1794.273087][T21352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.302378][T21352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.345687][T21352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.390976][T21352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.726301][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.756429][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.107064][T19015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.117644][T19015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.530656][T21747] loop6: detected capacity change from 0 to 1024 [ 1801.584431][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.873554][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.910213][T21747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1802.805010][T21766] netlink: 'syz.0.4516': attribute type 1 has an invalid length. [ 1803.888334][T21772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4516'. [ 1804.450211][T21777] loop1: detected capacity change from 0 to 32768 [ 1804.457755][T21777] jfs: Unknown parameter '' [ 1804.645796][T21766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1805.218986][T21782] loop1: detected capacity change from 0 to 512 [ 1805.241321][T21782] EXT4-fs: quotafile must be on filesystem root [ 1806.034752][T20355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1806.185971][T21788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1806.247438][T21788] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1806.264283][T21788] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1808.259522][T21805] loop2: detected capacity change from 0 to 32768 [ 1808.288272][T21796] loop7: detected capacity change from 0 to 4096 [ 1808.440697][T21805] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1808.484640][T21805] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1808.818332][T21814] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1808.892767][T21813] loop6: detected capacity change from 0 to 4096 [ 1809.870123][ T30] audit: type=1800 audit(1750194087.703:245): pid=21813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4529" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 1810.459253][T21825] loop4: detected capacity change from 0 to 8 [ 1810.484110][T21825] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1810.568493][T21825] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1810.683542][T21827] loop7: detected capacity change from 0 to 2048 [ 1810.733219][T21827] NILFS (loop7): invalid segment: Magic number mismatch [ 1810.767939][T21827] NILFS (loop7): trying rollback from an earlier position [ 1810.833750][T21827] NILFS (loop7): recovery complete [ 1810.844135][T21352] ocfs2: Unmounting device (7,2) on (node local) [ 1810.855308][T21828] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1810.954803][T21831] netlink: 'syz.1.4534': attribute type 1 has an invalid length. [ 1811.045947][T21836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4534'. [ 1811.182550][T21831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1811.219261][T21817] loop0: detected capacity change from 0 to 32768 [ 1811.231658][T21817] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4530 (21817) [ 1811.305566][T21817] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1811.333162][T21817] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 1811.341996][T21817] BTRFS info (device loop0): disk space caching is enabled [ 1811.413136][T21817] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1811.605699][T21852] loop1: detected capacity change from 0 to 512 [ 1811.613071][T21852] EXT4-fs: quotafile must be on filesystem root [ 1811.663738][T21817] BTRFS info (device loop0): rebuilding free space tree [ 1812.056588][T21817] BTRFS info (device loop0): disabling free space tree [ 1812.096414][T21817] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1812.124209][T21817] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1812.135863][T21863] loop4: detected capacity change from 0 to 512 [ 1814.992489][T21881] loop7: detected capacity change from 0 to 512 [ 1815.055676][T21881] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.4546: casefold flag without casefold feature [ 1815.069398][T19910] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1815.192109][T21881] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4546: couldn't read orphan inode 15 (err -117) [ 1815.216725][T21863] EXT4-fs (loop4): 1 orphan inode deleted [ 1815.250429][T21863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1815.301083][T21881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1815.328737][ T7733] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1815.338753][T21863] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1815.398400][ T7733] EXT4-fs error (device loop4): ext4_release_dquot:6967: comm kworker/u8:18: Failed to release dquot type 1 [ 1815.486375][T21881] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2847: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 1815.554795][T19376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1815.905425][T21888] loop6: detected capacity change from 0 to 32768 [ 1816.275779][T21888] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1816.303314][T21888] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1816.778934][T19413] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1817.491309][T21898] loop1: detected capacity change from 0 to 65536 [ 1817.572521][T21901] netlink: 'syz.7.4552': attribute type 1 has an invalid length. [ 1817.593265][T21898] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1817.634371][T12560] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1817.656069][T21914] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4552'. [ 1817.703363][T21917] loop2: detected capacity change from 0 to 256 [ 1817.752781][T21917] FAT-fs (loop2): Directory bread(block 1285) failed [ 1817.817000][T21898] XFS (loop1): Ending clean mount [ 1817.825693][T12560] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.841990][T21898] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 [ 1817.853702][T21898] XFS (loop1): Unmount and run xfs_repair [ 1817.860075][T21898] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1817.867936][T21898] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1817.876837][T21898] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1817.887596][T21898] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1817.898283][T21898] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1817.907247][T21898] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1817.916111][T21898] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1817.925054][T21898] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1817.933947][T21898] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1817.943082][T21898] XFS (loop1): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74 [ 1817.958147][T21921] FAT-fs (loop2): Directory bread(block 1285) failed [ 1817.986876][T12560] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1818.017091][T12560] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1818.028437][T21921] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 1818.036088][T21898] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x400/0x970 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1818.050954][T21898] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1818.084045][T21901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1818.093797][T12560] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1818.139980][T12560] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.173695][T12560] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1818.213192][T18581] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1818.229684][T12560] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1818.266572][T12560] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1818.354736][T12560] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.426994][T12560] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1818.485930][T12560] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1818.550261][T12560] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1818.725993][T20355] ocfs2: Unmounting device (7,6) on (node local) [ 1818.898789][T12560] usb 5-1: string descriptor 0 read error: -22 [ 1818.905147][T12560] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1818.934964][T12560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.499652][T12560] adutux 5-1:168.0: interrupt endpoints not found [ 1819.855498][ T6009] usb 5-1: USB disconnect, device number 17 [ 1820.024078][T21937] lo speed is unknown, defaulting to 1000 [ 1820.030538][T21937] lo speed is unknown, defaulting to 1000 [ 1820.049658][T21937] lo speed is unknown, defaulting to 1000 [ 1820.277186][T21937] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1820.613449][T21937] lo speed is unknown, defaulting to 1000 [ 1820.629108][T21937] lo speed is unknown, defaulting to 1000 [ 1820.631507][T21937] lo speed is unknown, defaulting to 1000 [ 1820.636126][T21937] lo speed is unknown, defaulting to 1000 [ 1820.639725][T21937] lo speed is unknown, defaulting to 1000 [ 1820.642080][T21937] lo speed is unknown, defaulting to 1000 [ 1820.644112][T21937] lo speed is unknown, defaulting to 1000 [ 1825.216968][T21948] loop6: detected capacity change from 0 to 2048 [ 1825.291826][T21950] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1825.419172][T21952] loop4: detected capacity change from 0 to 512 [ 1826.347486][T21952] EXT4-fs (loop4): 1 orphan inode deleted [ 1826.389931][T21959] loop7: detected capacity change from 0 to 1024 [ 1826.393845][ T7733] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1826.397625][T21959] EXT4-fs: Ignoring removed bh option [ 1826.414254][T21952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1826.427228][T21959] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1826.455340][T21952] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1826.490718][ T7733] EXT4-fs error (device loop4): ext4_release_dquot:6967: comm kworker/u8:18: Failed to release dquot type 1 [ 1826.548326][T21961] loop2: detected capacity change from 0 to 512 [ 1826.608882][T19376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.683751][T21961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1826.821127][T21961] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1827.621721][T21974] netlink: 'syz.4.4568': attribute type 1 has an invalid length. [ 1827.726628][T21978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4568'. [ 1827.875769][T21352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.016089][T21974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1828.077932][T21984] loop7: detected capacity change from 0 to 4096 [ 1828.127932][T21984] Cannot load nls np1251hidCQYKI[\r\?al+A\ޝ%ceHU [ 1828.287451][T21964] loop0: detected capacity change from 0 to 32768 [ 1828.341385][T21964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4567 (21964) [ 1828.607634][T21994] loop4: detected capacity change from 0 to 1024 [ 1829.440460][T21964] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1829.516946][T21994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1829.531560][T22005] loop1: detected capacity change from 0 to 512 [ 1829.532296][T21964] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 1829.595826][T21964] BTRFS info (device loop0): using free-space-tree [ 1829.614879][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1829.615293][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1829.628814][T22005] EXT4-fs (loop1): 1 orphan inode deleted [ 1829.644773][T19015] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1829.656268][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1829.656578][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1829.677576][T19015] EXT4-fs error (device loop1): ext4_release_dquot:6967: comm kworker/u8:8: Failed to release dquot type 1 [ 1829.717481][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1829.717881][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1829.730912][T22005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1829.808362][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1829.808717][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1829.821159][T22005] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1829.864971][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1829.865427][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1829.953991][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1830.023201][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1830.082503][T21964] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1830.110607][T21964] BTRFS error (device loop0): open_ctree failed: -12 [ 1830.240161][T18581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1833.062914][T22056] loop0: detected capacity change from 0 to 2048 [ 1833.077287][T22056] NILFS (loop0): invalid segment: Magic number mismatch [ 1833.084576][T22056] NILFS (loop0): trying rollback from an earlier position [ 1833.140158][T22056] NILFS (loop0): recovery complete [ 1833.160856][T22059] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1833.751308][T22068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1835.551225][T19376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.437313][T22088] loop6: detected capacity change from 0 to 32768 [ 1836.612602][T22096] loop4: detected capacity change from 0 to 256 [ 1836.659992][T22096] FAT-fs (loop4): Directory bread(block 64) failed [ 1836.666743][T22096] FAT-fs (loop4): Directory bread(block 65) failed [ 1836.673536][T22096] FAT-fs (loop4): Directory bread(block 66) failed [ 1836.681243][T22096] FAT-fs (loop4): Directory bread(block 67) failed [ 1836.689084][T22096] FAT-fs (loop4): Directory bread(block 68) failed [ 1836.696070][T22096] FAT-fs (loop4): Directory bread(block 69) failed [ 1836.715933][T22096] FAT-fs (loop4): Directory bread(block 70) failed [ 1836.735161][T22096] FAT-fs (loop4): Directory bread(block 71) failed [ 1836.745856][T22096] FAT-fs (loop4): Directory bread(block 72) failed [ 1836.752432][T22096] FAT-fs (loop4): Directory bread(block 73) failed [ 1836.819259][T22099] loop7: detected capacity change from 0 to 2048 [ 1836.825999][T15422] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1836.842726][T22099] NILFS (loop7): invalid segment: Magic number mismatch [ 1836.850806][T22099] NILFS (loop7): trying rollback from an earlier position [ 1836.874222][T22099] NILFS (loop7): recovery complete [ 1836.890761][T22100] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1836.988226][T15422] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1836.997085][T15422] usb 3-1: config 0 has no interfaces? [ 1837.002680][T15422] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1837.025918][T15422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.058612][T15422] usb 3-1: config 0 descriptor?? [ 1837.422726][T20876] usb 3-1: USB disconnect, device number 29 [ 1840.607465][T22126] loop6: detected capacity change from 0 to 1024 [ 1841.720409][T22126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1842.079828][T22140] loop0: detected capacity change from 0 to 512 [ 1842.250442][T22146] loop7: detected capacity change from 0 to 32768 [ 1842.280564][T22142] bond4: entered promiscuous mode [ 1842.331317][T22142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1842.606409][T22148] loop1: detected capacity change from 0 to 32768 [ 1842.639982][T22148] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1842.660676][T22140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1842.689047][T22140] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.773743][T22148] XFS (loop1): Ending clean mount [ 1842.803017][T22140] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1842.828697][T22148] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 [ 1842.840574][T22148] XFS (loop1): Unmount and run xfs_repair [ 1842.846313][T22148] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1842.853790][T22148] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1842.862812][T22148] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1842.871777][T22148] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1842.882118][T22148] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 1842.891051][T22148] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1842.899960][T22148] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 1842.908883][T22148] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1842.917757][T22148] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1842.926674][T22148] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74 [ 1842.938532][T22148] XFS (loop1): page discard on page ffffea0001328980, inode 0x1146, pos 4096. [ 1842.962482][T22148] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 [ 1842.973802][T22148] XFS (loop1): Unmount and run xfs_repair [ 1842.979600][T22148] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1842.988468][T22148] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1842.992808][T22140] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1842.997356][T22148] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1843.016298][T22148] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1843.025208][T22148] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 1843.034154][T22148] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1843.043100][T22148] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 1843.052013][T22148] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1843.061078][T22148] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1843.069982][T22148] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74 [ 1843.081400][T22148] XFS (loop1): page discard on page ffffea0001b0e900, inode 0x1146, pos 8192. [ 1843.091750][T22148] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 [ 1843.102855][T22148] XFS (loop1): Unmount and run xfs_repair [ 1843.108590][T22148] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1843.115991][T22148] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1843.124867][T22148] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1843.133741][T22148] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1843.142647][T22148] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 1843.151573][T22148] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1843.160527][T22148] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 1843.169417][T22148] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1843.178266][T22148] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1843.188561][T22148] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74 [ 1843.200401][T22148] XFS (loop1): page discard on page ffffea00010b7a00, inode 0x1146, pos 16384. [ 1843.213777][T22148] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 [ 1843.224877][T22148] XFS (loop1): Unmount and run xfs_repair [ 1843.230653][T22148] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1843.238029][T22148] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1843.246949][T22148] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1843.255864][T22148] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1843.264756][T22148] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 1843.273660][T22148] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1843.282592][T22148] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 1843.292578][T22148] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1843.301492][T22148] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1843.310406][T22148] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74 [ 1843.322021][T22148] XFS (loop1): page discard on page ffffea00004bc400, inode 0x1146, pos 32768. [ 1843.332283][T22148] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 [ 1843.343419][T22148] XFS (loop1): Unmount and run xfs_repair [ 1843.349185][T22148] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1843.356566][T22148] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1843.365491][T22148] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1843.374408][T22148] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1843.383316][T22148] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 1843.393683][T22148] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1843.402594][T22148] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 1843.411479][T22148] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1843.420461][T22148] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1843.429365][T22148] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74 [ 1843.440980][T22148] XFS (loop1): page discard on page ffffea0001ad06c0, inode 0x1146, pos 65536. [ 1843.453172][T15422] loop1: writeback error on inode 4422, offset 0, sector 8776 [ 1843.538407][T22140] EXT4-fs error (device loop0): ext4_acquire_dquot:6931: comm syz.0.4620: Failed to acquire dquot type 0 [ 1843.580467][T20355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1843.631605][T18581] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1843.740963][T18581] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 1844.018175][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1844.223824][T22169] loop2: detected capacity change from 0 to 4096 [ 1844.307392][T22173] loop4: detected capacity change from 0 to 1024 [ 1844.414812][T22180] loop7: detected capacity change from 0 to 512 [ 1844.471834][T22180] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1844.510525][T22180] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1846.429700][T22195] loop1: detected capacity change from 0 to 32768 [ 1846.465895][T19413] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.801289][T22195] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1846.801350][T22195] allowing incompatible features above 0.0: (unknown version) [ 1846.801374][T22195] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1846.836861][T22201] loop6: detected capacity change from 0 to 32768 [ 1846.846076][T22195] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 1846.846132][T22195] bcachefs (loop1): initializing new filesystem [ 1846.868166][T22195] bcachefs (loop1): going read-write [ 1847.131510][T22201] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1847.417138][T22201] XFS (loop6): Ending clean mount [ 1847.467718][T22195] bcachefs (loop1): marking superblocks [ 1847.514991][T22195] bcachefs (loop1): initializing freespace [ 1847.527435][T22195] bcachefs (loop1): done initializing freespace [ 1847.538898][T22195] bcachefs (loop1): reading snapshots table [ 1847.549205][T22195] bcachefs (loop1): reading snapshots done [ 1847.651424][T22195] bcachefs (loop1): done starting filesystem [ 1847.767902][T20355] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1847.857231][ T30] audit: type=1800 audit(1750194125.664:246): pid=22195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4634" name="file1" dev="loop1" ino=4098 res=0 errno=0 [ 1848.964887][T18581] bcachefs (loop1): shutting down [ 1848.969981][T18581] bcachefs (loop1): going read-only [ 1849.087622][T18581] bcachefs (loop1): finished waiting for writes to stop [ 1849.314813][T18581] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 1849.343003][T22203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1849.382442][T22239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1849.477339][T22239] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1849.580557][T18581] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 1849.601737][T22243] netlink: 'syz.6.4641': attribute type 1 has an invalid length. [ 1849.613723][T18581] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 1849.623738][T18581] bcachefs (loop1): marking filesystem clean [ 1849.796977][T22243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1849.821589][T18581] bcachefs (loop1): shutdown complete [ 1849.947066][T22247] bond1: (slave veth0_to_bond): making interface the new active one [ 1850.000264][T22247] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1850.219224][T22250] bond1: entered allmulticast mode [ 1850.242056][T22250] veth0_to_bond: entered allmulticast mode [ 1850.998410][T22240] overlayfs: failed to resolve './file0': -2 [ 1851.317217][T22262] loop7: detected capacity change from 0 to 512 [ 1851.405253][T22262] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1851.493777][T22258] loop6: detected capacity change from 0 to 32768 [ 1851.496806][T22262] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz.7.4652: bg 0: block 104: invalid block bitmap [ 1851.528967][T22262] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1851.541440][T22262] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.4652: invalid indirect mapped block 1 (level 1) [ 1851.563641][T22262] EXT4-fs (loop7): 1 truncate cleaned up [ 1851.576502][T22262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1851.630912][T22258] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1851.630965][T22258] allowing incompatible features above 0.0: (unknown version) [ 1851.630986][T22258] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1851.676422][T22258] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 1851.684812][T22258] bcachefs (loop6): initializing new filesystem [ 1851.699935][T22258] bcachefs (loop6): going read-write [ 1851.716042][T22266] loop0: detected capacity change from 0 to 1024 [ 1851.796632][T22266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1851.935968][T22258] bcachefs (loop6): marking superblocks [ 1851.951487][T22258] bcachefs (loop6): initializing freespace [ 1851.962174][T22258] bcachefs (loop6): done initializing freespace [ 1851.973697][T22258] bcachefs (loop6): reading snapshots table [ 1851.979727][T22258] bcachefs (loop6): reading snapshots done [ 1852.225944][T19413] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.227029][T22258] bcachefs (loop6): done starting filesystem [ 1852.439155][T19910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.453361][T20355] bcachefs (loop6): shutting down [ 1852.463645][T20355] bcachefs (loop6): going read-only [ 1852.468940][T20355] bcachefs (loop6): finished waiting for writes to stop [ 1852.507968][T20355] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2 [ 1852.709228][T20355] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3 [ 1852.751093][T20355] bcachefs (loop6): clean shutdown complete, journal seq 4 [ 1852.782377][T20355] bcachefs (loop6): marking filesystem clean [ 1853.428766][T20355] bcachefs (loop6): shutdown complete [ 1854.060596][T22299] loop7: detected capacity change from 0 to 1024 [ 1854.085503][T22299] EXT4-fs: Ignoring removed nobh option [ 1854.101388][T22299] EXT4-fs: inline encryption not supported [ 1854.107764][T22299] EXT4-fs: Ignoring removed bh option [ 1854.244751][ T5946] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1854.255177][T22299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1854.318678][T22299] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4112: comm syz.7.4662: Allocating blocks 385-513 which overlap fs metadata [ 1854.367273][T22299] EXT4-fs (loop7): pa ffff8880538e3910: logic 16, phys. 129, len 24 [ 1854.376160][T22299] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5363: group 0, free 0, pa_free 8 [ 1854.415789][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.429089][T22299] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 1854.445749][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1854.476664][ T5946] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1854.498467][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.507819][T22299] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1854.507819][T22299] [ 1854.518973][ T5946] usb 5-1: Product: syz [ 1854.527797][ T5946] usb 5-1: Manufacturer: syz [ 1854.554542][ T5946] usb 5-1: SerialNumber: syz [ 1854.576152][T22299] EXT4-fs (loop7): Total free blocks count 0 [ 1854.582181][T22299] EXT4-fs (loop7): Free/Dirty block details [ 1854.656212][T22299] EXT4-fs (loop7): free_blocks=128 [ 1854.667902][T22315] loop8: detected capacity change from 0 to 1 [ 1854.680317][T22315] Dev loop8: unable to read RDB block 1 [ 1854.683589][T22299] EXT4-fs (loop7): dirty_blocks=0 [ 1854.689403][T22315] loop8: unable to read partition table [ 1854.704961][T22299] EXT4-fs (loop7): Block reservation details [ 1854.710871][T22315] loop8: partition table beyond EOD, [ 1854.710953][T22299] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 1854.743686][T22315] truncated [ 1854.771716][T22315] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1854.821055][ T5946] usb 5-1: 0:2 : does not exist [ 1854.846571][ T5946] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1854.925769][ T5946] usb 5-1: USB disconnect, device number 18 [ 1855.171490][T22320] loop0: detected capacity change from 0 to 4096 [ 1855.248423][T22323] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1855.726025][T22326] fuse: Bad value for 'fd' [ 1856.117921][T22318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1856.275764][T12560] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1856.360322][T22333] loop0: detected capacity change from 0 to 256 [ 1856.410951][T22333] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1856.513329][T12560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1856.534349][T12560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1856.561792][T12560] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1856.614343][T12560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.624245][T22322] loop2: detected capacity change from 0 to 40427 [ 1856.648228][T12560] usb 5-1: config 0 descriptor?? [ 1856.761836][T22337] loop0: detected capacity change from 0 to 512 [ 1856.782092][T22322] F2FS-fs (loop2): invalid crc value [ 1856.787526][T22322] F2FS-fs (loop2): Wrong cp_pack_start_sum: 1 [ 1856.794793][T22322] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1857.346643][T22341] overlay: filesystem on ./bus not supported as upperdir [ 1858.164740][T22350] loop0: detected capacity change from 0 to 1024 [ 1858.841543][T12560] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0008/input/input33 [ 1858.993526][T12560] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1859.258042][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4681'. [ 1859.301104][T12560] usb 5-1: USB disconnect, device number 19 [ 1859.331923][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4681'. [ 1860.652328][T22370] loop0: detected capacity change from 0 to 32768 [ 1860.876857][T22370] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 1860.876936][T22370] allowing incompatible features above 0.0: (unknown version) [ 1860.876958][T22370] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1860.926159][T22370] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 1860.934600][T22370] bcachefs (loop0): initializing new filesystem [ 1860.961263][T22370] bcachefs (loop0): going read-write [ 1861.583761][T22370] bcachefs (loop0): marking superblocks [ 1861.599397][T22370] bcachefs (loop0): initializing freespace [ 1861.609911][T22370] bcachefs (loop0): done initializing freespace [ 1861.621348][T22370] bcachefs (loop0): reading snapshots table [ 1861.627313][T22370] bcachefs (loop0): reading snapshots done [ 1861.704904][T22370] bcachefs (loop0): done starting filesystem [ 1861.880689][T22394] loop7: detected capacity change from 0 to 2048 [ 1861.928632][T19910] bcachefs (loop0): shutting down [ 1861.933748][T19910] bcachefs (loop0): going read-only [ 1861.967537][T22394] NILFS (loop7): invalid segment: Magic number mismatch [ 1861.981394][T19910] bcachefs (loop0): finished waiting for writes to stop [ 1861.982813][T22394] NILFS (loop7): trying rollback from an earlier position [ 1862.022775][T19910] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 1862.051595][T22394] NILFS (loop7): recovery complete [ 1862.087595][T22402] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1862.096201][T22400] loop4: detected capacity change from 0 to 1024 [ 1862.177149][T19910] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 1862.209759][T19910] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 1862.229040][T19910] bcachefs (loop0): marking filesystem clean [ 1862.734679][T19910] bcachefs (loop0): shutdown complete [ 1863.054582][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.061417][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.289276][T20876] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1863.479584][T20876] usb 8-1: Using ep0 maxpacket: 32 [ 1863.497590][T20876] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1863.586033][T22411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1863.609168][T20876] usb 8-1: config 0 has no interface number 0 [ 1863.652673][T22401] loop2: detected capacity change from 0 to 40427 [ 1863.682175][T22401] F2FS-fs (loop2): invalid crc value [ 1863.692815][T22401] F2FS-fs (loop2): Wrong cp_pack_start_sum: 1 [ 1863.711961][T22401] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1863.785327][T20876] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1863.809338][T20876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.817366][T20876] usb 8-1: Product: syz [ 1863.842389][T20876] usb 8-1: Manufacturer: syz [ 1863.847020][T20876] usb 8-1: SerialNumber: syz [ 1863.870566][T20876] usb 8-1: config 0 descriptor?? [ 1863.879200][T20876] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1864.104366][T20876] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1864.501557][T20876] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1864.520676][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1865.479146][T22420] fuse: Bad value for 'fd' [ 1865.518927][T20876] usb 8-1: USB disconnect, device number 2 [ 1866.193315][T20876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1866.215228][T20876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1866.241808][T20876] quatech2 8-1:0.51: device disconnected [ 1866.275773][T22426] loop1: detected capacity change from 0 to 1764 [ 1866.306262][T22426] iso9660: Bad value for 'block' [ 1867.608447][T22437] bridge0: entered promiscuous mode [ 1867.627510][T22437] vlan2: entered promiscuous mode [ 1867.690868][T22442] loop7: detected capacity change from 0 to 64 [ 1867.716184][T22439] loop1: detected capacity change from 0 to 2048 [ 1867.755663][T22439] NILFS (loop1): invalid segment: Magic number mismatch [ 1867.779569][T22439] NILFS (loop1): trying rollback from an earlier position [ 1867.809960][T22439] NILFS (loop1): recovery complete [ 1867.822257][T22447] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1868.370624][T22451] loop7: detected capacity change from 0 to 1024 [ 1868.413968][T22451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1869.714444][T19413] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1869.839425][T22466] loop1: detected capacity change from 0 to 512 [ 1869.858772][T22466] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.4712: casefold flag without casefold feature [ 1869.877551][T22466] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4712: couldn't read orphan inode 15 (err -117) [ 1869.909040][T22470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1869.909753][T22466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1869.994478][T22472] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1870.147476][T18581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.096752][ T59] ------------[ cut here ]------------ [ 1871.102848][ T59] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 1871.118202][T22484] netlink: 'syz.0.4720': attribute type 10 has an invalid length. [ 1871.176844][T22484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.186960][T22484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.211768][ T59] WARNING: CPU: 0 PID: 59 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 1871.222203][ T59] Modules linked in: [ 1871.228805][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1871.240922][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1871.251896][ T59] Workqueue: bond0 bond_mii_monitor [ 1871.257261][ T59] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 1871.263935][ T59] Code: 05 ff ff ff e8 a4 f5 5b f8 c6 05 c8 74 30 07 01 90 ba 48 00 00 00 48 c7 c6 c0 80 e3 8c 48 c7 c7 60 80 e3 8c e8 f4 ba 1a f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 24 64 a8 90 e8 9e d7 c1 f8 e9 [ 1871.284237][ T59] RSP: 0018:ffffc9000210f9f0 EFLAGS: 00010286 [ 1871.290359][ T59] RAX: 0000000000000000 RBX: ffff88801283e000 RCX: ffffffff817ae248 [ 1871.298717][ T59] RDX: ffff88801dff8000 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 1871.306790][ T59] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1871.315120][ T59] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000421f48 [ 1871.323192][ T59] R13: ffff88801283ecc5 R14: ffffffff8c590140 R15: ffffffff89996290 [ 1871.326326][T22484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.331205][ T59] FS: 0000000000000000(0000) GS:ffff88812475a000(0000) knlGS:0000000000000000 [ 1871.338451][T22484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1871.347341][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1871.355018][T22484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.361761][ T59] CR2: 00007f590e89f440 CR3: 000000005f588000 CR4: 0000000000350ef0 [ 1871.368312][T22484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1871.384409][ T59] Call Trace: [ 1871.387713][ T59] [ 1871.390663][ T59] ethtool_op_get_link+0x1d/0x70 [ 1871.395716][ T59] bond_check_dev_link+0x3fc/0x710 [ 1871.400909][ T59] ? __pfx_bond_check_dev_link+0x10/0x10 [ 1871.406665][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.412367][ T59] bond_mii_monitor+0x3c0/0x2dc0 [ 1871.417466][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 1871.422908][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.428640][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.434407][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.440098][ T59] ? rcu_is_watching+0x12/0xc0 [ 1871.444998][ T59] process_one_work+0x9cf/0x1b70 [ 1871.450385][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 1871.455882][ T59] ? __pfx_process_one_work+0x10/0x10 [ 1871.461303][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.467669][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.471731][T22492] loop7: detected capacity change from 0 to 64 [ 1871.474078][ T59] ? assign_work+0x1a0/0x250 [ 1871.474154][ T59] worker_thread+0x6c8/0xf10 [ 1871.474204][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.495357][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.501075][ T59] ? __kthread_parkme+0x19e/0x250 [ 1871.506310][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.511985][ T59] ? __pfx_worker_thread+0x10/0x10 [ 1871.517230][ T59] kthread+0x3c5/0x780 [ 1871.521353][ T59] ? __pfx_kthread+0x10/0x10 [ 1871.526033][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.531765][ T59] ? rcu_is_watching+0x12/0xc0 [ 1871.536742][ T59] ? __pfx_kthread+0x10/0x10 [ 1871.541376][ T59] ret_from_fork+0x5d7/0x6f0 [ 1871.546087][ T59] ? __pfx_kthread+0x10/0x10 [ 1871.550719][ T59] ret_from_fork_asm+0x1a/0x30 [ 1871.555611][ T59] [ 1871.558660][ T59] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1871.565972][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1871.578000][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1871.588108][ T59] Workqueue: bond0 bond_mii_monitor [ 1871.593379][ T59] Call Trace: [ 1871.596687][ T59] [ 1871.599648][ T59] dump_stack_lvl+0x3d/0x1f0 [ 1871.604308][ T59] panic+0x71c/0x800 [ 1871.608269][ T59] ? __pfx_panic+0x10/0x10 [ 1871.612745][ T59] ? show_trace_log_lvl+0x29b/0x3e0 [ 1871.618014][ T59] ? check_panic_on_warn+0x1f/0xb0 [ 1871.623186][ T59] ? __linkwatch_sync_dev+0x1ed/0x230 [ 1871.628596][ T59] check_panic_on_warn+0xab/0xb0 [ 1871.633583][ T59] __warn+0xf6/0x3c0 [ 1871.637522][ T59] ? preempt_schedule_notrace+0x62/0xe0 [ 1871.643112][ T59] ? __linkwatch_sync_dev+0x1ed/0x230 [ 1871.648528][ T59] report_bug+0x3c3/0x580 [ 1871.652900][ T59] ? __linkwatch_sync_dev+0x1ed/0x230 [ 1871.658315][ T59] handle_bug+0x184/0x210 [ 1871.662674][ T59] exc_invalid_op+0x17/0x50 [ 1871.667211][ T59] asm_exc_invalid_op+0x1a/0x20 [ 1871.672111][ T59] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 1871.678139][ T59] Code: 05 ff ff ff e8 a4 f5 5b f8 c6 05 c8 74 30 07 01 90 ba 48 00 00 00 48 c7 c6 c0 80 e3 8c 48 c7 c7 60 80 e3 8c e8 f4 ba 1a f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 24 64 a8 90 e8 9e d7 c1 f8 e9 [ 1871.697783][ T59] RSP: 0018:ffffc9000210f9f0 EFLAGS: 00010286 [ 1871.703879][ T59] RAX: 0000000000000000 RBX: ffff88801283e000 RCX: ffffffff817ae248 [ 1871.711866][ T59] RDX: ffff88801dff8000 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 1871.719855][ T59] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1871.727845][ T59] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000421f48 [ 1871.735833][ T59] R13: ffff88801283ecc5 R14: ffffffff8c590140 R15: ffffffff89996290 [ 1871.743822][ T59] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 1871.749502][ T59] ? __warn_printk+0x198/0x350 [ 1871.754309][ T59] ? __warn_printk+0x1a5/0x350 [ 1871.759130][ T59] ethtool_op_get_link+0x1d/0x70 [ 1871.764114][ T59] bond_check_dev_link+0x3fc/0x710 [ 1871.769265][ T59] ? __pfx_bond_check_dev_link+0x10/0x10 [ 1871.774948][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.780632][ T59] bond_mii_monitor+0x3c0/0x2dc0 [ 1871.785629][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 1871.791051][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.796729][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.802405][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.808076][ T59] ? rcu_is_watching+0x12/0xc0 [ 1871.812885][ T59] process_one_work+0x9cf/0x1b70 [ 1871.817871][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 1871.823289][ T59] ? __pfx_process_one_work+0x10/0x10 [ 1871.828691][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.834368][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.840034][ T59] ? assign_work+0x1a0/0x250 [ 1871.844683][ T59] worker_thread+0x6c8/0xf10 [ 1871.849310][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.854976][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.860639][ T59] ? __kthread_parkme+0x19e/0x250 [ 1871.865708][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.871377][ T59] ? __pfx_worker_thread+0x10/0x10 [ 1871.876520][ T59] kthread+0x3c5/0x780 [ 1871.880612][ T59] ? __pfx_kthread+0x10/0x10 [ 1871.885227][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.890888][ T59] ? rcu_is_watching+0x12/0xc0 [ 1871.895690][ T59] ? __pfx_kthread+0x10/0x10 [ 1871.900303][ T59] ret_from_fork+0x5d7/0x6f0 [ 1871.904937][ T59] ? __pfx_kthread+0x10/0x10 [ 1871.909555][ T59] ret_from_fork_asm+0x1a/0x30 [ 1871.914372][ T59] [ 1871.917910][ T59] Kernel Offset: disabled [ 1871.922253][ T59] Rebooting in 86400 seconds..