last executing test programs: 42.910078952s ago: executing program 3: syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x555e, &(0x7f000000b9c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x64b42, 0x0) r0 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 41.933349682s ago: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 41.605465212s ago: executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 40.823747259s ago: executing program 3: r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000b00), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"0000400000fffa1000000600"}) 40.57728413s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x45, 0x2, 0x3}, {}, {}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 40.503202121s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000003000/0x2000)=nil, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008088100b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000440)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000040)={0x4000000}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) syz_mount_image$udf(&(0x7f0000005e80), &(0x7f00000000c0)='./file0\x00', 0x1000a05, &(0x7f0000006e80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x0, 0xc3e, &(0x7f0000006240)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) 40.389088487s ago: executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x378, 0xffffffff, 0x1a0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, [], [], 'nr0\x00', 'rose0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 40.252986132s ago: executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0x24, 0x0, 0x8) 40.14507556s ago: executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x1, 0x4, 0x200d}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x9, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r5, 0x0, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 40.00730665s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 39.972287766s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x5c3, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={r3, 0x0, 0x1, "f9"}, 0x9) 39.721686133s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000480)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x8e72}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x2}) 37.804987494s ago: executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 36.066477479s ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,rodir,errors=remount-ro,shortname=lower,shortname=win95,shortname=win95,uni_xlate=1,rodir,nonumtail=0,shortname=win95,nfs,nocase,uni_xlate=1,shortname=win95,utf8=1,rodir,nonumtail=0,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB=',rodir\x00'], 0x1, 0x2a3, &(0x7f0000000180)="$eJzs3b9Pa3UUAPBzS2mLDu3gZEi8iQ5OBFhdSgwkxE6aDuqgRCAxtDGBhMQfsTK5ujj6F5iYuPlPuPgfmLiavO0xkNyX2977Wnil0BcK78fns3D43nO+99zLLYShp1+u9o/20zg8++HfaDSSqLRjJc6TaEUlSj/FJe1fAgB4mZ1nWTzKRuapSyKisbi2AIAFmvvv/58LbwkAWLBPPv3so61OZ/vjNG3ETv/n027+n33+dXR86zC+jl4cxHo04yIie2oU72RZNqimuVa81x+cdvPK/hd/F/tv/R8xrN+IZrSGS5frdzvbG+nIRP0g7+ON4vztvH4zmvHWlPPvdrY3p9RHtxbvvzvR/1o045+v4pvoxf6wiXH9jxtp+mH26+PvP8/by+uTwWm3Pswby5bu+UcDAAAAAAAAAAAAAAAAAAAAAMArbK2YnVOP4fyefKmYv7N0kX+zHGmpdXk+z6g+KTe6Mh9okMVv5Xyd9TRNsyJxXF+Nt6tRfZirBgAAAAAAAAAAAAAAAAAAgBfLybffHe31egfHdxKU0wDKt/U/7z7tiZV3YnZyfXyuShHO2DmWypwkYmYb+UXc0W25KVi5ruff/5h3w8bNOcuz7s/dBOXTdbSXTL+H9ShXGuVD8tdkTi1uea7adYdWixZut09t6qHm3Ndee3MYDGbkRDLrdfHBf6O2i5Xk6ouoNryrU8uXi2Ci/MqzMdfz/OzvisS0DgAAAAAAAAAAAAAAAAAAWKjxm36nHDybWVrJ6gtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu1fjz/+cIBkXxLZJrcXzywJcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAa+BJAAAA//9YAl9K") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}) 35.998137914s ago: executing program 3: r0 = memfd_create(&(0x7f0000000240)='-B\xd5NI\xc4\xb5 \xe5\v.j\xf4\x8di\x11\xef\x8bl\xc9\x1e\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xff\x03\x00\x00nh#\xcf)\x1e\xc8\xc0\"\x9cc\x10d\xee\xa9\xab\x06\x97kf\xc7\x820\x80T\r\xde\xc58M\xcd\xfb\xcc\x82n=\x7f=\x8b\x1d\xea\xef\xe3\x00\x00\x03\r\x00\x00\x10\x00@\x00\x00\x00\x00\x00\x00\x00\xcbM\x8a_\xbf\xb59Q\x05\x82E\x12p\xcf\x15@o\xac\x17P;\x11\x93\x97\xb6\xdc\xad\x00C\x87\xc1\xbb\xb2>\xa3 #\xd5T\xdd\x8cn<\xd0$$\x9bo\x03\xdb#(\x03\x00\x00\x00\xe3r%/\xca\xb4\xd1x\xd8\xb0uN\xcf\b%\x00\x00\x00\x00\x00\x00\x00\bUO\x9f(\xe4\xda\x1eLj:\x8av\xd4\xe1\xc2ze\x16\asP\xae&yF.\xe8\xf5\xa2\xdf\x86\xa0t\x05~~\x92U\x1e\x87\xdb\xdfg\x9enz\b\xfaw\xfb*[r\x0e\xcb`\xdf\xa1\x16{<)\x9d\x99h\x00\x10\x02\x00'/302, 0x4) cachestat(r0, &(0x7f0000000000), 0x0, 0x0) 35.889249183s ago: executing program 3: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420007}]}) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0x1}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 35.885891623s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x86, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = inotify_init1(0x0) r7 = dup(r6) r8 = gettid() readv(r7, &(0x7f0000000040)=[{&(0x7f0000000bc0)=""/224, 0xe0}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 34.755618943s ago: executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 33.855102671s ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$AUDIT_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3}, 0x3c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 33.113877891s ago: executing program 4: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 33.088846567s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0xf, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) 32.993584197s ago: executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1200000, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@usrjquota}, {@lazytime}, {@errors_continue}, {@test_dummy_encryption}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc028aa03, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x80000000}}, './file1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_trie\x00') read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0x2020) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 31.762289493s ago: executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 30.767971866s ago: executing program 2: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/305], 0x1, 0x54f4, &(0x7f0000005600)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)) 30.030489846s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc020000}, 0xc, &(0x7f0000000440)={0x0}}, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 9.977896805s ago: executing program 1: sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)={0x164, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x150, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x164}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x1f7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) 9.691284497s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r3 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) close(r3) 5.863794695s ago: executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0xfff, 0x4) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_VERSION={0x5, 0x6, 0x3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRESOCT, @ANYRESOCT=r6, @ANYRES8=r3], 0xb8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB='Gdh\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000300)=0x7, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1000000086dfa63f009de2f82e327590457ba4f60d7fb8b50200c167ddd7c2e011dbc7993b88a286961d8f4e7ca1bdffd9aa18cba9553e606ace3ad58bf00a56c6cc30bd9f7927f02ebdc587253c8bcb6fce4a6bdbf0d402c228e972f022a8491ec45291952b3bb77516e30de58bca47bfab00000000000000000b8c012d43e54117ecae025f1ecdbd3e0a720e3ae5271767f7035a95800d77b9beb3e7cc45709c11b6be30564f4fb700853f5de90ddee2319eb014c96698c66f5e5456287264f7388e43c0fa49a34b9f74088cd7d03c606c1ee47e78f5b520f1e36c665edd8ba91711de2b36968aa371643152c6ddcde6816aaf2ae33c0969d8738f279e5ff6edb61f73998501027d3a81998cdbcec1e4dccb02852e18f8f46bcccc0f89e1194958c61b4646d3e5d020ce1409a84b33051e372f5119c207033334849227d548b8fd26a97ec8ed11a9e564f15dc173baa208267b0de51093c41b1d6dd17661ec049db6f6c957d6", @ANYRES16=r11, @ANYBLOB="02002abd7000fedbdf2504000000080003000400000005000600fa00000005000500000000000500060004000000", @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x0) accept4(r1, &(0x7f0000000280)=@llc, &(0x7f00000000c0)=0x80, 0xae1280b9889fb980) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r12, 0x40}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x38}]}]}, 0x34}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000001180)=@acquire={0x4e8, 0x17, 0x2, 0x70bd28, 0x25dfdbfb, {{@in=@empty, 0x4d3, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in6=@mcast1, @in=@multicast2, 0x4e22, 0x0, 0x4e21, 0xc4ec, 0x0, 0x0, 0x60, 0x3c, r7}, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x9, 0x4e21, 0x13c, 0x0, 0xc0, 0x0, 0x2b, r12, r14}, {0x9, 0x0, 0x1, 0xff, 0xf656, 0x9, 0x7, 0x8}, {0x3ff, 0x94, 0x4, 0x4}, 0x1, 0x6e6bba, 0x2, 0x1, 0x0, 0x2}, 0x3, 0xffffbd6f, 0x1, 0x70bd2b}, [@policy_type={0xa}, @algo_comp={0x116, 0x3, {{'lzs\x00'}, 0x670, "1faf18627dedc1505936316cd01ae044e31f081f24cb4a5c01cf969da2e94a854d27644c1ca9f6d9af5db9f0418defab3115bc195337121e4cf39cc440425de04f4c1cf5456fa82d03a9af54ca600666bb978216e0e5c7ef58c77511be76c59178318dd874d222adab633a3ebe49ff224652d6aa0887614853292550161da44f1c10cd3c1c95712e3bde0314a53080d0790f3d7b3e9cd90bde0405a44f05005c012e4182c7feb82e655716535fb23a09509fa55ebd56abd18c749f04c5513895fba0197550397bb6ebd0089f361a"}}, @mark={0xc, 0x15, {0x350759, 0x7}}, @migrate={0x180, 0x11, [{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, @in6=@empty, 0xff, 0x4, 0x0, 0x3501, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2b, 0x1, 0x0, 0x3505, 0xa, 0x2}, {@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @in=@local, @in=@local, 0xdb, 0x3, 0x0, 0x3502, 0xa, 0xa}, {@in6=@loopback, @in=@multicast1, @in=@multicast2, @in=@private=0xa010101, 0x2b, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x3c, 0x3, 0x0, 0x3502, 0xa, 0x2}]}, @algo_comp={0xac, 0x3, {{'deflate\x00'}, 0x320, "5beb89a4989633b8b14b4a1dc32cad3ce61fc58639d19e4bc8d991f50a2a9005428866fe56793895f00c29db8a16005de3d30359366edadb7b6487622027413d081112caf10b92953bf578ac6763ab6b31c32bbb3c60090747fb81a02ab6bc3a062a94be"}}, @algo_crypt={0x51, 0x2, {{'chacha20-generic\x00'}, 0x48, "bfdb4949c1cdc0c084"}}, @proto={0x5, 0x19, 0x3c}, @extra_flags={0x8, 0x18, 0xff}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x40000040}, 0x20000000) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x60}}, 0x0) 3.089334309s ago: executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 0s ago: executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000007e00)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000800)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r2}, 0xc) kernel console output (not intermixed with test programs): rom 0 to 8192 [ 245.908087][ T7158] bcachefs (loop2): shutting down [ 245.913905][ T7158] bcachefs (loop2): going read-only [ 245.913928][ T8137] hsr_slave_0: left promiscuous mode [ 245.919480][ T7158] bcachefs (loop2): finished waiting for writes to stop [ 245.932960][ T7158] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 245.949665][ T8502] loop1: AHDI p1 p2 p3 [ 245.960515][ T8137] hsr_slave_1: left promiscuous mode [ 245.966442][ T8502] loop1: p1 start 65535 is beyond EOD, truncated [ 245.978122][ T8502] loop1: p2 start 134217728 is beyond EOD, truncated [ 245.988629][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.998626][ T7158] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 245.998767][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.021741][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.030377][ T8137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.037144][ T7158] bcachefs (loop2): shutdown complete, journal seq 14 [ 246.046461][ T7158] bcachefs (loop2): marking filesystem clean [ 246.123029][ T8137] veth1_macvtap: left promiscuous mode [ 246.127477][ T7158] bcachefs (loop2): shutdown complete [ 246.135954][ T8137] veth0_macvtap: left promiscuous mode [ 246.142736][ T8137] veth1_vlan: left promiscuous mode [ 246.153980][ T8137] veth0_vlan: left promiscuous mode [ 246.908514][ T29] audit: type=1800 audit(2000000017.719:641): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 247.183500][ T8137] team0 (unregistering): Port device team_slave_1 removed [ 247.274760][ T8137] team0 (unregistering): Port device team_slave_0 removed [ 247.524366][ T8524] loop2: detected capacity change from 0 to 40427 [ 247.551095][ T8524] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.662734][ T8524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.915642][ T5101] Bluetooth: hci4: command tx timeout [ 248.066007][ T8530] syz-executor.2: attempt to access beyond end of device [ 248.066007][ T8530] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 248.098536][ T8530] syz-executor.2: attempt to access beyond end of device [ 248.098536][ T8530] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 248.143813][ T29] audit: type=1800 audit(2000000018.829:642): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 248.317639][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.332900][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.381809][ T8421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.547176][ T7158] syz-executor.2: attempt to access beyond end of device [ 248.547176][ T7158] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.561695][ T7158] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 248.674970][ T8421] hsr_slave_0: entered promiscuous mode [ 248.705750][ T8421] hsr_slave_1: entered promiscuous mode [ 248.762337][ T8539] loop0: detected capacity change from 0 to 1024 [ 248.954583][ T8539] loop0: detected capacity change from 0 to 512 [ 249.014062][ T8539] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 249.042186][ T8539] ext4_test_bit(bit=14, block=18) = 1 [ 249.055851][ T8539] is_bad_inode(inode)=0 [ 249.093629][ T8539] NEXT_ORPHAN(inode)=1023 [ 249.110792][ T8539] max_ino=32 [ 249.114034][ T8539] i_nlink=0 [ 249.170893][ T8539] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.0: corrupted xattr block 19: e_value size too large [ 249.215717][ T8539] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 249.236540][ T8539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.263758][ T8539] ext4 filesystem being mounted at /root/syzkaller-testdir215403662/syzkaller.Omw3u0/162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.331860][ T8539] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor.0: directory missing '.' [ 249.461388][ T6682] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.499830][ T8537] loop4: detected capacity change from 0 to 32768 [ 249.535388][ T8537] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8537) [ 249.568877][ T8537] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 249.605954][ T8537] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 249.649251][ T8537] BTRFS info (device loop4): using free-space-tree [ 249.779990][ T8421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.827155][ T8421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.891850][ T8421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.930738][ T8421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.995938][ T5101] Bluetooth: hci4: command tx timeout [ 250.007583][ T8545] loop1: detected capacity change from 0 to 32768 [ 250.058774][ T8545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8545) [ 250.156345][ T8545] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.192805][ T8545] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 250.215167][ T8545] BTRFS info (device loop1): using free-space-tree [ 250.276869][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.319501][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.345385][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.352570][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.394754][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.401968][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.480813][ T8548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.592186][ T7497] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.652549][ T7042] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.881437][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.058315][ T8421] veth0_vlan: entered promiscuous mode [ 252.093291][ T8421] veth1_vlan: entered promiscuous mode [ 252.191123][ T8421] veth0_macvtap: entered promiscuous mode [ 252.238759][ T8421] veth1_macvtap: entered promiscuous mode [ 252.281056][ T8602] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 252.309195][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.341790][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.371280][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.374904][ T8551] loop0: detected capacity change from 0 to 32768 [ 252.402291][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.429258][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.459252][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.470386][ T8551] gfs2: can't find protocol lock_nolockquota=off [ 252.520558][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.553366][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.580368][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.638306][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.669204][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.699619][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.727817][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.761631][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.795693][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.806316][ T8604] loop1: detected capacity change from 0 to 8192 [ 252.830984][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.851182][ T8604] REISERFS warning (device loop1): super-6503 reiserfs_getopt: the option "notail" does not require an argument [ 252.851182][ T8604] [ 252.869114][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.931349][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.997414][ T8421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.053015][ T8421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.080196][ T8421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.105168][ T8421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.227250][ T8597] loop2: detected capacity change from 0 to 40427 [ 253.291961][ T8597] F2FS-fs (loop2): Found nat_bits in checkpoint [ 253.391278][ T5145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.425913][ T5145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.431579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.453670][ T8597] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 253.484967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.935743][ T8619] syz-executor.2: attempt to access beyond end of device [ 253.935743][ T8619] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 253.961829][ T8619] syz-executor.2: attempt to access beyond end of device [ 253.961829][ T8619] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 254.123051][ T29] audit: type=1800 audit(2000000024.689:643): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 254.627347][ T7158] syz-executor.2: attempt to access beyond end of device [ 254.627347][ T7158] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.662329][ T8623] loop4: detected capacity change from 0 to 2048 [ 254.668247][ T7158] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 254.747917][ T8623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.882994][ T8628] loop3: detected capacity change from 0 to 1024 [ 254.892884][ T8623] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.942744][ T8623] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 255.003332][ T8623] EXT4-fs (loop4): This should not happen!! Data will be lost [ 255.003332][ T8623] [ 255.045449][ T8623] EXT4-fs (loop4): Total free blocks count 0 [ 255.051593][ T8623] EXT4-fs (loop4): Free/Dirty block details [ 255.063966][ T8628] loop3: detected capacity change from 0 to 512 [ 255.075494][ T8623] EXT4-fs (loop4): free_blocks=2415919104 [ 255.081273][ T8623] EXT4-fs (loop4): dirty_blocks=32 [ 255.117189][ T8623] EXT4-fs (loop4): Block reservation details [ 255.147663][ T8623] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 255.152318][ T8628] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 255.182202][ T8628] ext4_test_bit(bit=14, block=18) = 1 [ 255.187930][ T8628] is_bad_inode(inode)=0 [ 255.201059][ T8628] NEXT_ORPHAN(inode)=1023 [ 255.222279][ T8628] max_ino=32 [ 255.239835][ T8628] i_nlink=0 [ 255.271209][ T8628] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.3: corrupted xattr block 19: e_value size too large [ 255.294459][ T7497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.316658][ T8609] loop0: detected capacity change from 0 to 40427 [ 255.337112][ T8609] F2FS-fs (loop0): invalid crc value [ 255.355658][ T8628] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 255.372692][ T8609] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.376731][ T8628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.436260][ T8628] ext4 filesystem being mounted at /root/syzkaller-testdir2135529847/syzkaller.epq7qI/2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.532626][ T8609] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 255.538745][ T8628] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor.3: directory missing '.' [ 255.750246][ T8609] syz-executor.0: attempt to access beyond end of device [ 255.750246][ T8609] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 255.812320][ T8421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.824414][ T8609] syz-executor.0: attempt to access beyond end of device [ 255.824414][ T8609] loop0: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 256.079206][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.091516][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.602639][ T6682] syz-executor.0: attempt to access beyond end of device [ 256.602639][ T6682] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 256.643015][ T6682] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 257.201979][ T8635] loop4: detected capacity change from 0 to 32768 [ 257.246143][ T8635] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8635) [ 257.320467][ T8635] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 257.351050][ T8635] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 257.382593][ T8635] BTRFS info (device loop4): using free-space-tree [ 257.693693][ T7497] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 257.840786][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.609933][ T8646] loop2: detected capacity change from 0 to 32768 [ 258.667548][ T8646] gfs2: can't find protocol lock_nolockquota=off [ 258.940525][ T8682] loop3: detected capacity change from 0 to 512 [ 258.993911][ T8682] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 259.269772][ T8673] loop0: detected capacity change from 0 to 40427 [ 259.326015][ T8675] loop4: detected capacity change from 0 to 32768 [ 259.333945][ T8673] F2FS-fs (loop0): Found nat_bits in checkpoint [ 259.341618][ T8675] btrfs: Deprecated parameter 'usebackuproot' [ 259.348431][ T8675] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 259.358622][ T8675] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8675) [ 259.402569][ T8675] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.415442][ T8675] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 259.547983][ T8673] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 259.579526][ T8675] BTRFS info (device loop4): rebuilding free space tree [ 259.652114][ T8675] BTRFS info (device loop4): disabling free space tree [ 259.668285][ T8675] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 259.717330][ T8675] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 259.988082][ T8715] syz-executor.0: attempt to access beyond end of device [ 259.988082][ T8715] loop0: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 260.013271][ T8715] syz-executor.0: attempt to access beyond end of device [ 260.013271][ T8715] loop0: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 260.103011][ T29] audit: type=1800 audit(2000000030.749:644): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 260.568764][ T6682] syz-executor.0: attempt to access beyond end of device [ 260.568764][ T6682] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.630047][ T6682] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 261.016970][ T29] audit: type=1800 audit(2000000031.829:645): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 261.198774][ T8698] loop3: detected capacity change from 0 to 40427 [ 261.249007][ T8698] F2FS-fs (loop3): invalid crc value [ 261.272702][ T7497] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.313512][ T8698] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.399441][ T8717] loop2: detected capacity change from 0 to 32768 [ 261.444340][ T8717] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8717) [ 261.516975][ T8698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 261.524719][ T8717] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.556377][ T8717] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 261.595267][ T8717] BTRFS info (device loop2): using free-space-tree [ 261.686026][ T8698] syz-executor.3: attempt to access beyond end of device [ 261.686026][ T8698] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 261.853668][ T8698] syz-executor.3: attempt to access beyond end of device [ 261.853668][ T8698] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 262.006304][ T8421] syz-executor.3: attempt to access beyond end of device [ 262.006304][ T8421] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 262.019306][ T8741] loop4: detected capacity change from 0 to 128 [ 262.058345][ T8421] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 262.164761][ T8741] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.247130][ T8741] ext4 filesystem being mounted at /root/syzkaller-testdir365186260/syzkaller.xXZXhw/79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.386182][ T8749] netlink: 4716 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.418004][ T7158] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 262.468235][ T8749] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.477123][ T7497] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.521934][ T29] audit: type=1326 audit(2000000033.319:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f386e07cee9 code=0x0 [ 263.077728][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.149196][ T8767] loop0: detected capacity change from 0 to 128 [ 263.194937][ T8767] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.247702][ T8767] ext4 filesystem being mounted at /root/syzkaller-testdir215403662/syzkaller.Omw3u0/172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.320280][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.572166][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.606300][ T6682] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.791448][ T8773] loop3: detected capacity change from 0 to 8192 [ 263.812808][ T8773] REISERFS warning (device loop3): super-6503 reiserfs_getopt: the option "notail" does not require an argument [ 263.812808][ T8773] [ 263.827643][ T5111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.833257][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.846825][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.857634][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.858179][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.876631][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.884078][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.064251][ T8761] loop2: detected capacity change from 0 to 32768 [ 264.105886][ T8761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8761) [ 264.180159][ T8761] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.212351][ T8761] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 264.250855][ T8761] BTRFS info (device loop2): using free-space-tree [ 264.285387][ T12] bridge_slave_1: left allmulticast mode [ 264.291088][ T12] bridge_slave_1: left promiscuous mode [ 264.296911][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.309109][ T12] bridge_slave_0: left allmulticast mode [ 264.314789][ T12] bridge_slave_0: left promiscuous mode [ 264.321348][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.499987][ T8803] loop1: detected capacity change from 0 to 1024 [ 264.672798][ T8803] hfsplus: catalog searching failed [ 265.490879][ T8137] hfsplus: b-tree write err: -5, ino 4 [ 265.544549][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.559302][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.571810][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.581021][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.598590][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 265.606443][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.711488][ T7158] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.005647][ T5111] Bluetooth: hci1: command tx timeout [ 266.437225][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.458239][ T12] bond0 (unregistering): Released all slaves [ 267.153193][ T12] hsr_slave_0: left promiscuous mode [ 267.171960][ T12] hsr_slave_1: left promiscuous mode [ 267.194422][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.215445][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.245936][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.253386][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.374645][ T12] veth1_macvtap: left promiscuous mode [ 267.400761][ T12] veth0_macvtap: left promiscuous mode [ 267.411046][ T12] veth1_vlan: left promiscuous mode [ 267.429270][ T12] veth0_vlan: left promiscuous mode [ 267.669753][ T8829] loop1: detected capacity change from 0 to 40427 [ 267.676525][ T5111] Bluetooth: hci2: command tx timeout [ 267.731675][ T8829] F2FS-fs (loop1): Found nat_bits in checkpoint [ 267.795679][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.873410][ T8829] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 268.077657][ T5111] Bluetooth: hci1: command tx timeout [ 268.322064][ T8840] syz-executor.1: attempt to access beyond end of device [ 268.322064][ T8840] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 268.347142][ T8840] syz-executor.1: attempt to access beyond end of device [ 268.347142][ T8840] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 268.437906][ T29] audit: type=1800 audit(2000000039.079:647): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 268.921824][ T7042] syz-executor.1: attempt to access beyond end of device [ 268.921824][ T7042] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.941401][ T7042] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 269.551478][ T12] team0 (unregistering): Port device team_slave_1 removed [ 269.591233][ T8842] loop1: detected capacity change from 0 to 256 [ 269.651412][ T12] team0 (unregistering): Port device team_slave_0 removed [ 269.755617][ T5111] Bluetooth: hci2: command tx timeout [ 269.958136][ T8848] loop3: detected capacity change from 0 to 1024 [ 269.969188][ T8848] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 269.987936][ T8848] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.005353][ T8848] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 270.020948][ T8848] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 270.043661][ T8848] journal_load_superblock: Cannot read journal superblock [ 270.050933][ T8848] EXT4-fs (loop3): Could not load journal inode [ 270.156723][ T5111] Bluetooth: hci1: command tx timeout [ 270.199846][ T8850] loop3: detected capacity change from 0 to 1024 [ 270.566279][ T8777] chnl_net:caif_netlink_parms(): no params data found [ 270.984431][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.002281][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.020018][ T8777] bridge_slave_0: entered allmulticast mode [ 271.036805][ T8777] bridge_slave_0: entered promiscuous mode [ 271.062748][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 271.090046][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.108002][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.129455][ T8777] bridge_slave_1: entered allmulticast mode [ 271.141929][ T8777] bridge_slave_1: entered promiscuous mode [ 271.788048][ T5145] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 271.845431][ T5111] Bluetooth: hci2: command tx timeout [ 271.849217][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.892988][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.918162][ T29] audit: type=1326 audit(2000000042.729:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f386e07a667 code=0x7ffc0000 [ 271.959432][ T29] audit: type=1326 audit(2000000042.729:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f386e040329 code=0x7ffc0000 [ 272.016370][ T29] audit: type=1326 audit(2000000042.729:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f386e07a667 code=0x7ffc0000 [ 272.105390][ T29] audit: type=1326 audit(2000000042.729:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f386e040329 code=0x7ffc0000 [ 272.151331][ T29] audit: type=1326 audit(2000000042.729:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 272.175588][ T29] audit: type=1326 audit(2000000042.729:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f386e07a667 code=0x7ffc0000 [ 272.189258][ T8777] team0: Port device team_slave_0 added [ 272.197861][ T29] audit: type=1326 audit(2000000042.729:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f386e040329 code=0x7ffc0000 [ 272.197906][ T29] audit: type=1326 audit(2000000042.749:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f386e07a667 code=0x7ffc0000 [ 272.215261][ T8897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.226635][ T29] audit: type=1326 audit(2000000042.749:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f386e040329 code=0x7ffc0000 [ 272.247751][ T8897] IPv6: NLM_F_CREATE should be set when creating new route [ 272.247811][ T8897] IPv6: NLM_F_CREATE should be set when creating new route [ 272.283487][ T5145] usb 3-1: device not accepting address 7, error -71 [ 272.284885][ T5111] Bluetooth: hci1: command tx timeout [ 272.314411][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.335628][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.342909][ T8808] bridge_slave_0: entered allmulticast mode [ 272.361938][ T8808] bridge_slave_0: entered promiscuous mode [ 272.374748][ T8777] team0: Port device team_slave_1 added [ 272.413756][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.427385][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.439115][ T8808] bridge_slave_1: entered allmulticast mode [ 272.472984][ T8808] bridge_slave_1: entered promiscuous mode [ 272.561716][ T8905] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.580772][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.864303][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.898632][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.912077][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.981086][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.049636][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.065176][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.139766][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.182087][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.330186][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.373909][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.379135][ T8903] loop1: detected capacity change from 0 to 40427 [ 273.407314][ T8903] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 273.420980][ T8903] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 273.443015][ T8903] F2FS-fs (loop1): Found nat_bits in checkpoint [ 273.523687][ T8903] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 273.562063][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.584324][ T8903] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 273.593537][ T8903] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 273.630161][ T8808] team0: Port device team_slave_0 added [ 273.660505][ T8903] syz-executor.1: attempt to access beyond end of device [ 273.660505][ T8903] loop1: rw=34817, sector=77824, nr_sectors = 2088 limit=40427 [ 273.693709][ T8777] hsr_slave_0: entered promiscuous mode [ 273.706819][ T8777] hsr_slave_1: entered promiscuous mode [ 273.713167][ T8917] syz-executor.1: attempt to access beyond end of device [ 273.713167][ T8917] loop1: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 273.730666][ T8777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.738673][ T8777] Cannot create hsr debugfs directory [ 273.759314][ T8808] team0: Port device team_slave_1 added [ 273.766688][ T8903] syz-executor.1: attempt to access beyond end of device [ 273.766688][ T8903] loop1: rw=2049, sector=81792, nr_sectors = 128 limit=40427 [ 273.783413][ T8903] syz-executor.1: attempt to access beyond end of device [ 273.783413][ T8903] loop1: rw=2049, sector=49152, nr_sectors = 8 limit=40427 [ 273.879634][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.893958][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.925445][ T5111] Bluetooth: hci2: command tx timeout [ 273.974190][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.213216][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.226627][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.607953][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.774498][ T8932] fuse: Bad value for 'fd' [ 274.879193][ T8933] loop3: detected capacity change from 0 to 256 [ 275.086783][ T12] bridge_slave_1: left allmulticast mode [ 275.098785][ T12] bridge_slave_1: left promiscuous mode [ 275.117403][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.206487][ T12] bridge_slave_0: left allmulticast mode [ 275.214732][ T12] bridge_slave_0: left promiscuous mode [ 275.229400][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.499729][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 275.514749][ T12] ip6gretap1 (unregistering): left promiscuous mode [ 276.279751][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.341749][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.364669][ T8953] loop2: detected capacity change from 0 to 40427 [ 276.373820][ T8953] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 276.386047][ T12] bond0 (unregistering): Released all slaves [ 276.389497][ T8953] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 276.426409][ T12] bond1 (unregistering): Released all slaves [ 276.450594][ T8953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 276.596554][ T8953] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 276.646213][ T8953] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 276.653682][ T8953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 276.751356][ T8808] hsr_slave_0: entered promiscuous mode [ 276.778979][ T8808] hsr_slave_1: entered promiscuous mode [ 276.812198][ T8808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.822634][ T8808] Cannot create hsr debugfs directory [ 276.824748][ T8953] syz-executor.2: attempt to access beyond end of device [ 276.824748][ T8953] loop2: rw=34817, sector=77824, nr_sectors = 2088 limit=40427 [ 276.888275][ T8967] syz-executor.2: attempt to access beyond end of device [ 276.888275][ T8967] loop2: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 277.099538][ T8953] syz-executor.2: attempt to access beyond end of device [ 277.099538][ T8953] loop2: rw=2049, sector=81792, nr_sectors = 128 limit=40427 [ 277.151048][ T8953] syz-executor.2: attempt to access beyond end of device [ 277.151048][ T8953] loop2: rw=2049, sector=49152, nr_sectors = 8 limit=40427 [ 277.955531][ T8958] loop3: detected capacity change from 0 to 40427 [ 278.046566][ T8958] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 278.054429][ T8958] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 278.072582][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.086162][ T8976] loop1: detected capacity change from 0 to 256 [ 278.094174][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.106618][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.116367][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.138531][ T8958] F2FS-fs (loop3): Found nat_bits in checkpoint [ 278.178139][ T12] veth1_macvtap: left promiscuous mode [ 278.185708][ T12] veth0_macvtap: left promiscuous mode [ 278.191543][ T12] veth1_vlan: left promiscuous mode [ 278.197124][ T12] veth0_vlan: left promiscuous mode [ 278.221141][ T8958] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 278.273971][ T8958] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 278.294162][ T8958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 278.388097][ T8958] syz-executor.3: attempt to access beyond end of device [ 278.388097][ T8958] loop3: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 278.419758][ T8985] syz-executor.3: attempt to access beyond end of device [ 278.419758][ T8985] loop3: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 278.635731][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 278.761504][ T8987] loop2: detected capacity change from 0 to 512 [ 278.784533][ T8987] EXT4-fs: Ignoring removed oldalloc option [ 278.791195][ T8987] EXT4-fs: Ignoring removed nobh option [ 278.818705][ T8987] EXT4-fs error (device loop2): __ext4_iget:4906: inode #11: block 1: comm syz-executor.2: invalid block [ 278.830642][ T8987] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 278.851717][ T8987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.020498][ T7158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.428294][ T12] team0 (unregistering): Port device team_slave_1 removed [ 279.550565][ T12] team0 (unregistering): Port device team_slave_0 removed [ 279.574110][ T5148] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 279.785608][ T5148] usb 2-1: Using ep0 maxpacket: 8 [ 279.795774][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.828956][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.865212][ T5148] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 279.879647][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.912199][ T5148] usb 2-1: config 0 descriptor?? [ 280.158813][ T5148] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 280.181091][ T5148] usb 2-1: USB disconnect, device number 8 [ 280.219246][ T5148] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 280.279215][ T9023] loop3: detected capacity change from 0 to 256 [ 281.804279][ T9051] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 282.185021][ T9037] loop2: detected capacity change from 0 to 32768 [ 282.246877][ T9037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9037) [ 282.293881][ T9037] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.306982][ T9037] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 282.516062][ T9037] BTRFS info (device loop2): using free-space-tree [ 283.083835][ T8777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.154670][ T9084] loop3: detected capacity change from 0 to 256 [ 283.174087][ T9084] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿ18446744073709551615%ÿ-öñÈ\÷ꘄôžÝb»ÑôòuÛGj‰?;ÊNf·þÚ¿ˆžaºlº¾b4E¶ÕÃ’Êß{]Šƒd~¢Ôüe ˜r©¥FŠLPYšº’sÊh*æAÑ茬bÒ±Ùµ úÊP@p:~!¿]' [ 283.193312][ T8777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.193527][ T7158] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.221831][ T8777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.233253][ T9079] loop1: detected capacity change from 0 to 256 [ 283.392576][ T8777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.694731][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.732143][ T9094] mkiss: ax0: crc mode is auto. [ 283.928458][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.965839][ T9104] loop2: detected capacity change from 0 to 256 [ 283.992793][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.032832][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.040026][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.045777][ T9104] FAT-fs (loop2): Directory bread(block 64) failed [ 284.052784][ T8808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.056976][ T9104] FAT-fs (loop2): Directory bread(block 65) failed [ 284.080202][ T9104] FAT-fs (loop2): Directory bread(block 66) failed [ 284.096320][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.103481][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.111264][ T9104] FAT-fs (loop2): Directory bread(block 67) failed [ 284.124571][ T9104] FAT-fs (loop2): Directory bread(block 68) failed [ 284.138615][ T9104] FAT-fs (loop2): Directory bread(block 69) failed [ 284.157338][ T9104] FAT-fs (loop2): Directory bread(block 70) failed [ 284.158934][ T9111] loop1: detected capacity change from 0 to 24 [ 284.163890][ T9104] FAT-fs (loop2): Directory bread(block 71) failed [ 284.183391][ T9111] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 284.205912][ T8808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.214440][ T9104] FAT-fs (loop2): Directory bread(block 72) failed [ 284.221967][ T9111] romfs: bad initial checksum on dev loop1. [ 284.245313][ T9104] FAT-fs (loop2): Directory bread(block 73) failed [ 284.270229][ T8808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.347414][ T8808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.573019][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.590218][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.675835][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.733027][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.740239][ T8232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.770796][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.778012][ T8232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.885860][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.297578][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.373720][ T9159] loop2: detected capacity change from 0 to 256 [ 285.411452][ T9159] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 285.448463][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 285.448480][ T29] audit: type=1800 audit(2000000056.259:680): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=1048722 res=0 errno=0 [ 285.482043][ T8808] veth0_vlan: entered promiscuous mode [ 285.536110][ T8808] veth1_vlan: entered promiscuous mode [ 285.590740][ T8777] veth0_vlan: entered promiscuous mode [ 285.605589][ T5151] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 285.654450][ T8777] veth1_vlan: entered promiscuous mode [ 285.692593][ T8808] veth0_macvtap: entered promiscuous mode [ 285.709385][ T9161] loop2: detected capacity change from 0 to 256 [ 285.727807][ T8808] veth1_macvtap: entered promiscuous mode [ 285.763143][ T9161] FAT-fs (loop2): Directory bread(block 64) failed [ 285.775848][ T9161] FAT-fs (loop2): Directory bread(block 65) failed [ 285.782527][ T9161] FAT-fs (loop2): Directory bread(block 66) failed [ 285.790906][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.802334][ T9161] FAT-fs (loop2): Directory bread(block 67) failed [ 285.812320][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.817642][ T5151] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.823463][ T9161] FAT-fs (loop2): Directory bread(block 68) failed [ 285.837880][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.850011][ T9161] FAT-fs (loop2): Directory bread(block 69) failed [ 285.854256][ T5151] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.856812][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.877361][ T9161] FAT-fs (loop2): Directory bread(block 70) failed [ 285.884046][ T9161] FAT-fs (loop2): Directory bread(block 71) failed [ 285.885635][ T5151] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.890817][ T9161] FAT-fs (loop2): Directory bread(block 72) failed [ 285.907274][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.914690][ T9141] loop3: detected capacity change from 0 to 32768 [ 285.918640][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.928399][ T5151] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.934791][ T9161] FAT-fs (loop2): Directory bread(block 73) failed [ 285.956216][ T5151] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.967846][ T5151] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.981741][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.993084][ T5151] usb 2-1: Product: syz [ 286.010229][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.016339][ T9141] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.022196][ T5151] usb 2-1: Manufacturer: syz [ 286.035334][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.052844][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.056589][ T5151] cdc_wdm 2-1:1.0: skipping garbage [ 286.063976][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.071435][ T5151] cdc_wdm 2-1:1.0: skipping garbage [ 286.079944][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.094686][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.106684][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.130499][ T5151] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 286.142984][ T5151] cdc_wdm 2-1:1.0: Unknown control protocol [ 286.146923][ T8777] veth0_macvtap: entered promiscuous mode [ 286.178498][ T8808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.197015][ T8808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.210493][ T8808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.220725][ T8808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.248432][ T8777] veth1_macvtap: entered promiscuous mode [ 286.328989][ T5151] usb 2-1: USB disconnect, device number 9 [ 286.331728][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.347087][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.358511][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.369383][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.372903][ T9141] XFS (loop3): Ending clean mount [ 286.388639][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.418283][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.435434][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.446979][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.459687][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.553901][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.566797][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.578648][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.590593][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.604279][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.619073][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.630787][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.641815][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.654000][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.655662][ T8421] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.666077][ T8777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.684702][ T8777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.693885][ T8777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.702947][ T8777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.758504][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.780128][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.903495][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.934695][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.048430][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.055301][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.090502][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.148449][ T8137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.169665][ T8137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.338369][ T9184] loop0: detected capacity change from 0 to 256 [ 287.376725][ T9189] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 287.455680][ T9184] FAT-fs (loop0): Directory bread(block 64) failed [ 287.458290][ T9192] evm: overlay not supported [ 287.473135][ T9184] FAT-fs (loop0): Directory bread(block 65) failed [ 287.493636][ T9184] FAT-fs (loop0): Directory bread(block 66) failed [ 287.501493][ T29] audit: type=1804 audit(2000000058.299:681): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1259633400/syzkaller.MlCXHr/0/bus/bus" dev="overlay" ino=1969 res=1 errno=0 [ 287.513677][ T9184] FAT-fs (loop0): Directory bread(block 67) failed [ 287.554878][ T9184] FAT-fs (loop0): Directory bread(block 68) failed [ 287.573242][ T9184] FAT-fs (loop0): Directory bread(block 69) failed [ 287.592652][ T9184] FAT-fs (loop0): Directory bread(block 70) failed [ 287.601012][ T9184] FAT-fs (loop0): Directory bread(block 71) failed [ 287.613419][ T9184] FAT-fs (loop0): Directory bread(block 72) failed [ 287.622506][ T9184] FAT-fs (loop0): Directory bread(block 73) failed [ 287.869844][ T9202] binder: BINDER_SET_CONTEXT_MGR already set [ 287.883991][ T9202] binder: 9201:9202 ioctl 4018620d 200001c0 returned -16 [ 287.896814][ T9206] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 287.901820][ T9204] loop3: detected capacity change from 0 to 256 [ 287.983102][ T9204] FAT-fs (loop3): Directory bread(block 64) failed [ 288.013875][ T9204] FAT-fs (loop3): Directory bread(block 65) failed [ 288.051410][ T9207] loop1: detected capacity change from 0 to 2048 [ 288.058874][ T9204] FAT-fs (loop3): Directory bread(block 66) failed [ 288.075372][ T9204] FAT-fs (loop3): Directory bread(block 67) failed [ 288.082089][ T9204] FAT-fs (loop3): Directory bread(block 68) failed [ 288.113132][ T9204] FAT-fs (loop3): Directory bread(block 69) failed [ 288.131954][ T9204] FAT-fs (loop3): Directory bread(block 70) failed [ 288.150949][ T9204] FAT-fs (loop3): Directory bread(block 71) failed [ 288.158036][ T9207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.175445][ T9204] FAT-fs (loop3): Directory bread(block 72) failed [ 288.193973][ T9204] FAT-fs (loop3): Directory bread(block 73) failed [ 288.330004][ T9221] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.457302][ T9198] loop2: detected capacity change from 0 to 32768 [ 288.490583][ T9198] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 288.705413][ T29] audit: type=1804 audit(2000000059.499:682): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3078498179/syzkaller.GcM1Dy/135/bus/bus" dev="overlay" ino=1972 res=1 errno=0 [ 288.761212][ T9198] XFS (loop2): Ending clean mount [ 289.008349][ T9238] binder: BINDER_SET_CONTEXT_MGR already set [ 289.050909][ T9238] binder: 9237:9238 ioctl 4018620d 200001c0 returned -16 [ 289.063319][ T7158] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.270187][ T9245] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 290.458503][ T9250] loop1: detected capacity change from 0 to 32768 [ 290.561516][ T9250] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.749330][ T9250] XFS (loop1): Ending clean mount [ 290.781150][ T9250] XFS (loop1): Quotacheck needed: Please wait. [ 290.806490][ T9256] loop3: detected capacity change from 0 to 32768 [ 290.863089][ T9250] XFS (loop1): Quotacheck: Done. [ 290.977479][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 291.034377][ T7042] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.074919][ T9256] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 291.095402][ T9256] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 291.202834][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 291.211115][ T9256] bcachefs (loop3): alloc_read... done [ 291.218034][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.228006][ T9256] bcachefs (loop3): stripes_read... done [ 291.238493][ T9256] bcachefs (loop3): snapshots_read... done [ 291.255401][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.263170][ T9256] bcachefs (loop3): journal_replay... done [ 291.295267][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 291.300283][ T9256] bcachefs (loop3): resume_logged_ops... done [ 291.306684][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.334302][ T9256] bcachefs (loop3): going read-write [ 291.366528][ T8] hub 5-1:4.0: USB hub found [ 291.380975][ T9256] bcachefs (loop3): done starting filesystem [ 291.570809][ T8] hub 5-1:4.0: 2 ports detected [ 291.666523][ T8421] bcachefs (loop3): shutting down [ 291.671598][ T8421] bcachefs (loop3): going read-only [ 291.744884][ T8421] bcachefs (loop3): finished waiting for writes to stop [ 291.770257][ T8421] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 291.836290][ T8421] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 291.867031][ T8421] bcachefs (loop3): shutdown complete, journal seq 11 [ 291.874906][ T8421] bcachefs (loop3): marking filesystem clean [ 291.905382][ T8] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 291.912471][ T8] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 292.023447][ T8421] bcachefs (loop3): shutdown complete [ 292.049730][ T8] usb 5-1: USB disconnect, device number 4 [ 292.826866][ T51] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 293.064304][ T9290] binder: BINDER_SET_CONTEXT_MGR already set [ 293.086389][ T9290] binder: 9289:9290 ioctl 4018620d 200001c0 returned -16 [ 293.354161][ T9284] loop1: detected capacity change from 0 to 32768 [ 293.376171][ T9292] loop4: detected capacity change from 0 to 256 [ 293.416335][ T9284] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.437497][ T9292] FAT-fs (loop4): Directory bread(block 64) failed [ 293.459446][ T9292] FAT-fs (loop4): Directory bread(block 65) failed [ 293.485524][ T9292] FAT-fs (loop4): Directory bread(block 66) failed [ 293.554779][ T9292] FAT-fs (loop4): Directory bread(block 67) failed [ 293.607963][ T9292] FAT-fs (loop4): Directory bread(block 68) failed [ 293.644971][ T9292] FAT-fs (loop4): Directory bread(block 69) failed [ 293.684463][ T9292] FAT-fs (loop4): Directory bread(block 70) failed [ 293.697899][ T9292] FAT-fs (loop4): Directory bread(block 71) failed [ 293.704599][ T9292] FAT-fs (loop4): Directory bread(block 72) failed [ 293.707749][ T9284] XFS (loop1): Ending clean mount [ 293.743025][ T9292] FAT-fs (loop4): Directory bread(block 73) failed [ 293.989286][ T7042] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.345460][ T9303] binder: BINDER_SET_CONTEXT_MGR already set [ 295.376192][ T9303] binder: 9302:9303 ioctl 4018620d 200001c0 returned -16 [ 296.634978][ T9305] loop4: detected capacity change from 0 to 32768 [ 296.855305][ T9305] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 296.915209][ T9305] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 297.007716][ T9305] bcachefs (loop4): alloc_read... done [ 297.013507][ T9305] bcachefs (loop4): stripes_read... done [ 297.055179][ T9305] bcachefs (loop4): snapshots_read... done [ 297.092118][ T9305] bcachefs (loop4): journal_replay... done [ 297.143809][ T9305] bcachefs (loop4): resume_logged_ops... done [ 297.159766][ T9305] bcachefs (loop4): going read-write [ 297.193061][ T9305] bcachefs (loop4): done starting filesystem [ 297.441848][ T8777] bcachefs (loop4): shutting down [ 297.447021][ T8777] bcachefs (loop4): going read-only [ 297.452255][ T8777] bcachefs (loop4): finished waiting for writes to stop [ 297.461606][ T8777] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9 [ 297.491179][ T8777] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 297.519823][ T8777] bcachefs (loop4): shutdown complete, journal seq 11 [ 297.532087][ T8777] bcachefs (loop4): marking filesystem clean [ 297.583031][ T8777] bcachefs (loop4): shutdown complete [ 299.085214][ T5145] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 299.115618][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 299.163778][ T9329] loop2: detected capacity change from 0 to 256 [ 299.287046][ T5145] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 299.305762][ T5145] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.339674][ T5145] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 299.378053][ T5145] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.393973][ T9331] binder: BINDER_SET_CONTEXT_MGR already set [ 299.413081][ T5145] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 299.425294][ T9331] binder: 9330:9331 ioctl 4018620d 200001c0 returned -16 [ 299.435475][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 299.443500][ T5145] usb 5-1: Product: syz [ 299.475565][ T5145] usb 5-1: Manufacturer: syz [ 299.490690][ T5145] cdc_wdm 5-1:1.0: skipping garbage [ 299.498322][ T5145] cdc_wdm 5-1:1.0: skipping garbage [ 299.517920][ T5145] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 299.560652][ T5145] cdc_wdm 5-1:1.0: Unknown control protocol [ 299.756755][ T5145] usb 5-1: USB disconnect, device number 5 [ 300.076121][ T29] audit: type=1326 audit(2000000070.889:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9338 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feeca07cee9 code=0x0 [ 300.896232][ T51] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 5 [ 301.325829][ T9355] syz-executor.4[9355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.367656][ T9355] syz-executor.4[9355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.226257][ T5145] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 304.457120][ T5145] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 304.471473][ T5145] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.505150][ T5145] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.514162][ T5145] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.576809][ T5145] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.605128][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.613169][ T5145] usb 5-1: Product: syz [ 304.635129][ T5145] usb 5-1: Manufacturer: syz [ 304.668903][ T5145] cdc_wdm 5-1:1.0: skipping garbage [ 304.674161][ T5145] cdc_wdm 5-1:1.0: skipping garbage [ 304.705273][ T5145] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 304.711220][ T5145] cdc_wdm 5-1:1.0: Unknown control protocol [ 304.936168][ T5145] usb 5-1: USB disconnect, device number 6 [ 305.479093][ T9383] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 306.457313][ T9398] loop4: detected capacity change from 0 to 4096 [ 306.486964][ T9398] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 306.546701][ T9398] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 307.637547][ T9411] loop4: detected capacity change from 0 to 16 [ 307.669186][ T9411] erofs: (device loop4): mounted with root inode @ nid 36. [ 307.716417][ T9411] erofs: (device loop4): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 307.755171][ T9411] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 307.958013][ T9413] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 309.200194][ T9427] loop4: detected capacity change from 0 to 128 [ 309.230629][ T9427] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 309.289080][ T9427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.572079][ T9429] bridge0: port 3(macvlan2) entered blocking state [ 309.609484][ T9429] bridge0: port 3(macvlan2) entered disabled state [ 309.628691][ T9429] macvlan2: entered allmulticast mode [ 309.659106][ T9429] macvlan2: entered promiscuous mode [ 309.839247][ T9431] loop2: detected capacity change from 0 to 512 [ 309.903823][ T9431] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 309.924226][ T9431] System zones: 0-2, 18-18, 34-35 [ 310.011232][ T9431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.065396][ T9431] ext4 filesystem being mounted at /root/syzkaller-testdir1517801259/syzkaller.6MQdX1/142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.286586][ T7158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.531057][ T9440] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 311.034212][ T9438] loop4: detected capacity change from 0 to 32768 [ 311.059271][ T9438] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9438) [ 311.099623][ T9438] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 311.129831][ T9438] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 311.165262][ T9438] BTRFS info (device loop4): using free-space-tree [ 311.547598][ T8777] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.284693][ T9473] loop4: detected capacity change from 0 to 512 [ 312.312627][ T9473] EXT4-fs: Ignoring removed i_version option [ 312.355108][ T9473] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.439507][ T9473] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz-executor.4: inode #13: comm syz-executor.4: iget: illegal inode # [ 312.483409][ T9473] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 312.511441][ T9473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.514967][ T9476] loop2: detected capacity change from 0 to 256 [ 312.623633][ T9473] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz-executor.4: resize_inode disabled but reserved GDT blocks non-zero [ 312.661848][ T9476] FAT-fs (loop2): Directory bread(block 64) failed [ 312.680893][ T9476] FAT-fs (loop2): Directory bread(block 65) failed [ 312.701035][ T9476] FAT-fs (loop2): Directory bread(block 66) failed [ 312.720189][ T9476] FAT-fs (loop2): Directory bread(block 67) failed [ 312.751853][ T8777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.765403][ T9476] FAT-fs (loop2): Directory bread(block 68) failed [ 312.772106][ T9476] FAT-fs (loop2): Directory bread(block 69) failed [ 312.801798][ T9476] FAT-fs (loop2): Directory bread(block 70) failed [ 312.825287][ T9476] FAT-fs (loop2): Directory bread(block 71) failed [ 312.831993][ T9476] FAT-fs (loop2): Directory bread(block 72) failed [ 312.870613][ T9476] FAT-fs (loop2): Directory bread(block 73) failed [ 313.328968][ T9483] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 313.365009][ T9483] tipc: Can't bind to reserved service type 1 [ 313.385020][ T29] audit: type=1804 audit(2000000084.189:684): pid=9483 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1259633400/syzkaller.MlCXHr/48/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 314.106819][ T9497] loop2: detected capacity change from 0 to 4096 [ 314.132150][ T9497] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 314.268773][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.435197][ T29] audit: type=1800 audit(2000000085.229:685): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 314.526042][ T29] audit: type=1800 audit(2000000085.279:686): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 314.572190][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.671747][ T29] audit: type=1804 audit(2000000085.479:687): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1259633400/syzkaller.MlCXHr/50/file0" dev="sda1" ino=1952 res=1 errno=0 [ 314.770228][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.960768][ T9506] loop4: detected capacity change from 0 to 256 [ 314.977656][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.997098][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.003829][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.017109][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.027780][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.048300][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 315.056911][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.094075][ T9506] FAT-fs (loop4): Directory bread(block 64) failed [ 315.113701][ T9509] loop2: detected capacity change from 0 to 1024 [ 315.135781][ T9506] FAT-fs (loop4): Directory bread(block 65) failed [ 315.152549][ T9506] FAT-fs (loop4): Directory bread(block 66) failed [ 315.175187][ T9506] FAT-fs (loop4): Directory bread(block 67) failed [ 315.181865][ T9506] FAT-fs (loop4): Directory bread(block 68) failed [ 315.239617][ T9509] hfsplus: failed to load catalog file [ 315.252999][ T9506] FAT-fs (loop4): Directory bread(block 69) failed [ 315.278479][ T9506] FAT-fs (loop4): Directory bread(block 70) failed [ 315.295294][ T9506] FAT-fs (loop4): Directory bread(block 71) failed [ 315.302242][ T9506] FAT-fs (loop4): Directory bread(block 72) failed [ 315.328823][ T9506] FAT-fs (loop4): Directory bread(block 73) failed [ 315.381836][ T12] bridge_slave_1: left allmulticast mode [ 315.401681][ T12] bridge_slave_1: left promiscuous mode [ 315.418940][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.448010][ T12] bridge_slave_0: left allmulticast mode [ 315.472435][ T12] bridge_slave_0: left promiscuous mode [ 315.479482][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.148892][ T5101] Bluetooth: hci2: command tx timeout [ 317.530729][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.540793][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.752014][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.775987][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.801690][ T12] bond0 (unregistering): Released all slaves [ 318.166556][ T9503] chnl_net:caif_netlink_parms(): no params data found [ 318.676528][ T12] hsr_slave_0: left promiscuous mode [ 318.716138][ T9551] loop1: detected capacity change from 0 to 32768 [ 318.723938][ T9551] btrfs: Deprecated parameter 'usebackuproot' [ 318.730159][ T9551] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 318.730242][ T12] hsr_slave_1: left promiscuous mode [ 318.748922][ T9551] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9551) [ 318.775515][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.806830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.824694][ T9551] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 318.855268][ T9551] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 318.863964][ T9551] BTRFS info (device loop1): using free-space-tree [ 318.871450][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.883335][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.933207][ T12] veth1_macvtap: left promiscuous mode [ 318.952474][ T12] veth0_macvtap: left promiscuous mode [ 318.965792][ T12] veth1_vlan: left promiscuous mode [ 318.971635][ T12] veth0_vlan: left promiscuous mode [ 319.080811][ T9551] BTRFS info (device loop1): rebuilding free space tree [ 319.196025][ T5101] Bluetooth: hci2: command tx timeout [ 319.377080][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.393906][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.404714][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.418455][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.456491][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 319.476031][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.661065][ T7042] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 319.864628][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.886917][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.895443][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.903551][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.919843][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 319.966266][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.402141][ T12] team0 (unregistering): Port device team_slave_1 removed [ 320.456456][ T12] team0 (unregistering): Port device team_slave_0 removed [ 320.959612][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.994024][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 321.068059][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.095279][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.102611][ T9503] bridge_slave_0: entered allmulticast mode [ 321.114481][ T9503] bridge_slave_0: entered promiscuous mode [ 321.123958][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.139281][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.150356][ T9503] bridge_slave_1: entered allmulticast mode [ 321.163927][ T9503] bridge_slave_1: entered promiscuous mode [ 321.285634][ T5102] Bluetooth: hci2: command tx timeout [ 321.440105][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.507079][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.527766][ T5102] Bluetooth: hci4: command tx timeout [ 322.087475][ T5102] Bluetooth: hci1: command tx timeout [ 322.407655][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 322.423024][ T9610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.455627][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 322.483183][ T9503] team0: Port device team_slave_0 added [ 322.519102][ T9503] team0: Port device team_slave_1 added [ 322.596374][ T9617] loop1: detected capacity change from 0 to 2048 [ 322.655546][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.662527][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.706227][ T9620] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.763156][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.792380][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.794682][ T29] audit: type=1804 audit(2000000093.599:688): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3078498179/syzkaller.GcM1Dy/167/file2/file2" dev="loop1" ino=16 res=1 errno=0 [ 322.835897][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.853807][ T9617] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 322.880603][ T9617] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 322.904832][ T9617] Remounting filesystem read-only [ 322.905291][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.956265][ T7042] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 322.977683][ T7042] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 322.989235][ T7042] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 323.004517][ T7042] NILFS (loop1): discard dirty block: blocknr=24, size=1024 [ 323.019999][ T7042] NILFS (loop1): discard dirty block: blocknr=25, size=1024 [ 323.038445][ T7042] NILFS (loop1): discard dirty block: blocknr=26, size=1024 [ 323.065952][ T7042] NILFS (loop1): discard dirty page: offset=4096, ino=16 [ 323.101533][ T7042] NILFS (loop1): discard dirty block: blocknr=27, size=1024 [ 323.119452][ T7042] NILFS (loop1): discard dirty block: blocknr=28, size=1024 [ 323.133652][ T7042] NILFS (loop1): discard dirty block: blocknr=29, size=1024 [ 323.147211][ T7042] NILFS (loop1): discard dirty block: blocknr=30, size=1024 [ 323.165489][ T7042] NILFS (loop1): discard dirty page: offset=8192, ino=16 [ 323.181340][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.193510][ T7042] NILFS (loop1): discard dirty block: blocknr=31, size=1024 [ 323.201067][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.220825][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.232655][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.279705][ T7042] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 323.292027][ T7042] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 323.309939][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.330860][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.346866][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.359039][ T5102] Bluetooth: hci2: command tx timeout [ 323.366620][ T9503] hsr_slave_0: entered promiscuous mode [ 323.373318][ T9503] hsr_slave_1: entered promiscuous mode [ 323.380014][ T7042] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 323.386985][ T9503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.395285][ T7042] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 323.400880][ T9503] Cannot create hsr debugfs directory [ 323.402609][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.424860][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.446426][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.450722][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.466127][ T7042] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 323.472834][ T7042] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 323.482558][ T7042] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 323.493890][ T7042] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 323.516602][ T7042] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.595297][ T5102] Bluetooth: hci4: command tx timeout [ 323.620729][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.661047][ T9581] chnl_net:caif_netlink_parms(): no params data found [ 323.670112][ T29] audit: type=1804 audit(2000000094.479:689): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3078498179/syzkaller.GcM1Dy/168/file0" dev="sda1" ino=1951 res=1 errno=0 [ 323.796553][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.943820][ T9583] chnl_net:caif_netlink_parms(): no params data found [ 324.138982][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.155288][ T5102] Bluetooth: hci1: command tx timeout [ 324.161355][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.168776][ T9581] bridge_slave_0: entered allmulticast mode [ 324.195466][ T9581] bridge_slave_0: entered promiscuous mode [ 324.280309][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.303282][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.327846][ T9581] bridge_slave_1: entered allmulticast mode [ 324.349934][ T9581] bridge_slave_1: entered promiscuous mode [ 324.424145][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 324.451527][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.471075][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.492875][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.544404][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.567277][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.574793][ T9583] bridge_slave_0: entered allmulticast mode [ 324.588166][ T9647] loop1: detected capacity change from 0 to 32768 [ 324.590472][ T9583] bridge_slave_0: entered promiscuous mode [ 324.610754][ T9647] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9647) [ 324.626147][ T9659] syz-executor.2 (9659): /proc/9659/oom_adj is deprecated, please use /proc/9659/oom_score_adj instead. [ 324.658359][ T9647] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 324.676317][ T9647] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 324.694891][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.707364][ T9647] BTRFS info (device loop1): using free-space-tree [ 324.733867][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.744280][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.760920][ T9583] bridge_slave_1: entered allmulticast mode [ 324.771198][ T9583] bridge_slave_1: entered promiscuous mode [ 324.781982][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.921700][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.032074][ T7042] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 325.050986][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.144232][ T9581] team0: Port device team_slave_0 added [ 325.206605][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.244046][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.319135][ T9581] team0: Port device team_slave_1 added [ 325.367365][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.477668][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.524549][ T9583] team0: Port device team_slave_0 added [ 325.538732][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.553463][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.586974][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.613863][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.630865][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.662036][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.685480][ T5102] Bluetooth: hci4: command tx timeout [ 325.709843][ T9583] team0: Port device team_slave_1 added [ 325.792663][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.825187][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.871573][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.896573][ T9684] loop1: detected capacity change from 0 to 32768 [ 325.919933][ T9684] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 325.991291][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.999686][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.016445][ T9698] loop2: detected capacity change from 0 to 1024 [ 326.034170][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.051839][ T9698] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 326.064953][ T9698] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 326.075316][ T9698] EXT4-fs error (device loop2): ext4_get_journal_inode:5752: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 326.097029][ T9684] XFS (loop1): Ending clean mount [ 326.110025][ T9698] EXT4-fs (loop2): no journal found [ 326.115549][ T9698] EXT4-fs (loop2): can't get journal size [ 326.126879][ T9684] XFS (loop1): Quotacheck needed: Please wait. [ 326.135452][ T9698] EXT4-fs (loop2): failed to initialize system zone (-22) [ 326.142681][ T9698] EXT4-fs (loop2): mount failed [ 326.173880][ T9684] XFS (loop1): Quotacheck: Done. [ 326.235289][ T5102] Bluetooth: hci1: command tx timeout [ 326.271882][ T9581] hsr_slave_0: entered promiscuous mode [ 326.296486][ T9581] hsr_slave_1: entered promiscuous mode [ 326.303106][ T9581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.312393][ T9581] Cannot create hsr debugfs directory [ 326.347817][ T9503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.398488][ T9583] hsr_slave_0: entered promiscuous mode [ 326.405734][ T9583] hsr_slave_1: entered promiscuous mode [ 326.412812][ T9583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.427032][ T9583] Cannot create hsr debugfs directory [ 326.433892][ T9503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.439942][ T7042] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.457310][ T9503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.514917][ T9503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.595138][ T12] macvlan2: left allmulticast mode [ 326.601023][ T12] macvlan2: left promiscuous mode [ 326.615389][ T12] bridge0: port 3(macvlan2) entered disabled state [ 326.634840][ T12] bridge_slave_1: left allmulticast mode [ 326.643056][ T12] bridge_slave_1: left promiscuous mode [ 326.655261][ T29] audit: type=1326 audit(2000000097.449:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9703 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feeca07cee9 code=0x0 [ 326.678006][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.708071][ T12] bridge_slave_0: left allmulticast mode [ 326.713957][ T12] bridge_slave_0: left promiscuous mode [ 326.723556][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.744898][ T12] bridge_slave_1: left allmulticast mode [ 326.752478][ T12] bridge_slave_1: left promiscuous mode [ 326.766464][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.785358][ T12] bridge_slave_0: left allmulticast mode [ 326.795194][ T12] bridge_slave_0: left promiscuous mode [ 326.807095][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.240454][ T9710] loop1: detected capacity change from 0 to 8192 [ 327.250879][ T9710] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.578625][ T9716] loop1: detected capacity change from 0 to 256 [ 327.606757][ T9716] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 327.757254][ T5102] Bluetooth: hci4: command tx timeout [ 327.923180][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.943992][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.008999][ T12] bond0 (unregistering): Released all slaves [ 328.042787][ T9714] loop2: detected capacity change from 0 to 32768 [ 328.051528][ T9714] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9714) [ 328.068129][ T9714] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 328.081219][ T9714] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 328.092584][ T9714] BTRFS info (device loop2): using free-space-tree [ 328.225835][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.244637][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.268200][ T12] bond0 (unregistering): Released all slaves [ 328.294349][ T12] bond1 (unregistering): Released all slaves [ 328.326267][ T5102] Bluetooth: hci1: command tx timeout [ 328.406793][ T7158] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 328.932704][ T9741] loop1: detected capacity change from 0 to 4096 [ 328.947371][ T9741] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 328.993782][ T9741] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 329.188091][ T9746] loop1: detected capacity change from 0 to 1024 [ 329.268514][ T7074] hfsplus: b-tree write err: -5, ino 4 [ 329.347792][ T12] hsr_slave_0: left promiscuous mode [ 329.362590][ T12] hsr_slave_1: left promiscuous mode [ 329.371322][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.384386][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.392559][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.405304][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.430493][ T12] hsr_slave_0: left promiscuous mode [ 329.439539][ T12] hsr_slave_1: left promiscuous mode [ 329.452359][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.460230][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.474572][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.482121][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.574817][ T12] veth1_macvtap: left promiscuous mode [ 329.580757][ T12] veth0_macvtap: left promiscuous mode [ 329.587661][ T12] veth1_vlan: left promiscuous mode [ 329.593241][ T12] veth0_vlan: left promiscuous mode [ 329.611675][ T12] veth1_macvtap: left promiscuous mode [ 329.617565][ T12] veth0_macvtap: left promiscuous mode [ 329.623367][ T12] veth1_vlan: left promiscuous mode [ 329.628922][ T12] veth0_vlan: left promiscuous mode [ 330.285139][ T29] audit: type=1326 audit(2000000101.089:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 330.328334][ T29] audit: type=1326 audit(2000000101.119:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 330.351296][ T29] audit: type=1326 audit(2000000101.119:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 330.398678][ T29] audit: type=1326 audit(2000000101.119:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 330.421272][ T29] audit: type=1326 audit(2000000101.119:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 330.460144][ T29] audit: type=1326 audit(2000000101.119:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 330.482663][ T29] audit: type=1326 audit(2000000101.119:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 330.530293][ T29] audit: type=1326 audit(2000000101.119:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f386e07a667 code=0x7ffc0000 [ 330.579826][ T29] audit: type=1326 audit(2000000101.119:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f386e040329 code=0x7ffc0000 [ 330.609850][ T29] audit: type=1326 audit(2000000101.119:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f386e07cee9 code=0x7ffc0000 [ 330.638231][ T9759] loop1: detected capacity change from 0 to 256 [ 330.651901][ T9759] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 331.776520][ T12] team0 (unregistering): Port device team_slave_1 removed [ 331.869304][ T12] team0 (unregistering): Port device team_slave_0 removed [ 332.655685][ T9771] loop1: detected capacity change from 0 to 40427 [ 332.664168][ T9771] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 332.675072][ T9771] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 332.704302][ T9771] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 332.743577][ T9771] F2FS-fs (loop1): Found nat_bits in checkpoint [ 332.820027][ T9771] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 332.834040][ T9771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 333.222766][ T12] team0 (unregistering): Port device team_slave_1 removed [ 333.305367][ T12] team0 (unregistering): Port device team_slave_0 removed [ 333.792890][ T9777] loop1: detected capacity change from 0 to 40427 [ 333.802865][ T9777] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 333.818895][ T9777] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 333.834055][ T9777] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 333.846505][ T9777] F2FS-fs (loop1): Found nat_bits in checkpoint [ 333.942720][ T9777] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 333.950172][ T9777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 334.250852][ T9503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.324845][ T9503] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.375305][ T9581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.485635][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.492842][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.536948][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.544107][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.580804][ T9581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.610623][ T9581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.677448][ T9581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.211336][ T9583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.261042][ T9583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.274394][ T9786] loop2: detected capacity change from 0 to 32768 [ 335.290691][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.313576][ T9583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.334736][ T9583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.393944][ T9581] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.437894][ T9786] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 335.466658][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.473774][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.476078][ T9786] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 335.493921][ T9503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.538007][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.546344][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.613310][ T9786] bcachefs (loop2): alloc_read... done [ 335.625797][ T9786] bcachefs (loop2): stripes_read... done [ 335.641842][ T9786] bcachefs (loop2): snapshots_read... done [ 335.661632][ T9786] bcachefs (loop2): journal_replay... done [ 335.693316][ T9786] bcachefs (loop2): resume_logged_ops... done [ 335.721720][ T9786] bcachefs (loop2): going read-write [ 335.734848][ T9786] bcachefs (loop2): done starting filesystem [ 335.784397][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.846487][ T7158] bcachefs (loop2): shutting down [ 335.865497][ T9503] veth0_vlan: entered promiscuous mode [ 335.897628][ T7158] bcachefs (loop2): going read-only [ 335.902926][ T7158] bcachefs (loop2): finished waiting for writes to stop [ 335.937071][ T9503] veth1_vlan: entered promiscuous mode [ 335.966385][ T7158] bcachefs (loop2): flushing journal and stopping allocators, journal seq 9 [ 335.973065][ T9583] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.001418][ T7158] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 336.016853][ T7158] bcachefs (loop2): shutdown complete, journal seq 11 [ 336.024537][ T7158] bcachefs (loop2): marking filesystem clean [ 336.079390][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.086575][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.102723][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.108084][ T7158] bcachefs (loop2): shutdown complete [ 336.109917][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.201210][ T9503] veth0_macvtap: entered promiscuous mode [ 336.234632][ T9583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.258956][ T9583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.321027][ T9503] veth1_macvtap: entered promiscuous mode [ 336.352658][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.421566][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.443397][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.455125][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.471185][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.486056][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.538486][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.553248][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.576842][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.624097][ T9503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.656474][ T9503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.682899][ T9503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.696878][ T9503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.827313][ T9581] veth0_vlan: entered promiscuous mode [ 336.864498][ T9581] veth1_vlan: entered promiscuous mode [ 336.993266][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.079134][ T7074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.087301][ T7074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.089504][ T9581] veth0_macvtap: entered promiscuous mode [ 337.192700][ T9581] veth1_macvtap: entered promiscuous mode [ 337.275716][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.278574][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.283549][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.335149][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.345001][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.370063][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.385247][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.405173][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.445340][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.467074][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.525088][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.550385][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.585623][ T9825] loop0: detected capacity change from 0 to 512 [ 337.591964][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.608654][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.625929][ T9825] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 337.658220][ T9581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.695245][ T9581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.695778][ T9825] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value out of bounds [ 337.703968][ T9581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.704000][ T9581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.764715][ T9825] EXT4-fs (loop0): Remounting filesystem read-only [ 337.774293][ T9825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.917524][ T9583] veth0_vlan: entered promiscuous mode [ 337.960983][ T9583] veth1_vlan: entered promiscuous mode [ 337.966363][ T9503] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.071844][ T9816] loop1: detected capacity change from 0 to 32768 [ 338.075961][ T9820] loop2: detected capacity change from 0 to 32768 [ 338.097425][ T9820] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 8bc5e8cb should be 29d2fb78 [ 338.115752][ T5148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.123578][ T5148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.139226][ T9583] veth0_macvtap: entered promiscuous mode [ 338.145622][ T9820] bcachefs (/dev/loop2): error reading superblock: Not a bcachefs superblock layout [ 338.149834][ T9583] veth1_macvtap: entered promiscuous mode [ 338.194969][ T9816] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 338.252923][ T5148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.271796][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.285983][ T9840] loop0: detected capacity change from 0 to 512 [ 338.293233][ T9840] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.305418][ T5148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.340622][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.354837][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.378998][ T9840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 338.393964][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.415952][ T9840] System zones: 1-12 [ 338.420554][ T9840] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: iget: bad extended attribute block 262144 [ 338.425720][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.452213][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.460250][ T9840] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 338.462097][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.485407][ T9816] XFS (loop1): Ending clean mount [ 338.488483][ T9816] XFS (loop1): Quotacheck needed: Please wait. [ 338.491994][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.508934][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.534505][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.536139][ T9840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.549968][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.590830][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.619821][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.661744][ T9816] XFS (loop1): Quotacheck: Done. [ 338.661750][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.661769][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.663459][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.734058][ T9583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.755588][ T9583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.768224][ T9583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.788623][ T9583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.047580][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.068505][ T7042] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.069415][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.135731][ T5145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.143610][ T5145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.243186][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 339.243203][ T29] audit: type=1326 audit(2000000110.049:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c38a7cee9 code=0x7ffc0000 [ 339.366493][ T29] audit: type=1326 audit(2000000110.049:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c38a7cee9 code=0x7ffc0000 [ 339.430862][ T29] audit: type=1326 audit(2000000110.049:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c38a7cee9 code=0x7ffc0000 [ 339.506791][ T29] audit: type=1326 audit(2000000110.049:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c38a7cee9 code=0x7ffc0000 [ 339.594724][ T29] audit: type=1326 audit(2000000110.049:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c38a7cee9 code=0x7ffc0000 [ 339.657537][ T29] audit: type=1326 audit(2000000110.049:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c38a7cee9 code=0x7ffc0000 [ 339.712444][ T29] audit: type=1326 audit(2000000110.049:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c38a7a667 code=0x7ffc0000 [ 339.767636][ T29] audit: type=1326 audit(2000000110.049:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c38a40329 code=0x7ffc0000 [ 339.769137][ T9503] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.818616][ T9852] loop1: detected capacity change from 0 to 1024 [ 339.831099][ T29] audit: type=1326 audit(2000000110.049:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c38a7a667 code=0x7ffc0000 [ 339.874230][ T29] audit: type=1326 audit(2000000110.049:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9848 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c38a40329 code=0x7ffc0000 [ 339.875211][ T9852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.006691][ T9845] loop3: detected capacity change from 0 to 32768 [ 340.040887][ T9845] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9845) [ 340.123805][ T9846] loop2: detected capacity change from 0 to 40427 [ 340.143148][ T9846] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 340.172615][ T9846] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 340.228409][ T9845] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 340.261429][ T9846] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 340.266109][ T9845] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 340.359027][ T9846] F2FS-fs (loop2): Found nat_bits in checkpoint [ 340.375253][ T9845] BTRFS info (device loop3): using free-space-tree [ 340.506795][ T9869] loop0: detected capacity change from 0 to 256 [ 340.679454][ T9846] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 340.732971][ T9846] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 340.762208][ T7042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.168824][ T9581] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 341.944120][ T9856] loop4: detected capacity change from 0 to 40427 [ 342.520988][ T9856] F2FS-fs (loop4): invalid crc value [ 342.687954][ T9856] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.764180][ T9914] loop0: detected capacity change from 0 to 1024 [ 342.827336][ T9856] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 342.850831][ T9914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.868810][ T9920] loop2: detected capacity change from 0 to 8 [ 342.912985][ T9920] unable to read inode lookup table [ 343.213050][ T9893] loop1: detected capacity change from 0 to 32768 [ 343.328506][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.388892][ T9893] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9893) [ 343.482905][ T9893] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 343.541684][ T9893] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 343.635155][ T9893] BTRFS info (device loop1): using free-space-tree [ 343.711230][ T9503] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.003319][ T9916] loop3: detected capacity change from 0 to 40427 [ 344.047175][ T9916] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 344.084153][ T9916] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 344.096141][ T7042] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 344.122025][ T9916] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 344.173383][ T9916] F2FS-fs (loop3): Found nat_bits in checkpoint [ 344.504154][ T9916] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 344.525530][ T9916] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 344.689183][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 344.689228][ T29] audit: type=1800 audit(2000000115.499:783): pid=9916 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 344.831024][ T29] audit: type=1804 audit(2000000115.529:784): pid=9916 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3491677195/syzkaller.Sda6kY/3/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 344.928603][ T9948] loop4: detected capacity change from 0 to 32768 [ 344.950588][ T9948] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9948) [ 344.968958][ T9948] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 344.981576][ T9948] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 344.990656][ T9948] BTRFS info (device loop4): using free-space-tree [ 345.341293][ T9990] xt_NFQUEUE: number of total queues is 0 [ 345.364903][ T9988] loop0: detected capacity change from 0 to 2048 [ 345.409018][ T9988] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 345.467838][ T9988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.818152][ T9583] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 345.897850][ T9965] loop2: detected capacity change from 0 to 40427 [ 345.930391][ T9965] F2FS-fs (loop2): invalid crc value [ 345.968012][ T9965] F2FS-fs (loop2): Found nat_bits in checkpoint [ 346.140256][ T9965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 347.331182][T10000] loop3: detected capacity change from 0 to 32768 [ 347.374727][T10000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10000) [ 347.408221][T10000] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 347.485750][T10000] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 347.494601][T10000] BTRFS info (device loop3): using free-space-tree [ 347.848738][ T9581] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 349.670909][T10052] loop4: detected capacity change from 0 to 256 [ 349.775857][T10050] loop2: detected capacity change from 0 to 32768 [ 349.786126][T10050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10050) [ 349.832415][T10050] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 349.850673][T10050] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 349.860711][T10050] BTRFS info (device loop2): using free-space-tree [ 351.196291][ T7158] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 352.697173][T10095] loop2: detected capacity change from 0 to 512 [ 352.709172][T10095] EXT4-fs (loop2): Test dummy encryption mode enabled [ 352.746483][T10095] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 352.766797][T10095] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 352.787357][T10095] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.889842][ T7158] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 355.444491][T10106] loop2: detected capacity change from 0 to 40427 [ 355.461021][T10106] F2FS-fs (loop2): invalid crc value [ 355.478666][T10106] F2FS-fs (loop2): Found nat_bits in checkpoint [ 355.554701][T10106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 376.264465][ T5101] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.278016][ T5101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.287121][ T5101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.295473][ T5101] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.304973][ T5101] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 376.315307][ T5101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 376.415852][ T5102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.430628][ T5102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.443594][ T5102] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.457826][ T5102] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 376.466003][ T5102] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 376.475496][ T5102] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.395603][ T5101] Bluetooth: hci5: command tx timeout [ 378.555237][ T5101] Bluetooth: hci6: command tx timeout [ 378.958675][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.965088][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.047809][ T5102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.062943][ T5102] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.074693][ T5102] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.101383][ T5102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.109222][ T5102] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 380.116616][ T5102] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.475180][ T5102] Bluetooth: hci5: command tx timeout [ 380.640881][ T5102] Bluetooth: hci6: command tx timeout [ 382.165240][ T5102] Bluetooth: hci7: command tx timeout [ 382.555249][ T5102] Bluetooth: hci5: command tx timeout [ 382.715225][ T5102] Bluetooth: hci6: command tx timeout [ 382.829126][ T5101] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 382.849922][ T5101] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 382.863159][ T5101] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 382.877085][ T5101] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 382.884815][ T5101] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 382.893982][ T5101] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 384.241731][ T5102] Bluetooth: hci7: command tx timeout [ 384.637867][ T5102] Bluetooth: hci5: command tx timeout [ 384.795163][ T5102] Bluetooth: hci6: command tx timeout [ 384.955367][ T5102] Bluetooth: hci8: command tx timeout [ 386.037617][ T5101] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 386.049954][ T5101] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 386.062543][ T5101] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 386.076786][ T5101] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 386.084563][ T5101] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 386.092820][ T5101] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 386.315399][ T5102] Bluetooth: hci7: command tx timeout [ 387.035434][ T5102] Bluetooth: hci8: command tx timeout [ 388.155410][ T5102] Bluetooth: hci9: command tx timeout [ 388.397857][ T5102] Bluetooth: hci7: command tx timeout [ 389.127523][ T5102] Bluetooth: hci8: command tx timeout [ 390.235244][ T5102] Bluetooth: hci9: command tx timeout [ 391.195264][ T5102] Bluetooth: hci8: command tx timeout [ 392.315293][ T5102] Bluetooth: hci9: command tx timeout [ 394.395128][ T5102] Bluetooth: hci9: command tx timeout [ 437.363798][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 440.403684][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.414575][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.688873][ T5111] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 441.707608][ T5111] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 441.733411][T10135] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 441.735782][T10138] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 441.755817][T10135] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 441.764386][T10138] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 441.770606][T10135] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 441.792174][T10138] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 441.792207][T10135] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 441.799786][T10138] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 441.819370][T10138] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 441.832760][T10130] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 442.486671][ T5111] Bluetooth: hci4: command 0x0406 tx timeout [ 442.493099][T10130] Bluetooth: hci1: command 0x0406 tx timeout [ 443.835214][ T5101] Bluetooth: hci10: command tx timeout [ 443.915153][ T5101] Bluetooth: hci11: command tx timeout [ 445.131329][ T5102] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 445.146035][ T5102] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 445.155529][ T5102] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 445.163748][ T5102] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 445.173523][ T5102] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 445.181914][ T5102] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 445.915095][ T5102] Bluetooth: hci10: command tx timeout [ 445.995095][ T5102] Bluetooth: hci11: command tx timeout [ 447.195240][ T5102] Bluetooth: hci12: command tx timeout [ 447.944103][ T5101] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 447.958105][ T5101] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 447.978828][ T5101] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 447.988794][ T5101] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 447.996053][T10130] Bluetooth: hci10: command tx timeout [ 448.008948][ T5101] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 448.018321][ T5101] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 448.085209][ T5102] Bluetooth: hci11: command tx timeout [ 449.275231][ T5102] Bluetooth: hci12: command tx timeout [ 450.075123][ T5101] Bluetooth: hci10: command tx timeout [ 450.075173][ T5102] Bluetooth: hci13: command tx timeout [ 450.155105][ T5102] Bluetooth: hci11: command tx timeout [ 450.986537][ T5101] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 451.003871][ T5101] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 451.012714][ T5101] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 451.026449][ T5101] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 451.034473][ T5101] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 451.042150][ T5101] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 451.355087][ T5101] Bluetooth: hci12: command tx timeout [ 452.155080][ T5101] Bluetooth: hci13: command tx timeout [ 453.115180][ T5101] Bluetooth: hci14: command tx timeout [ 453.435224][ T5101] Bluetooth: hci12: command tx timeout [ 454.235101][ T5101] Bluetooth: hci13: command tx timeout [ 455.195255][ T5101] Bluetooth: hci14: command tx timeout [ 456.315240][ T5101] Bluetooth: hci13: command tx timeout [ 457.275205][ T5101] Bluetooth: hci14: command tx timeout [ 459.365149][ T5101] Bluetooth: hci14: command tx timeout [ 498.804399][T10130] Bluetooth: hci6: command 0x0406 tx timeout [ 498.804505][ T5111] Bluetooth: hci5: command 0x0406 tx timeout [ 501.847889][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.854231][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.755458][ T30] INFO: task syz-executor.0:10005 blocked for more than 143 seconds. [ 503.763571][ T30] Not tainted 6.10.0-rc2-syzkaller-00007-gf06ce441457d #0 [ 503.784537][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.795043][ T30] task:syz-executor.0 state:D stack:27056 pid:10005 tgid:10004 ppid:9503 flags:0x00000006 2033/05/18 03:37:54 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 503.810367][ T30] Call Trace: [ 503.830583][ T30] [ 503.833567][ T30] __schedule+0x1796/0x49d0 [ 503.844500][ T30] ? __pfx___schedule+0x10/0x10 [ 503.849603][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.855247][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 503.860834][ T30] ? schedule+0x90/0x320 [ 503.865184][ T30] schedule+0x14b/0x320 [ 503.873840][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.879425][ T30] __mutex_lock+0x6a4/0xd70 [ 503.884053][ T30] ? __mutex_lock+0x527/0xd70 [ 503.893621][ T30] ? __tun_chr_ioctl+0x48f/0x2400 [ 503.898744][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.903817][ T30] ? smk_access+0x4ab/0x4e0 [ 503.908454][ T30] __tun_chr_ioctl+0x48f/0x2400 [ 503.913334][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 503.918958][ T5101] Bluetooth: hci7: command 0x0406 tx timeout [ 503.951224][ T30] ? __fget_files+0x3f6/0x470 [ 503.961836][ T30] ? __fget_files+0x29/0x470 [ 503.972250][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 503.977292][ T30] ? security_file_ioctl+0x87/0xb0 [ 503.982427][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 503.993341][ T30] __se_sys_ioctl+0xfc/0x170 [ 504.006414][ T30] do_syscall_64+0xf3/0x230 [ 504.010981][ T30] ? clear_bhb_loop+0x35/0x90 [ 504.015755][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.021692][ T30] RIP: 0033:0x7f188967cee9 [ 504.027075][ T30] RSP: 002b:00007f188a4440c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.035583][ T30] RAX: ffffffffffffffda RBX: 00007f18897b3fa0 RCX: 00007f188967cee9 [ 504.043576][ T30] RDX: 0000000020000480 RSI: 00000000400454da RDI: 0000000000000003 [ 504.051715][ T30] RBP: 00007f18896c947f R08: 0000000000000000 R09: 0000000000000000 [ 504.060426][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.068483][ T30] R13: 000000000000000b R14: 00007f18897b3fa0 R15: 00007ffd70abdf88 [ 504.076557][ T30] [ 504.079629][ T30] INFO: task syz-executor.0:10006 blocked for more than 143 seconds. [ 504.093026][ T30] Not tainted 6.10.0-rc2-syzkaller-00007-gf06ce441457d #0 [ 504.100793][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.114297][ T30] task:syz-executor.0 state:D stack:27872 pid:10006 tgid:10004 ppid:9503 flags:0x00000006 [ 504.124607][ T30] Call Trace: [ 504.128748][ T30] [ 504.131707][ T30] __schedule+0x1796/0x49d0 [ 504.136354][ T30] ? __pfx___schedule+0x10/0x10 [ 504.141240][ T30] ? __pfx_lock_release+0x10/0x10 [ 504.146321][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 504.151819][ T30] ? schedule+0x90/0x320 [ 504.156173][ T30] schedule+0x14b/0x320 [ 504.160946][ T30] schedule_preempt_disabled+0x13/0x30 [ 504.166483][ T30] __mutex_lock+0x6a4/0xd70 [ 504.171021][ T30] ? __mutex_lock+0x527/0xd70 [ 504.175796][ T30] ? __tun_chr_ioctl+0x48f/0x2400 [ 504.180849][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 504.185933][ T30] ? __might_fault+0xc6/0x120 [ 504.190634][ T30] __tun_chr_ioctl+0x48f/0x2400 [ 504.195571][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 504.200884][ T30] ? __fget_files+0x3f6/0x470 [ 504.205593][ T30] ? __fget_files+0x29/0x470 [ 504.210285][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 504.220179][ T30] ? security_file_ioctl+0x87/0xb0 [ 504.225397][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 504.231297][ T30] __se_sys_ioctl+0xfc/0x170 [ 504.240925][ T30] do_syscall_64+0xf3/0x230 [ 504.245553][ T30] ? clear_bhb_loop+0x35/0x90 [ 504.250253][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.260137][ T30] RIP: 0033:0x7f188967cee9 [ 504.264574][ T30] RSP: 002b:00007f188a4230c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.275678][ T30] RAX: ffffffffffffffda RBX: 00007f18897b4070 RCX: 00007f188967cee9 [ 504.283773][ T30] RDX: 0000000020000180 RSI: 00000000400454ca RDI: 0000000000000003 [ 504.296870][ T30] RBP: 00007f18896c947f R08: 0000000000000000 R09: 0000000000000000 [ 504.304885][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.316407][ T30] R13: 000000000000006e R14: 00007f18897b4070 R15: 00007ffd70abdf88 [ 504.324429][ T30] [ 504.344419][ T30] INFO: task syz-executor.0:10007 blocked for more than 143 seconds. [ 504.358575][ T30] Not tainted 6.10.0-rc2-syzkaller-00007-gf06ce441457d #0 [ 504.369414][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.381639][ T30] task:syz-executor.0 state:D stack:28960 pid:10007 tgid:10004 ppid:9503 flags:0x00000006 [ 504.394286][ T30] Call Trace: [ 504.401090][ T30] [ 504.404054][ T30] __schedule+0x1796/0x49d0 [ 504.410903][ T30] ? __pfx___schedule+0x10/0x10 [ 504.415930][ T30] ? __pfx_lock_release+0x10/0x10 [ 504.420971][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 504.426585][ T30] ? schedule+0x90/0x320 [ 504.430844][ T30] schedule+0x14b/0x320 [ 504.437745][ T30] schedule_preempt_disabled+0x13/0x30 [ 504.443238][ T30] __mutex_lock+0x6a4/0xd70 [ 504.447843][ T30] ? __mutex_lock+0x527/0xd70 [ 504.452647][ T30] ? __tun_chr_ioctl+0x48f/0x2400 [ 504.460775][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 504.466485][ T30] ? __might_fault+0xc6/0x120 [ 504.471205][ T30] __tun_chr_ioctl+0x48f/0x2400 [ 504.476139][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 504.481546][ T30] ? __fget_files+0x3f6/0x470 [ 504.486324][ T30] ? __fget_files+0x29/0x470 [ 504.490961][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 504.496153][ T30] ? security_file_ioctl+0x87/0xb0 [ 504.501291][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 504.506478][ T30] __se_sys_ioctl+0xfc/0x170 [ 50