last executing test programs: 1m9.443289899s ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f0000000d00)='0', 0x1) 1m9.154721926s ago: executing program 0 (id=158): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)) 1m8.901273563s ago: executing program 0 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/snd_hda_intel/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 46202403\x00', 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:00.0\x00', 0xd) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 1m7.904584549s ago: executing program 0 (id=165): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1m6.419897407s ago: executing program 0 (id=174): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000006c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r3, 0x0, r4}) 1m4.882672947s ago: executing program 0 (id=183): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f00000001c0)="bf74", 0x2}], 0x2}}], 0x1, 0x4400c800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xca7, 0x70bd25, 0x400000, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {}, {0x1, 0xfff1}}}, 0x24}}, 0x20040054) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1m4.320895521s ago: executing program 32 (id=183): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f00000001c0)="bf74", 0x2}], 0x2}}], 0x1, 0x4400c800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xca7, 0x70bd25, 0x400000, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {}, {0x1, 0xfff1}}}, 0x24}}, 0x20040054) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 34.461869254s ago: executing program 4 (id=337): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}], 0x1, 0x60cd894) close_range(r0, 0xffffffffffffffff, 0x0) 34.142520242s ago: executing program 4 (id=339): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000101c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 33.798656631s ago: executing program 4 (id=342): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 33.600503776s ago: executing program 4 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9f341a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f841, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0], 0x0, 0x5f6, &(0x7f0000000840)="$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") 33.104174319s ago: executing program 4 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xe, 0x7ff, 0x0}) 32.66219006s ago: executing program 4 (id=354): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x1004001, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r2) 32.145384883s ago: executing program 33 (id=354): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x1004001, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r2) 13.143607342s ago: executing program 2 (id=474): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0088a80180c2000002cd1008a2dc5886dd694f920600303a0000000000000000000000ffffe0000002ff02000000000000000000000000000104019078000000ff686bb28a000633fffc0100000000000000000000ffffffffffffb3e723cb02a479fcfd5ed5def56186e72c1b40f990edd03ed13b6e5856afb748b083d0009b3945"], 0x6a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 12.634760155s ago: executing program 2 (id=476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000020000000000000000850000007b00000095"], &(0x7f0000002100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 12.361787192s ago: executing program 2 (id=477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) close_range(r0, r0, 0x0) 12.057670279s ago: executing program 2 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1184, 0x0) 11.836735235s ago: executing program 2 (id=480): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_delroute={0x1c, 0x18, 0x901, 0x70bd2d, 0x25dfdbfb, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x9}}, 0x1c}}, 0x8000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850) 11.134642894s ago: executing program 2 (id=482): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x8, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2401c091}, 0x8000) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 10.557253498s ago: executing program 34 (id=482): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x8, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2401c091}, 0x8000) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 5.130998838s ago: executing program 5 (id=508): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x4a}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000140)={0x77359400}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4.826169665s ago: executing program 5 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="38010000fe00006b27766816b7a3eeca815270db14b055ca1413ce85e4307a601e2e94a3128f9be4fa2c0b70a9a56f2ded1e961a014f0c4d91e2a1a2cec10568ecb16051851cb1375b6fdc8f2cb39a84b6"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.574415202s ago: executing program 5 (id=505): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4073, &(0x7f0000000400)="$eJzszzFKA1EQBuA/iWsWWQiCVoIYLOxk7az2FuklZ7CyUHFvYikewHt4B0s9QiTKBtfYBoJ8XzHM7M/sey9st4+uKVefBkle5s/7SU6maev6O9z5Cke97foixV45TJXkev3ns6eN3h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANg24x/9sJfcJWlfb866uVyW3WWZH6W9bXJZJeXhJHkYpWiOBzlIpud/nDFK3pIMkrwnmU029xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D+56k3j33HVNffrq4+naZtilS4Wn+zOMQEAIAwDwYwYxCQmg4V2vzPw346zJ7lv+woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//xGEFjw=") r2 = syz_open_procfs(r1, &(0x7f0000000040)='comm\x00') write$binfmt_format(r2, 0x0, 0x0) 2.869271026s ago: executing program 1 (id=509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[], 0x0) 1.900857591s ago: executing program 3 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x4, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000ee850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) 1.900005971s ago: executing program 5 (id=517): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') close(0x3) fchdir(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.825477933s ago: executing program 1 (id=511): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/196, 0xc4}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 1.573045609s ago: executing program 3 (id=512): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.571933909s ago: executing program 5 (id=520): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) 1.54059046s ago: executing program 1 (id=513): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10, 0x0}, 0x804) 1.234270818s ago: executing program 3 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x2065, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0xf, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x6, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000009, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x200d3, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x6, 0x40fff, 0x1fb, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x18, 0x0, 0x8, 0x0, 0x9, 0x6, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7038, 0x8000, 0x2, 0xffffffff}, {0x3, 0x1, 0xf, 0x2, 0x0, 0x8000}, 0x200, 0xf, 0x538}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.193953039s ago: executing program 1 (id=515): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.011480644s ago: executing program 3 (id=516): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x626, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1a, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0x200f}) 747.68263ms ago: executing program 3 (id=518): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 604.034204ms ago: executing program 1 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100"], 0x60}, 0x1, 0xf000, 0x0, 0x4008000}, 0x20044800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000c010) 162.194536ms ago: executing program 1 (id=521): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r5, r4, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 42.026099ms ago: executing program 3 (id=522): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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") r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f00000002c0)=""/55, 0x37) 0s ago: executing program 5 (id=523): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)=[@wrmsr={0x65, 0x20, {0xfa4b3f5b9fa726d9, 0x49}}, @code={0xa, 0x71, {"b8010000000f01d9646a012e66440ff987ac36000066b81f000f00d00f20c035040000000f22c0c4a3791df81bb9800000c00f3235002000000f300faeaf0700000048b800000000000000000f23d00f21f835000000070f23f866b8ac008ee0"}}, @wrmsr={0x65, 0x20, {0x4000009f}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x31, 0xffffffff, 0x7, 0x1}}, @uexit={0x0, 0x18, 0x243b}, @nested_load_code={0x12e, 0x94, {0x3, "460f0093a300000066b8ea000f00d848b810cac236000000000f23c00f21f835000004000f23f848b825000000000000000f23c80f21f835040010000f23f8c744240038000000c744240200080000c7442406000000000f011424f0fe041eb990030000b800000000ba000000800f30430f01ca460f3566ba6100ed"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xe4e5, 0x91}}, @set_irq_handler={0xc8, 0x20, {0xe4, 0x1}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xa764, 0x5}}, @nested_load_syzos={0x136, 0x68, {0x0, 0x8, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x1, 0x6, 0x10}}, @nested_amd_stgi={0x17e, 0x10}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x3f, 0xa2a0, 0x9, 0x9}}, @set_irq_handler={0xc8, 0x20, {0x6b, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xe2c, 0x2}}, @code={0xa, 0x4c, {"0fc76cde11460f0966bad00466edf2abf3460f09c441fbe6ef66baf80cb8f647ed86ef66bafc0c66b8a90066ef66baa000b047ee0f08c481a815e9"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x75, 0x0, 0x1000, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x201b, 0x3, 0x101, 0x800}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2, 0x191}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x411}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 73.112560][ T5763] cgroup: Unknown subsys name 'net' [ 73.244873][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.034903][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.621759][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.631786][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.639563][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.647916][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.655643][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.664395][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.670514][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.671820][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.686870][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.687367][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.695653][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.701749][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.708842][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.716006][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.725788][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.729705][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.737024][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.743761][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.770705][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.780756][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.797779][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.810580][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.833154][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.841006][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.230534][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.267932][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.310463][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.381636][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.500816][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.508929][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.516236][ T5774] bridge_slave_0: entered allmulticast mode [ 77.524471][ T5774] bridge_slave_0: entered promiscuous mode [ 77.556258][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.564662][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.573386][ T5775] bridge_slave_0: entered allmulticast mode [ 77.581582][ T5775] bridge_slave_0: entered promiscuous mode [ 77.590311][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.597588][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.604763][ T5775] bridge_slave_1: entered allmulticast mode [ 77.612101][ T5775] bridge_slave_1: entered promiscuous mode [ 77.619673][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.626803][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.634188][ T5774] bridge_slave_1: entered allmulticast mode [ 77.641006][ T5774] bridge_slave_1: entered promiscuous mode [ 77.678536][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.714065][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.721583][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.728959][ T5778] bridge_slave_0: entered allmulticast mode [ 77.735741][ T5778] bridge_slave_0: entered promiscuous mode [ 77.745509][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.783230][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.790562][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.798291][ T5778] bridge_slave_1: entered allmulticast mode [ 77.805115][ T5778] bridge_slave_1: entered promiscuous mode [ 77.825443][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.835400][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.843040][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.850821][ T5777] bridge_slave_0: entered allmulticast mode [ 77.858102][ T5777] bridge_slave_0: entered promiscuous mode [ 77.876272][ T5774] team0: Port device team_slave_0 added [ 77.887425][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.896710][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.904696][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.912068][ T5777] bridge_slave_1: entered allmulticast mode [ 77.918987][ T5777] bridge_slave_1: entered promiscuous mode [ 77.936836][ T5774] team0: Port device team_slave_1 added [ 77.984441][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.014502][ T5775] team0: Port device team_slave_0 added [ 78.025706][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.036930][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.056528][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.063845][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.089859][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.103731][ T5775] team0: Port device team_slave_1 added [ 78.132293][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.163277][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.170481][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.197257][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.209305][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.216264][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.245171][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.274446][ T5778] team0: Port device team_slave_0 added [ 78.290769][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.297983][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.324300][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.340126][ T5777] team0: Port device team_slave_0 added [ 78.348378][ T5778] team0: Port device team_slave_1 added [ 78.388210][ T5777] team0: Port device team_slave_1 added [ 78.395303][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.402861][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.429034][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.477236][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.484231][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.510437][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.566551][ T5775] hsr_slave_0: entered promiscuous mode [ 78.572983][ T5775] hsr_slave_1: entered promiscuous mode [ 78.581279][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.588733][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.614715][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.630834][ T5774] hsr_slave_0: entered promiscuous mode [ 78.638389][ T5774] hsr_slave_1: entered promiscuous mode [ 78.644568][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.652776][ T5774] Cannot create hsr debugfs directory [ 78.680270][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.688160][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.714481][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.743795][ T5778] hsr_slave_0: entered promiscuous mode [ 78.751564][ T5778] hsr_slave_1: entered promiscuous mode [ 78.758771][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.766370][ T5778] Cannot create hsr debugfs directory [ 78.788184][ T5785] Bluetooth: hci1: command tx timeout [ 78.788200][ T5788] Bluetooth: hci2: command tx timeout [ 78.867616][ T5785] Bluetooth: hci0: command tx timeout [ 78.928113][ T5777] hsr_slave_0: entered promiscuous mode [ 78.934474][ T5777] hsr_slave_1: entered promiscuous mode [ 78.940369][ T5785] Bluetooth: hci3: command tx timeout [ 78.949896][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.957759][ T5777] Cannot create hsr debugfs directory [ 79.248089][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.265668][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.278804][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.299048][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.355131][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.370278][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.389461][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.400183][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.480005][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.510888][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.520350][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.543241][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.633765][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.643734][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.655689][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.680490][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.687810][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.750084][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.775303][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.782759][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.809788][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.816968][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.899753][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.922132][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.970556][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.000080][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.007291][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.019141][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.046820][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.054072][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.073991][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.081233][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.120529][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.127771][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.210101][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.283128][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.319835][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.326988][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.385702][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.392961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.475751][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.621160][ T5774] veth0_vlan: entered promiscuous mode [ 80.662789][ T5774] veth1_vlan: entered promiscuous mode [ 80.762312][ T5774] veth0_macvtap: entered promiscuous mode [ 80.784374][ T5774] veth1_macvtap: entered promiscuous mode [ 80.847832][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.858662][ T5785] Bluetooth: hci1: command tx timeout [ 80.858714][ T5788] Bluetooth: hci2: command tx timeout [ 80.875424][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.947676][ T5788] Bluetooth: hci0: command tx timeout [ 80.951338][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.970172][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.979996][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.989764][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.999133][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.013885][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.020893][ T5788] Bluetooth: hci3: command tx timeout [ 81.066886][ T5775] veth0_vlan: entered promiscuous mode [ 81.108255][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.134565][ T5775] veth1_vlan: entered promiscuous mode [ 81.186487][ T5778] veth0_vlan: entered promiscuous mode [ 81.223335][ T5778] veth1_vlan: entered promiscuous mode [ 81.273384][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.290465][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.335574][ T5775] veth0_macvtap: entered promiscuous mode [ 81.362367][ T5775] veth1_macvtap: entered promiscuous mode [ 81.379919][ T5777] veth0_vlan: entered promiscuous mode [ 81.394556][ T5778] veth0_macvtap: entered promiscuous mode [ 81.407463][ T5778] veth1_macvtap: entered promiscuous mode [ 81.416082][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.425821][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.429552][ T5777] veth1_vlan: entered promiscuous mode [ 81.483966][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.495154][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.526811][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.559975][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.571483][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.584225][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.595755][ T5777] veth0_macvtap: entered promiscuous mode [ 81.615109][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.627086][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.643826][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.654620][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.682249][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.686633][ T5837] syz.1.2[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.712031][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.716603][ T5837] loop1: detected capacity change from 0 to 512 [ 81.724231][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.738449][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.758627][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.783335][ T5777] veth1_macvtap: entered promiscuous mode [ 81.805595][ T5837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.819934][ T5837] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.822789][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.857575][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.869852][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.880424][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.891987][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.904959][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.914319][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.925097][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.933991][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.999530][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.022835][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.032887][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.044440][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.056272][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.067225][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.079042][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.113143][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.133663][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.145109][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.165879][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.186016][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.207323][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.220675][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.234210][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.271840][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.281450][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.293460][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.305061][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.367996][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.383098][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.562516][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.591789][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.611816][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.637640][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.730060][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.747469][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.795339][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.814833][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.923137][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.938886][ T5788] Bluetooth: hci2: command tx timeout [ 82.944779][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.955668][ T5788] Bluetooth: hci1: command tx timeout [ 83.019298][ T5788] Bluetooth: hci0: command tx timeout [ 83.020786][ T5857] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.097569][ T5788] Bluetooth: hci3: command tx timeout [ 84.741739][ T5890] loop2: detected capacity change from 0 to 32768 [ 84.788711][ T5835] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.847740][ T5890] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.998018][ T5835] usb 4-1: device descriptor read/64, error -71 [ 85.023457][ T5788] Bluetooth: hci1: command tx timeout [ 85.029228][ T5785] Bluetooth: hci2: command tx timeout [ 85.076324][ T5890] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 85.107393][ T5785] Bluetooth: hci0: command tx timeout [ 85.177772][ T5785] Bluetooth: hci3: command tx timeout [ 85.225192][ T5890] XFS (loop2): Starting recovery (logdev: internal) [ 85.295951][ T5890] XFS (loop2): Ending recovery (logdev: internal) [ 85.317764][ T5835] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.487855][ T5835] usb 4-1: device descriptor read/64, error -71 [ 85.617731][ T5835] usb usb4-port1: attempt power cycle [ 85.714853][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.756105][ T5954] loop0: detected capacity change from 0 to 40427 [ 85.772489][ T5954] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 85.787078][ T5954] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.806435][ T5954] F2FS-fs (loop0): invalid crc value [ 86.077372][ T5835] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.181995][ T5835] usb 4-1: device descriptor read/8, error -71 [ 86.446266][ T5954] F2FS-fs (loop0): Start checkpoint disabled! [ 86.492157][ T5954] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 86.517780][ T5954] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 86.527237][ T5835] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.573160][ T5835] usb 4-1: device descriptor read/8, error -71 [ 86.632167][ T5993] loop2: detected capacity change from 0 to 512 [ 86.723305][ T5835] usb usb4-port1: unable to enumerate USB device [ 86.742137][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.792871][ T5993] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.797063][ T5907] kworker/u4:17: attempt to access beyond end of device [ 86.797063][ T5907] loop0: rw=1, sector=45096, nr_sectors = 40 limit=40427 [ 86.865787][ T5898] kworker/u4:13: attempt to access beyond end of device [ 86.865787][ T5898] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 86.868157][ T6000] loop1: detected capacity change from 0 to 8 [ 86.896695][ T5898] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 87.001520][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.538139][ T6008] hsr0: entered promiscuous mode [ 87.611586][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 87.984015][ T6015] (null): rxe_set_mtu: Set mtu to 1024 [ 88.296860][ T6020] tmpfs: Cannot retroactively limit size [ 88.421890][ T6006] loop1: detected capacity change from 0 to 32768 [ 88.525219][ T6006] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 88.639122][ T6006] XFS (loop1): Ending clean mount [ 88.649213][ T6015] infiniband syz0: set active [ 88.654164][ T6015] infiniband syz0: added veth0 [ 88.706385][ T6027] loop0: detected capacity change from 0 to 4096 [ 88.744563][ T6027] ======================================================= [ 88.744563][ T6027] WARNING: The mand mount option has been deprecated and [ 88.744563][ T6027] and is ignored by this kernel. Remove the mand [ 88.744563][ T6027] option from the mount to silence this warning. [ 88.744563][ T6027] ======================================================= [ 88.798712][ T6027] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 88.843160][ T6015] RDS/IB: syz0: added [ 88.878676][ T6015] smc: adding ib device syz0 with port count 1 [ 88.908269][ T6015] smc: ib device syz0 port 1 has pnetid [ 88.960210][ T5774] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 89.216240][ T6042] loop2: detected capacity change from 0 to 16 [ 89.292527][ T6042] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.779045][ T27] audit: type=1326 audit(1785910145.804:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.1.35" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4cfb9e019 code=0x0 [ 90.584689][ T6071] loop2: detected capacity change from 0 to 128 [ 90.670439][ T6071] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.727859][ T6071] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.951818][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.859467][ T6105] loop1: detected capacity change from 0 to 1024 [ 91.871993][ T6105] EXT4-fs: quotafile must be on filesystem root [ 92.082497][ T8] cfg80211: failed to load regulatory.db [ 92.537288][ T42] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 92.761857][ T42] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 92.797235][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.817296][ T42] usb 1-1: Product: syz [ 92.826713][ T42] usb 1-1: Manufacturer: syz [ 92.833813][ T42] usb 1-1: SerialNumber: syz [ 92.876605][ T42] usb 1-1: config 0 descriptor?? [ 92.984245][ T6149] loop2: detected capacity change from 0 to 64 [ 93.041659][ T27] audit: type=1800 audit(1785910149.074:3): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 93.071194][ T6149] syz.2.64: attempt to access beyond end of device [ 93.071194][ T6149] loop2: rw=34817, sector=63, nr_sectors = 8 limit=64 [ 93.105900][ T42] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 93.217893][ T5835] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.248626][ T6153] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 93.449403][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 93.453124][ T6156] loop2: detected capacity change from 0 to 4096 [ 93.477509][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.480014][ T6156] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 93.488841][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 93.512703][ T5835] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 93.522364][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.531890][ T5835] usb 2-1: Product: syz [ 93.536606][ T5835] usb 2-1: Manufacturer: syz [ 93.543049][ T5835] usb 2-1: SerialNumber: syz [ 93.586502][ T5835] usb 2-1: config 0 descriptor?? [ 93.639104][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 93.833023][ T5835] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 93.904835][ T6162] loop3: detected capacity change from 0 to 512 [ 93.934573][ T6162] EXT4-fs: Ignoring removed i_version option [ 93.972138][ T6162] EXT4-fs: Ignoring removed oldalloc option [ 94.004139][ T6162] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.036902][ T6162] EXT4-fs (loop3): 1 truncate cleaned up [ 94.055955][ T6162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.058543][ T789] usb 2-1: USB disconnect, device number 2 [ 94.186524][ T6162] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.70: Invalid inode table block 2658069109 in block_group 0 [ 94.223060][ T6162] EXT4-fs (loop3): Remounting filesystem read-only [ 94.281640][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.324629][ T42] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 94.362715][ T42] usb 1-1: USB disconnect, device number 2 [ 94.452476][ T6167] loop2: detected capacity change from 0 to 4096 [ 94.460689][ T6169] loop3: detected capacity change from 0 to 2048 [ 94.471398][ T6167] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 94.508839][ T6167] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 94.522063][ T6169] loop3: p1 < > p3 [ 94.524139][ T6167] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 94.529801][ T6169] loop3: p3 size 134217728 extends beyond EOD, truncated [ 94.906163][ T6036] udevd[6036]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 94.919521][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 95.231727][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.79'. [ 95.662467][ T6194] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 95.700171][ T6194] CIFS: Attempting to mount //127.0.0.1/share [ 95.756276][ T6197] CIFS: VFS: Invalid response size 0 for command 0 [ 95.769402][ T6194] CIFS: VFS: cifs_mount failed w/return code = -5 [ 95.936791][ T6200] syzkaller1: entered promiscuous mode [ 95.965578][ T6200] syzkaller1: entered allmulticast mode [ 96.002731][ T6179] loop1: detected capacity change from 0 to 32768 [ 96.047674][ T6179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.78 (6179) [ 96.137708][ T6179] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.167740][ T6179] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 96.194514][ T6179] BTRFS info (device loop1): setting nodatasum [ 96.202822][ T6179] BTRFS info (device loop1): force zlib compression, level 3 [ 96.237258][ T6179] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 96.267751][ T6179] BTRFS info (device loop1): use lzo compression, level 0 [ 96.274955][ T6179] BTRFS info (device loop1): turning on flush-on-commit [ 96.311753][ T6179] BTRFS info (device loop1): enabling auto defrag [ 96.330574][ T6179] BTRFS info (device loop1): max_inline at 4096 [ 96.348185][ T6179] BTRFS info (device loop1): using free space tree [ 96.380979][ T6206] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.397069][ T6208] loop2: detected capacity change from 0 to 512 [ 96.457512][ T6190] loop0: detected capacity change from 0 to 32768 [ 96.478225][ T6190] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.83 (6190) [ 96.557798][ T6208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.639300][ T6208] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.683440][ T6179] BTRFS info (device loop1): enabling ssd optimizations [ 96.777978][ T6208] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #18: comm syz.2.91: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 96.905049][ T6036] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (6036) [ 97.082069][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.118755][ T5835] kernel write not supported for file /vcsa (pid: 5835 comm: kworker/1:6) [ 97.355966][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.416036][ T6240] CIFS: Attempting to mount //127.0.0.1/share [ 97.469407][ T6241] CIFS: VFS: Invalid response size 0 for command 0 [ 97.490896][ T6240] CIFS: VFS: cifs_mount failed w/return code = -5 [ 97.727780][ T6246] Illegal XDP return value 191275008 on prog (id 17) dev syz_tun, expect packet loss! [ 97.936845][ T6252] syz_tun: entered allmulticast mode [ 97.966222][ T6256] loop3: detected capacity change from 0 to 128 [ 97.985825][ T6251] syz_tun: left allmulticast mode [ 98.049142][ T6256] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.104724][ T6256] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.158338][ T6260] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 98.223375][ T6260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.271064][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.295245][ T6260] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 98.311056][ T6263] kvm: pic: single mode not supported [ 98.311771][ T6263] kvm: pic: single mode not supported [ 98.318525][ T6263] kvm: pic: single mode not supported [ 98.329872][ T6263] kvm: pic: single mode not supported [ 98.335521][ T6263] kvm: pic: level sensitive irq not supported [ 98.369155][ T6263] kvm: pic: level sensitive irq not supported [ 98.399732][ T6263] kvm: pic: single mode not supported [ 98.422492][ T6263] kvm: pic: single mode not supported [ 98.535153][ T5785] block nbd2: Receive control failed (result -107) [ 98.562789][ T6270] nbd2: detected capacity change from 0 to 8589934592 [ 98.575112][ T97] block nbd2: Dead connection, failed to find a fallback [ 98.583950][ T97] block nbd2: shutting down sockets [ 98.590366][ T97] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.599990][ T97] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.616796][ T6270] I/O error, dev nbd2, sector 104 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 98.632461][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.641838][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.651320][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.661395][ T6272] CIFS: Attempting to mount //127.0.0.1/share [ 98.661874][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.675774][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.685015][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.693633][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.703225][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.713159][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.722406][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.730526][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.739771][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.747927][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.757013][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.765081][ T5784] ldm_validate_partition_table(): Disk read failed. [ 98.772033][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.784283][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.792387][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 98.804420][ T5784] Dev nbd2: unable to read RDB block 0 [ 98.817743][ T5784] nbd2: unable to read partition table [ 98.830003][ T5784] ldm_validate_partition_table(): Disk read failed. [ 98.837423][ T5784] Dev nbd2: unable to read RDB block 0 [ 98.843689][ T5784] nbd2: unable to read partition table [ 98.947465][ T27] audit: type=1800 audit(1785910154.974:4): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.111" name="c_srate" dev="configfs" ino=8723 res=0 errno=0 [ 99.100007][ T6286] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 99.495222][ T6272] CIFS: VFS: cifs_mount failed w/return code = -512 [ 99.924821][ T6315] overlayfs: refusing to follow metacopy origin for (/file1) [ 100.006735][ T6318] loop0: detected capacity change from 0 to 128 [ 100.010877][ T6319] loop2: detected capacity change from 0 to 1024 [ 100.022411][ T6319] EXT4-fs: Ignoring removed bh option [ 100.034353][ T6318] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 100.059285][ T6318] hpfs: filesystem error: improperly stopped [ 100.065355][ T6318] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 100.076204][ T6318] hpfs: You really don't want any checks? You are crazy... [ 100.121554][ T6318] hpfs: hpfs_map_sector(): read error [ 100.144420][ T6318] hpfs: code page support is disabled [ 100.157049][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.160773][ T6318] hpfs: hpfs_map_4sectors(): unaligned read [ 100.176806][ T6318] hpfs: hpfs_map_4sectors(): unaligned read [ 100.183313][ T6318] hpfs: filesystem error: unable to find root dir [ 100.186975][ T6323] Bluetooth: MGMT ver 1.22 [ 100.197530][ T6319] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.215885][ T6318] hpfs: hpfs_map_4sectors(): unaligned read [ 100.217972][ T6323] Bluetooth: hci0: unsupported parameter 255 [ 100.230069][ T6323] Bluetooth: hci0: unsupported parameter 255 [ 100.246120][ T6319] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.125: bg 0: block 112: padding at end of block bitmap is not set [ 100.251114][ T6318] hpfs: hpfs_map_sector(): read error [ 100.297822][ T6319] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 33 with max blocks 1 with error 28 [ 100.342276][ T6325] hpfs: hpfs_map_4sectors(): unaligned read [ 100.347186][ T6327] loop1: detected capacity change from 0 to 16 [ 100.356193][ T6319] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.356193][ T6319] [ 100.379577][ T6327] erofs: (device loop1): mounted with root inode @ nid 36. [ 100.393313][ T6325] hpfs: hpfs_map_sector(): read error [ 100.415798][ T6327] capability: warning: `syz.1.127' uses deprecated v2 capabilities in a way that may be insecure [ 100.440017][ T6329] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.490381][ T6319] EXT4-fs (loop2): Total free blocks count 0 [ 100.496446][ T6319] EXT4-fs (loop2): Free/Dirty block details [ 100.528070][ T6317] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.528334][ T6319] EXT4-fs (loop2): free_blocks=0 [ 100.547068][ T6319] EXT4-fs (loop2): dirty_blocks=16 [ 100.598961][ T6319] EXT4-fs (loop2): Block reservation details [ 100.605018][ T6319] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 100.615725][ T6317] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.668940][ T6329] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.675847][ T6335] syzkaller1: entered promiscuous mode [ 100.686140][ T6317] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.689625][ T6335] syzkaller1: entered allmulticast mode [ 100.718840][ T6317] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.740739][ T6317] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.760575][ T6317] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.764269][ T5834] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.778618][ T6317] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.803804][ T6319] Zero length message leads to an empty skb [ 100.832337][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.834548][ T6337] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 100.834548][ T6337] The task syz.1.130 (6337) triggered the difference, watch for misbehavior. [ 100.957250][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 100.968748][ T5834] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 100.979877][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.989237][ T5834] usb 4-1: Product: syz [ 100.993599][ T5834] usb 4-1: Manufacturer: syz [ 100.999876][ T5834] usb 4-1: SerialNumber: syz [ 101.007778][ T5834] usb 4-1: config 0 descriptor?? [ 101.019547][ T5834] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 101.262744][ T6349] loop2: detected capacity change from 0 to 7 [ 101.276097][ T6349] Dev loop2: unable to read RDB block 7 [ 101.284337][ T6349] loop2: unable to read partition table [ 101.290418][ T6349] loop2: partition table beyond EOD, truncated [ 101.296663][ T6349] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.774574][ T6366] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.477248][ T5834] gspca_sonixj: i2c_w8 err -71 [ 102.547494][ T5834] sonixj: probe of 4-1:0.0 failed with error -71 [ 102.577090][ T5834] usb 4-1: USB disconnect, device number 6 [ 102.704545][ T6394] syz.2.145 uses obsolete (PF_INET,SOCK_PACKET) [ 102.716185][ T6394] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 102.876973][ T6398] loop1: detected capacity change from 0 to 512 [ 102.900596][ T6398] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.948799][ T6398] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.987385][ T6398] EXT4-fs (loop1): 1 truncate cleaned up [ 103.059923][ T6398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.169865][ T6398] fscrypt (loop1, inode 18): Mutually exclusive encryption flags (0x0e) [ 103.203540][ T6411] loop0: detected capacity change from 0 to 128 [ 103.220335][ T6411] EXT4-fs: Ignoring removed orlov option [ 103.282632][ T6411] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.295497][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.407437][ T6411] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.439110][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.549472][ T6415] loop1: detected capacity change from 0 to 512 [ 103.585662][ T6415] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 103.626862][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.636209][ T6415] EXT4-fs (loop1): 1 truncate cleaned up [ 103.638245][ T6415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.793199][ T27] audit: type=1800 audit(1785910159.824:5): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.153" name="baSourceID" dev="configfs" ino=8996 res=0 errno=0 [ 103.816265][ T6412] loop3: detected capacity change from 0 to 32768 [ 103.884300][ T6412] loop3: p1 p3 < > [ 103.978181][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.197245][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 104.251401][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.301408][ T42] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 104.331072][ T42] usb 2-1: config 0 has no interface number 0 [ 104.333240][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 104.352557][ T6036] udevd[6036]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 104.353629][ T42] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 104.412428][ T42] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 104.441427][ T42] usb 2-1: config 0 interface 88 has no altsetting 0 [ 104.469751][ T42] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 104.484433][ T42] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 104.510659][ T42] usb 2-1: Product: syz [ 104.525174][ T42] usb 2-1: Manufacturer: syz [ 104.533927][ T42] usb 2-1: SerialNumber: syz [ 104.559876][ T42] usb 2-1: config 0 descriptor?? [ 104.626499][ T5834] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 104.663016][ T5834] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 104.696845][ T5834] snd_hda_intel 0000:00:01.3: Unknown PCI class/subclass/prog-if information (0x068000) found, selecting HDAudio legacy driver [ 104.735171][ T5834] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 104.743283][ T5834] snd_hda_intel 0000:00:01.3: PCI INT A: no GSI [ 104.791280][ T42] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input5 [ 104.808883][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.829929][ T5834] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 104.854124][ T56] snd_hda_intel 0000:00:05.0: Unknown capability 0 [ 104.857406][ T42] usb 2-1: USB disconnect, device number 3 [ 104.895872][ T56] snd_hda_intel 0000:00:05.0: no codecs found! [ 104.976362][ T6426] loop3: detected capacity change from 0 to 32768 [ 105.023729][ T6426] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.083712][ T6426] XFS (loop3): Ending clean mount [ 105.176211][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.393975][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.510896][ T6450] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 105.525648][ T6450] netlink: 'syz.1.163': attribute type 4 has an invalid length. [ 105.534040][ T6450] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.163'. [ 106.292000][ T6452] loop0: detected capacity change from 0 to 40427 [ 106.355495][ T6452] F2FS-fs (loop0): invalid crc value [ 106.404815][ T6452] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.592526][ T6452] F2FS-fs (loop0): Start checkpoint disabled! [ 106.648169][ T6452] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 106.972230][ T5778] syz-executor: attempt to access beyond end of device [ 106.972230][ T5778] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 107.000755][ T5778] syz-executor: attempt to access beyond end of device [ 107.000755][ T5778] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 107.256767][ T5897] kworker/u4:12: attempt to access beyond end of device [ 107.256767][ T5897] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 107.284025][ T5897] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.339315][ T5897] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.376791][ T5897] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.404973][ T5897] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.901982][ T5907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.110651][ T5907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.144292][ T6485] loop2: detected capacity change from 0 to 40427 [ 108.177826][ T6485] F2FS-fs (loop2): invalid crc value [ 108.224878][ T6485] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.385507][ T6485] F2FS-fs (loop2): Start checkpoint disabled! [ 108.411347][ T5907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.461568][ T6485] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 108.466782][ T6502] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.642352][ T5907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.906040][ T5906] kworker/u4:16: attempt to access beyond end of device [ 108.906040][ T5906] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 108.959409][ T5906] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 108.966612][ T5906] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 109.223142][ T6514] loop1: detected capacity change from 0 to 1024 [ 109.370450][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.483694][ T6514] EXT4-fs error (device loop1): ext4_ind_map_blocks:604: inode #18: comm syz.1.186: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 109.505891][ T6514] EXT4-fs (loop1): Remounting filesystem read-only [ 109.690247][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.873185][ T6525] tipc: Started in network mode [ 109.907595][ T6525] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 109.942222][ T6525] tipc: Enabling of bearer rejected, failed to enable media [ 110.016841][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.034013][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.052313][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.088611][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.101576][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.110642][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.611856][ T6549] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 111.009812][ T6564] input: syz0 as /devices/virtual/input/input6 [ 112.217420][ T5785] Bluetooth: hci2: command tx timeout [ 112.297920][ T6594] netlink: 76 bytes leftover after parsing attributes in process `syz.3.204'. [ 112.405763][ T5907] hsr_slave_0: left promiscuous mode [ 112.426889][ T5907] hsr_slave_1: left promiscuous mode [ 112.465089][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.483548][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.499049][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.526046][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.559980][ T5907] bridge_slave_1: left allmulticast mode [ 112.573470][ T5907] bridge_slave_1: left promiscuous mode [ 112.585856][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.618287][ T5907] bridge_slave_0: left allmulticast mode [ 112.624000][ T5907] bridge_slave_0: left promiscuous mode [ 112.637879][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.701291][ T5907] veth1_macvtap: left promiscuous mode [ 112.714840][ T5907] veth0_macvtap: left promiscuous mode [ 112.722613][ T5907] veth1_vlan: left promiscuous mode [ 112.728514][ T5907] veth0_vlan: left promiscuous mode [ 113.580837][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 113.625500][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 113.673842][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.718757][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.066584][ T5907] bond0 (unregistering): Released all slaves [ 114.299845][ T5785] Bluetooth: hci2: command tx timeout [ 114.493528][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 114.650996][ T6626] loop2: detected capacity change from 0 to 16 [ 114.664172][ T6628] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 114.702488][ T6628] netlink: 'syz.3.214': attribute type 2 has an invalid length. [ 114.735285][ T6626] erofs: (device loop2): mounted with root inode @ nid 36. [ 114.796471][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.847050][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.857383][ T6529] bridge_slave_0: entered allmulticast mode [ 114.865039][ T6529] bridge_slave_0: entered promiscuous mode [ 114.889254][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.907412][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.937555][ T6529] bridge_slave_1: entered allmulticast mode [ 114.945091][ T6529] bridge_slave_1: entered promiscuous mode [ 115.123869][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.180014][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.345038][ T6529] team0: Port device team_slave_0 added [ 115.372205][ T6529] team0: Port device team_slave_1 added [ 115.477666][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.484899][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.517815][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.535484][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.543223][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.601530][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.779719][ T6529] hsr_slave_0: entered promiscuous mode [ 115.800696][ T6529] hsr_slave_1: entered promiscuous mode [ 115.820890][ T6529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.828764][ T6529] Cannot create hsr debugfs directory [ 116.377470][ T5785] Bluetooth: hci2: command tx timeout [ 116.476026][ T6529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.552579][ T6529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.595510][ T6529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.618289][ T6529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.930914][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.001687][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.073815][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.081068][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.156462][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.163745][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.556542][ T6702] loop2: detected capacity change from 0 to 1024 [ 117.559897][ T6704] loop3: detected capacity change from 0 to 512 [ 117.610915][ T6702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.648002][ T6702] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.700849][ T6702] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 117.747982][ T6702] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.757008][ T6702] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.232: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.806058][ T6704] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 117.847512][ T6704] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 117.930139][ T6702] EXT4-fs (loop2): 1 orphan inode deleted [ 117.940066][ T6702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.151658][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.179795][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.457358][ T5785] Bluetooth: hci2: command tx timeout [ 118.490146][ T6725] batadv_slave_1: entered promiscuous mode [ 118.511573][ T6724] batadv_slave_1: left promiscuous mode [ 118.762742][ T6734] process 'syz.3.239' launched './file0' with NULL argv: empty string added [ 119.014732][ T6740] vlan2: entered promiscuous mode [ 119.025309][ T6740] syz_tun: entered promiscuous mode [ 119.183715][ T6529] veth0_vlan: entered promiscuous mode [ 119.228886][ T6529] veth1_vlan: entered promiscuous mode [ 119.346244][ T6529] veth0_macvtap: entered promiscuous mode [ 119.358907][ T6529] veth1_macvtap: entered promiscuous mode [ 119.428518][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.448297][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.464634][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.476746][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.493463][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.513428][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.526997][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.554041][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.576745][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.600784][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.614973][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.625109][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.638611][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.650390][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.681123][ T6529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.717238][ T6529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.746372][ T6529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.763077][ T6529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.013149][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.042573][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.133738][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.158713][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.417511][ T6769] vhci_hcd: not connected 4 [ 120.805863][ T6778] gadgetfs: bound to dummy_udc driver [ 121.004000][ T6788] loop1: detected capacity change from 0 to 256 [ 121.066283][ T6788] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.107974][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 121.133742][ C0] gadgetfs: connected [ 121.145316][ T8] gadgetfs: disconnected [ 121.337599][ C0] gadgetfs: connected [ 121.344424][ T8] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 121.379735][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 121.379845][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 121.409306][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.443027][ C0] gadgetfs: configuration #1 [ 121.526659][ T6784] gadgetfs: suspended from state 3 [ 121.536399][ T8] usb 1-1: USB disconnect, device number 3 [ 121.546220][ T6784] gadgetfs: disconnected [ 121.566128][ T6796] loop1: detected capacity change from 0 to 2048 [ 121.645878][ T6800] VFS: file-max limit 0 reached [ 121.666659][ T6796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.708584][ T6796] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.798716][ T6796] fs-verity: sha512 using implementation "sha512-avx2" [ 121.902386][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.147083][ T6816] IPVS: Scheduler module ip_vs_sip not found [ 122.199881][ T6820] loop1: detected capacity change from 0 to 128 [ 122.229396][ T6820] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 122.510804][ T5774] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 122.536502][ T5774] FAT-fs (loop1): Filesystem has been set read-only [ 122.776938][ T6837] vlan2: entered allmulticast mode [ 122.810985][ T6837] bond0: entered allmulticast mode [ 122.839465][ T6837] bond_slave_0: entered allmulticast mode [ 122.860928][ T6837] bond_slave_1: entered allmulticast mode [ 123.317575][ T6855] loop3: detected capacity change from 0 to 256 [ 123.424118][ T6855] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 256) [ 123.889374][ T5907] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.073451][ T5907] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.191022][ T5907] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.341246][ T5907] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.907740][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.928235][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.936853][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.954648][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.964063][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.975477][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.371989][ T6896] loop3: detected capacity change from 0 to 512 [ 125.449220][ T6896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.464893][ T6899] loop2: detected capacity change from 0 to 128 [ 125.526938][ T6896] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.577953][ T6899] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.617349][ T27] audit: type=1800 audit(1785910181.634:6): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.279" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 125.669092][ T6899] hpfs: filesystem error: improperly stopped [ 125.677741][ T6899] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.685536][ T6899] hpfs: You really don't want any checks? You are crazy... [ 125.696420][ T6884] loop1: detected capacity change from 0 to 32768 [ 125.749146][ T6884] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.277 (6884) [ 125.750222][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.761850][ T6899] hpfs: Code page index out of array [ 125.814910][ T6899] hpfs: code page support is disabled [ 125.857390][ T6899] hpfs: hpfs_map_4sectors(): unaligned read [ 125.863499][ T6899] hpfs: hpfs_map_4sectors(): unaligned read [ 125.897652][ T6884] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 125.908130][ T6899] hpfs: filesystem error: unable to find root dir [ 125.947424][ T6884] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 125.956921][ T6884] BTRFS info (device loop1): enabling auto defrag [ 126.013497][ T6884] BTRFS info (device loop1): force clearing of disk cache [ 126.052002][ T6884] BTRFS info (device loop1): disabling log replay at mount time [ 126.093642][ T6884] BTRFS info (device loop1): turning on async discard [ 126.102884][ T6884] BTRFS info (device loop1): setting nodatacow, compression disabled [ 126.119483][ T6884] BTRFS info (device loop1): turning off async discard [ 126.126547][ T6884] BTRFS info (device loop1): disabling free space tree [ 126.134060][ T6884] BTRFS info (device loop1): disabling tree log [ 126.146480][ T6884] BTRFS info (device loop1): enabling disk space caching [ 126.156285][ T6884] BTRFS info (device loop1): disk space caching is enabled [ 126.565764][ T5774] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 127.021388][ T5785] Bluetooth: hci2: command tx timeout [ 127.078207][ T6887] chnl_net:caif_netlink_parms(): no params data found [ 127.215763][ T5907] hsr_slave_0: left promiscuous mode [ 127.234715][ T5907] hsr_slave_1: left promiscuous mode [ 127.251827][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.262901][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.300548][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.319398][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.334370][ T5907] bridge_slave_1: left allmulticast mode [ 127.351742][ T5907] bridge_slave_1: left promiscuous mode [ 127.366712][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.393500][ T6946] loop2: detected capacity change from 0 to 1764 [ 127.402236][ T5907] bridge_slave_0: left allmulticast mode [ 127.408279][ T5907] bridge_slave_0: left promiscuous mode [ 127.438887][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.555300][ T6946] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 127.581144][ T5907] veth1_macvtap: left promiscuous mode [ 127.593978][ T5907] veth0_macvtap: left promiscuous mode [ 127.607464][ T5907] veth1_vlan: left promiscuous mode [ 127.620825][ T5907] veth0_vlan: left promiscuous mode [ 128.010438][ T6938] loop1: detected capacity change from 0 to 32768 [ 129.097414][ T5785] Bluetooth: hci2: command tx timeout [ 129.265011][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 129.280172][ T6968] loop2: detected capacity change from 0 to 16 [ 129.351786][ T6968] erofs: (device loop2): mounted with root inode @ nid 36. [ 129.386850][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 129.509127][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.701422][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.111597][ T5907] bond0 (unregistering): Released all slaves [ 130.255961][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.291'. [ 130.532240][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.539588][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.546971][ T6887] bridge_slave_0: entered allmulticast mode [ 130.555098][ T6887] bridge_slave_0: entered promiscuous mode [ 130.565064][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.574443][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.585385][ T6887] bridge_slave_1: entered allmulticast mode [ 130.593241][ T6887] bridge_slave_1: entered promiscuous mode [ 130.684776][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.728188][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.813157][ T6887] team0: Port device team_slave_0 added [ 130.834192][ T6887] team0: Port device team_slave_1 added [ 130.974997][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.995336][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.064323][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.107085][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.128688][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.177442][ T5785] Bluetooth: hci2: command tx timeout [ 131.207255][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.720506][ T6887] hsr_slave_0: entered promiscuous mode [ 131.767774][ T6887] hsr_slave_1: entered promiscuous mode [ 131.798343][ T6887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.805981][ T6887] Cannot create hsr debugfs directory [ 132.306155][ T7029] loop3: detected capacity change from 0 to 7 [ 132.336429][ T7029] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 132.351835][ T7029] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 132.360948][ T7029] Dev loop3: unable to read RDB block 7 [ 132.366692][ T7029] loop3: AHDI p2 p4 [ 132.375499][ T7029] loop3: partition table partially beyond EOD, truncated [ 132.385384][ T7029] loop3: p4 start 150997256 is beyond EOD, truncated [ 132.437761][ T7033] loop2: detected capacity change from 0 to 512 [ 132.459367][ T7033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.513732][ T7033] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.306: iget: bad i_size value: 38620345925642 [ 132.554571][ T7033] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.306: couldn't read orphan inode 15 (err -117) [ 132.638961][ T7033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.886919][ T7033] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.306: bg 0: block 5: invalid block bitmap [ 132.945946][ T7033] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 448 with error 28 [ 132.976047][ T7033] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.976047][ T7033] [ 132.988577][ T7033] EXT4-fs (loop2): Total free blocks count 0 [ 133.005329][ T7033] EXT4-fs (loop2): Free/Dirty block details [ 133.026381][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.038840][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.047314][ T5834] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 133.067848][ T7033] EXT4-fs (loop2): free_blocks=0 [ 133.078025][ T7033] EXT4-fs (loop2): dirty_blocks=452 [ 133.095559][ T7033] EXT4-fs (loop2): Block reservation details [ 133.112520][ T7033] EXT4-fs (loop2): i_reserved_data_blocks=452 [ 133.253417][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.257454][ T5785] Bluetooth: hci2: command tx timeout [ 133.292842][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 133.306487][ T5834] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 133.338118][ T5834] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.338153][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.338175][ T5834] usb 2-1: Product: syz [ 133.338191][ T5834] usb 2-1: Manufacturer: syz [ 133.338207][ T5834] usb 2-1: SerialNumber: syz [ 133.343786][ T7043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.531543][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.551124][ T7043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.650743][ T6887] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.680813][ T6887] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.720350][ T6887] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.764897][ T6887] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.173052][ T7043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.183498][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.261349][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.319701][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.326983][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.363991][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.371251][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.407699][ T5834] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 134.410952][ T7083] loop2: detected capacity change from 0 to 1024 [ 134.414191][ T5834] cdc_ncm 2-1:1.0: dwNtbInMaxSize=43 is too small. Using 2048 [ 134.457006][ T7083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.513538][ T5834] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 134.683985][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.703630][ T5834] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 134.813842][ T5834] usb 2-1: USB disconnect, device number 4 [ 134.843329][ T5834] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 135.026564][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.130201][ T7101] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 135.309475][ T7101] gretap1: entered allmulticast mode [ 135.322464][ T7101] bond1: (slave gretap1): making interface the new active one [ 135.341254][ T7101] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 135.412782][ T7101] syz.3.319 (7101) used greatest stack depth: 20056 bytes left [ 135.914107][ T7124] loop3: detected capacity change from 0 to 512 [ 135.944801][ T7124] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.996716][ T6887] veth0_vlan: entered promiscuous mode [ 135.997710][ T7124] EXT4-fs (loop3): 1 truncate cleaned up [ 136.021722][ T7124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.096601][ T6887] veth1_vlan: entered promiscuous mode [ 136.321895][ T6887] veth0_macvtap: entered promiscuous mode [ 136.364195][ T6887] veth1_macvtap: entered promiscuous mode [ 136.438553][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.480757][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.521141][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.543102][ T7141] Bluetooth: hci0: unsupported parameter 255 [ 136.555466][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.557342][ T7141] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 136.576987][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.609945][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.640114][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.670183][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.723207][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.758763][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.795568][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.809545][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.824081][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.845925][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.867079][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.948141][ T6887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.977934][ T6887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.004349][ T6887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.062572][ T6887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.136190][ T7117] loop2: detected capacity change from 0 to 40427 [ 137.191718][ T7117] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 137.217945][ T7117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.280108][ T7117] F2FS-fs (loop2): invalid crc value [ 137.307591][ T7117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.379222][ T5906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.426200][ T5906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.506675][ T7117] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.518520][ T7117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.554594][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.568552][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.690371][ T5906] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 137.754867][ T5906] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 137.797334][ T42] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.974694][ T7117] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 138.009856][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 138.061962][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.094736][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.138715][ T42] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 138.157294][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.174529][ T42] usb 2-1: config 0 descriptor?? [ 138.665388][ T42] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 138.957689][ T56] usb 2-1: USB disconnect, device number 5 [ 139.031934][ T7189] fido_id[7189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 139.269109][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 139.287323][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 139.304100][ T7207] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.313457][ T7207] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.322349][ T7207] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.331276][ T7207] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.391180][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 139.437267][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 139.685208][ T7218] loop2: detected capacity change from 0 to 512 [ 139.756611][ T7218] EXT4-fs: Ignoring removed bh option [ 139.809457][ T7220] loop1: detected capacity change from 0 to 1024 [ 139.856372][ T7218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.869278][ T7218] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.891660][ T7220] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 139.925997][ T7220] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 139.936376][ T7220] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 140.016865][ T7229] loop4: detected capacity change from 0 to 1024 [ 140.339670][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.897697][ T5906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.957216][ T5906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.164683][ T5906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.175114][ T5906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.315430][ T5906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.346381][ T5906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.361396][ T7260] loop1: detected capacity change from 0 to 128 [ 141.510475][ T5906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.523773][ T5906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.597374][ T5835] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 141.791651][ T5835] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.834556][ T5835] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.850733][ T7265] Cannot find add_set index 4 as target [ 141.862899][ T5835] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.873592][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.157359][ T5835] usb 4-1: usb_control_msg returned -32 [ 142.163029][ T5835] usbtmc 4-1:16.0: can't read capabilities [ 142.215375][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.233023][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.243390][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.256556][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.267426][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.275237][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.836732][ T42] usb 4-1: USB disconnect, device number 7 [ 144.377507][ T5788] Bluetooth: hci2: command tx timeout [ 144.493132][ T7270] chnl_net:caif_netlink_parms(): no params data found [ 144.842182][ T5906] hsr_slave_0: left promiscuous mode [ 144.849272][ T5906] hsr_slave_1: left promiscuous mode [ 144.870356][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.887950][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.902058][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.910187][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.940066][ T5906] bridge_slave_1: left allmulticast mode [ 144.945803][ T5906] bridge_slave_1: left promiscuous mode [ 144.952362][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.968458][ T5906] bridge_slave_0: left allmulticast mode [ 144.974176][ T5906] bridge_slave_0: left promiscuous mode [ 144.987557][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.032972][ T5906] veth1_macvtap: left promiscuous mode [ 145.038753][ T5906] veth0_macvtap: left promiscuous mode [ 145.044428][ T5906] veth1_vlan: left promiscuous mode [ 145.051250][ T5906] veth0_vlan: left promiscuous mode [ 145.837265][ T5816] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 146.047232][ T5816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.067846][ T5816] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.104380][ T5816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.137241][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.379521][ T5816] usb 3-1: usb_control_msg returned -32 [ 146.394250][ T5816] usbtmc 3-1:16.0: can't read capabilities [ 146.463386][ T5788] Bluetooth: hci2: command tx timeout [ 146.655732][ T5906] team0 (unregistering): Port device team_slave_1 removed [ 146.801947][ T5906] team0 (unregistering): Port device team_slave_0 removed [ 146.919289][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.010723][ T56] usb 3-1: USB disconnect, device number 2 [ 147.017595][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.036739][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.242971][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 147.288064][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.322499][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.342632][ T8] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 147.357214][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.370074][ T8] usb 2-1: config 0 descriptor?? [ 147.371046][ T7389] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.496662][ T7389] overlayfs: failed to look up (tracing) for ino (-66) [ 147.793288][ T5906] bond0 (unregistering): Released all slaves [ 148.029456][ T8] usb 2-1: language id specifier not provided by device, defaulting to English [ 148.042426][ T7397] netlink: 'syz.3.392': attribute type 12 has an invalid length. [ 148.051716][ T7397] netlink: 'syz.3.392': attribute type 29 has an invalid length. [ 148.064832][ T7397] netlink: 148 bytes leftover after parsing attributes in process `syz.3.392'. [ 148.074459][ T7397] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 148.082329][ T7397] netlink: 'syz.3.392': attribute type 2 has an invalid length. [ 148.091546][ T7397] netlink: 11 bytes leftover after parsing attributes in process `syz.3.392'. [ 148.155678][ T7404] netlink: 'syz.3.392': attribute type 12 has an invalid length. [ 148.176256][ T7404] netlink: 'syz.3.392': attribute type 29 has an invalid length. [ 148.194936][ T7404] netlink: 148 bytes leftover after parsing attributes in process `syz.3.392'. [ 148.204547][ T7404] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 148.212593][ T7404] netlink: 'syz.3.392': attribute type 2 has an invalid length. [ 148.221242][ T7404] netlink: 11 bytes leftover after parsing attributes in process `syz.3.392'. [ 148.231375][ T8] letsketch 0003:6161:4D15.0002: Device info: Ы [ 148.241322][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.273448][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.317688][ T7270] bridge_slave_0: entered allmulticast mode [ 148.333965][ T7270] bridge_slave_0: entered promiscuous mode [ 148.359124][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.379171][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.386437][ T7270] bridge_slave_1: entered allmulticast mode [ 148.414429][ T7270] bridge_slave_1: entered promiscuous mode [ 148.432188][ T8] letsketch 0003:6161:4D15.0002: Device info: ï“¿ [ 148.543703][ T5788] Bluetooth: hci2: command tx timeout [ 148.637500][ T8] letsketch 0003:6161:4D15.0002: Device info: Ь [ 148.673974][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.723777][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.857587][ T7270] team0: Port device team_slave_0 added [ 148.882366][ T8] usb 2-1: Max retries (5) exceeded reading string descriptor 1 [ 148.890671][ T7270] team0: Port device team_slave_1 added [ 148.906615][ T8] letsketch: probe of 0003:6161:4D15.0002 failed with error -71 [ 148.930901][ T8] usb 2-1: USB disconnect, device number 6 [ 149.001797][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.041705][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.086967][ T7270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.126137][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.145840][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.203173][ T7270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.373572][ T7270] hsr_slave_0: entered promiscuous mode [ 149.403782][ T7270] hsr_slave_1: entered promiscuous mode [ 149.415742][ T7270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.460333][ T7270] Cannot create hsr debugfs directory [ 149.565442][ T27] audit: type=1326 audit(1785910205.594:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.1.399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4cfb9e019 code=0x0 [ 149.638373][ T7434] loop2: detected capacity change from 0 to 16 [ 149.695146][ T7434] erofs: (device loop2): mounted with root inode @ nid 36. [ 150.252824][ T7270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.279545][ T7270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.306543][ T7270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.328535][ T7270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.618141][ T5788] Bluetooth: hci2: command tx timeout [ 150.634166][ T7270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.710869][ T7270] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.755362][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.762634][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.846308][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.853536][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.337862][ T7478] loop2: detected capacity change from 0 to 512 [ 151.345749][ T7478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.431943][ T7478] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 151.493367][ T7478] EXT4-fs (loop2): 1 truncate cleaned up [ 151.540182][ T7478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.774545][ T7270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.969786][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.805685][ T7270] veth0_vlan: entered promiscuous mode [ 152.916931][ T7270] veth1_vlan: entered promiscuous mode [ 153.003123][ T7270] veth0_macvtap: entered promiscuous mode [ 153.032560][ T7270] veth1_macvtap: entered promiscuous mode [ 153.091924][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.131904][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.168229][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.202760][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.223270][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.244005][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.269934][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.310986][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.357312][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.383402][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.406492][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.437209][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.437812][ T7546] ipt_REJECT: TCP_RESET invalid for non-tcp [ 153.471965][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.508994][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.596954][ T7270] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.622241][ T7270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.644732][ T7270] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.664794][ T7270] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.797292][ T5816] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.872352][ T7534] loop1: detected capacity change from 0 to 32768 [ 153.890455][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.911981][ T7534] XFS: noikeep mount option is deprecated. [ 153.918237][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.974373][ T7534] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 153.983177][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.007284][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 154.012241][ T7534] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.023509][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.037769][ T5816] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 154.058342][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.090215][ T5816] usb 3-1: config 0 descriptor?? [ 154.169082][ T5816] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 154.338234][ T7534] XFS (loop1): Ending clean mount [ 154.391589][ T8] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 154.431045][ T8] XFS (loop1): Unmount and run xfs_repair [ 154.458286][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 154.478578][ T8] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 154.507758][ T8] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 154.547265][ T8] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 154.563236][ T8] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 154.572987][ T8] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 154.588031][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.596937][ T8] 00000060: 00 00 00 00 00 00 30 77 00 00 00 00 00 00 00 00 ......0w........ [ 154.630894][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.649019][ T7534] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 154.662032][ T7534] XFS (loop1): Failed to initialize disk quotas. [ 154.708291][ T5815] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.865712][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.919321][ T5815] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 154.937564][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.946772][ T5815] usb 4-1: Product: syz [ 154.959975][ T5815] usb 4-1: Manufacturer: syz [ 154.964709][ T5815] usb 4-1: SerialNumber: syz [ 155.587516][ T5816] gspca_sonixj: i2c_w8 err -71 [ 155.620982][ T5816] sonixj: probe of 3-1:0.0 failed with error -71 [ 155.636782][ T5816] usb 3-1: USB disconnect, device number 3 [ 155.829745][ T5815] kalmia 4-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.3-1, Samsung Kalmia LTE USB dongle, ea:4d:44:11:37:f9 [ 156.414315][ T7625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.115876][ T7649] loop2: detected capacity change from 0 to 128 [ 157.126314][ T7651] "syz.1.449" (7651) uses obsolete ecb(arc4) skcipher [ 157.267873][ T5816] usb 4-1: USB disconnect, device number 8 [ 157.301331][ T5816] kalmia 4-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.3-1, Samsung Kalmia LTE USB dongle [ 157.322997][ T7656] loop5: detected capacity change from 0 to 16 [ 157.377674][ T7656] erofs: (device loop5): mounted with root inode @ nid 36. [ 157.981843][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 158.218850][ T7685] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~  [ 158.402580][ T7691] loop1: detected capacity change from 0 to 1024 [ 158.660083][ T7691] hfsplus: request for non-existent node 33423360 in B*Tree [ 158.699143][ T7691] hfsplus: request for non-existent node 33423360 in B*Tree [ 158.774417][ T7699] hfsplus: request for non-existent node 33423360 in B*Tree [ 158.823123][ T7705] loop5: detected capacity change from 0 to 512 [ 158.827343][ T7699] hfsplus: request for non-existent node 33423360 in B*Tree [ 158.902945][ T7705] EXT4-fs: Ignoring removed i_version option [ 158.928500][ T7702] hfsplus: request for non-existent node 33423360 in B*Tree [ 158.954809][ T7705] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.954908][ T7702] hfsplus: request for non-existent node 33423360 in B*Tree [ 159.052517][ T7705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.067469][ T7705] ext4 filesystem being mounted at /10/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.077564][ T7691] hfsplus: request for non-existent node 33423360 in B*Tree [ 159.085180][ T7691] hfsplus: request for non-existent node 33423360 in B*Tree [ 159.355047][ T7705] EXT4-fs error (device loop5): ext4_dx_csum_verify:502: inode #2: comm syz.5.465: dir seems corrupt? Run e2fsck -D. [ 159.402201][ T7654] udevd[7654]: incorrect ext4 checksum on /dev/loop5 [ 159.402568][ T7705] EXT4-fs (loop5): Remounting filesystem read-only [ 159.573554][ T7270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.831641][ T7696] loop3: detected capacity change from 0 to 32768 [ 159.897438][ T7696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.463 (7696) [ 159.917970][ T7727] loop2: detected capacity change from 0 to 2048 [ 159.953052][ T7696] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.973595][ T7696] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 159.996681][ T7696] BTRFS info (device loop3): force clearing of disk cache [ 160.044232][ T7727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.067505][ T7696] BTRFS info (device loop3): metadata ratio 0 [ 160.087257][ T7696] BTRFS info (device loop3): enabling ssd optimizations [ 160.124926][ T7696] BTRFS info (device loop3): using spread ssd allocation scheme [ 160.180365][ T7696] BTRFS info (device loop3): using free space tree [ 160.253062][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.335793][ T7696] BTRFS info (device loop3): auto enabling async discard [ 160.344744][ T7696] BTRFS info (device loop3): rebuilding free space tree [ 160.448951][ T5815] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.666935][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.690616][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.715948][ T5815] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.733416][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.778596][ T5815] usb 6-1: config 0 descriptor?? [ 161.040827][ T5898] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 161.047788][ T5815] usbhid 6-1:0.0: can't add hid device: -71 [ 161.057680][ T5815] usbhid: probe of 6-1:0.0 failed with error -71 [ 161.113531][ T5815] usb 6-1: USB disconnect, device number 2 [ 161.234655][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.647389][ T5815] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.873372][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.907491][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.943472][ T7794] loop1: detected capacity change from 0 to 256 [ 161.967956][ T5815] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 161.977073][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.021257][ T6436] bond1: (slave syz_tun): Removing an active aggregator [ 162.043092][ T5815] usb 6-1: config 0 descriptor?? [ 162.047783][ T6436] bond1: (slave syz_tun): Releasing backup interface [ 162.595649][ T5912] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.777952][ T5912] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.933469][ T5912] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.105538][ T5815] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 163.135850][ T5815] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 163.189799][ T5912] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.219279][ T5815] input: failed to attach handler kbd to device input7, error: -5 [ 163.234463][ T7820] loop3: detected capacity change from 0 to 128 [ 163.249772][ T7820] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.349379][ T7820] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.372420][ T5815] usb 6-1: USB disconnect, device number 3 [ 163.427679][ T7820] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.559661][ T7820] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 163.745950][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.768284][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.778643][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.793297][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.816316][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.825146][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.063021][ T7820] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 164.290258][ T7842] loop1: detected capacity change from 0 to 512 [ 164.334425][ T7842] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.491: bg 0: block 5: invalid block bitmap [ 164.368533][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.399176][ T7842] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 164.527275][ T7842] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.491: invalid indirect mapped block 3 (level 2) [ 164.567836][ T7842] EXT4-fs (loop1): 1 orphan inode deleted [ 164.592305][ T7842] EXT4-fs (loop1): 1 truncate cleaned up [ 164.608800][ T7842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.808396][ T7842] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 164.816117][ T7842] overlayfs: failed to verify upper root origin [ 165.043255][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.236774][ T7864] loop1: detected capacity change from 0 to 256 [ 165.305471][ T7864] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.376484][ T7864] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 165.444368][ T7864] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 165.478450][ T7864] exFAT-fs (loop1): failed to load alloc-bitmap [ 165.499453][ T7864] exFAT-fs (loop1): failed to recognize exfat type [ 165.512709][ T7826] chnl_net:caif_netlink_parms(): no params data found [ 165.734273][ T7857] loop3: detected capacity change from 0 to 32768 [ 165.752381][ T7857] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.493 (7857) [ 165.788675][ T7857] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 165.807450][ T7857] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 165.826605][ T7857] BTRFS info (device loop3): using free space tree [ 165.897338][ T5785] Bluetooth: hci3: command tx timeout [ 165.905176][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.912846][ T5834] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.938646][ T7857] BTRFS info (device loop3): enabling ssd optimizations [ 165.945742][ T7857] BTRFS info (device loop3): auto enabling async discard [ 165.957387][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.964706][ T7826] bridge_slave_0: entered allmulticast mode [ 165.983239][ T7826] bridge_slave_0: entered promiscuous mode [ 166.083066][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.128175][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.135452][ T7826] bridge_slave_1: entered allmulticast mode [ 166.141736][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.158000][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.178879][ T5834] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.179731][ T7826] bridge_slave_1: entered promiscuous mode [ 166.203422][ T5834] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 166.221667][ T5834] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 166.251527][ T5834] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 166.271133][ T5834] usb 2-1: config 1 interface 1 has no altsetting 0 [ 166.286405][ T5834] usb 2-1: string descriptor 0 read error: -22 [ 166.307728][ T5834] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 166.316845][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.469945][ T5775] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 166.486735][ T7826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.579717][ T7826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.023504][ T7826] team0: Port device team_slave_0 added [ 167.187396][ T7826] team0: Port device team_slave_1 added [ 167.405164][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.427631][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.480651][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.496588][ T5834] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 167.504538][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.553566][ T5912] bridge_slave_1: left allmulticast mode [ 167.569910][ T5912] bridge_slave_1: left promiscuous mode [ 167.575839][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.669161][ T5912] bridge_slave_0: left allmulticast mode [ 167.690472][ T5912] bridge_slave_0: left promiscuous mode [ 167.696386][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.697018][ T5834] usb 2-1: USB disconnect, device number 7 [ 167.977512][ T5785] Bluetooth: hci3: command tx timeout [ 168.031172][ T5912] veth1_macvtap: left promiscuous mode [ 168.050565][ T5912] veth0_macvtap: left promiscuous mode [ 168.056310][ T5912] veth1_vlan: left promiscuous mode [ 168.089243][ T5912] veth0_vlan: left promiscuous mode [ 168.663757][ T7922] loop1: detected capacity change from 0 to 512 [ 168.744504][ T7922] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.504: iget: bad i_size value: 38620345925642 [ 168.802650][ T7922] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.504: couldn't read orphan inode 15 (err -117) [ 168.840790][ T7922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.980424][ T5912] bond1 (unregistering): Released all slaves [ 169.104979][ T7922] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.504: bg 0: block 5: invalid block bitmap [ 169.135971][ T7922] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 416 with error 28 [ 169.174925][ T7922] EXT4-fs (loop1): This should not happen!! Data will be lost [ 169.174925][ T7922] [ 169.187725][ T7922] EXT4-fs (loop1): Total free blocks count 0 [ 169.193766][ T7922] EXT4-fs (loop1): Free/Dirty block details [ 169.199980][ T7922] EXT4-fs (loop1): free_blocks=0 [ 169.205080][ T7922] EXT4-fs (loop1): dirty_blocks=420 [ 169.226162][ T7922] EXT4-fs (loop1): Block reservation details [ 169.236284][ T7922] EXT4-fs (loop1): i_reserved_data_blocks=420 [ 169.315630][ T7922] EXT4-fs (loop1): shut down requested (0) [ 169.784583][ T7930] loop5: detected capacity change from 0 to 32768 [ 169.868415][ T7930] loop5: p1 p3 < > [ 170.057378][ T5785] Bluetooth: hci3: command tx timeout [ 170.358377][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 170.430538][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 170.548779][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.655785][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.181352][ T5912] bond0 (unregistering): Released all slaves [ 171.265787][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.273060][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.302756][ T7826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.317347][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.329678][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.363503][ T7826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.523169][ T7826] hsr_slave_0: entered promiscuous mode [ 171.572857][ T7826] hsr_slave_1: entered promiscuous mode [ 171.601615][ T7826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.619044][ T7826] Cannot create hsr debugfs directory [ 172.005752][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 172.090572][ T5834] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.139984][ T5785] Bluetooth: hci3: command tx timeout [ 172.404027][ T7965] loop1: detected capacity change from 0 to 512 [ 172.488430][ T7826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.506262][ T7826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.514029][ T7965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.566659][ T7826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.573667][ T7965] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.615899][ T7826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.793249][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.799554][ T7978] loop3: detected capacity change from 0 to 64 [ 173.037953][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.064235][ T7978] hfs: hfs: Invalid key length: 94 [ 173.073770][ T7982] netlink: 76 bytes leftover after parsing attributes in process `syz.1.519'. [ 173.100858][ T7982] netlink: 76 bytes leftover after parsing attributes in process `syz.1.519'. [ 173.108070][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.154971][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.162220][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.178784][ T7978] hfs: request for non-existent node 1536 in B*Tree [ 173.207320][ T7978] hfs: request for non-existent node 1536 in B*Tree [ 173.229277][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.236602][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.363069][ T5897] ------------[ cut here ]------------ [ 173.369304][ T5897] kernel BUG at fs/hfs/inode.c:450! [ 173.437249][ T5897] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 173.443394][ T5897] CPU: 1 PID: 5897 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 173.451063][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.468712][ T5897] Workqueue: writeback wb_workfn (flush-7:3) [ 173.474972][ T5897] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 173.480572][ T5897] Code: c7 c1 00 53 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 53 33 97 e8 4f 11 84 ff e9 5e fe ff ff e8 f5 8e 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 173.500226][ T5897] RSP: 0018:ffffc90004c27340 EFLAGS: 00010293 [ 173.506335][ T5897] RAX: ffffffff825be28b RBX: ffff88806a3e8ea8 RCX: ffff8880271f9e00 [ 173.514346][ T5897] RDX: 0000000000000000 RSI: ffffffff8d339860 RDI: 0000000000000000 [ 173.522351][ T5897] RBP: ffffc90004c274d0 R08: ffff8880271f9e00 R09: 0000000000000003 [ 173.530359][ T5897] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 173.538366][ T5897] R13: 1ffff92000984e6c R14: ffff88806a3e8e58 R15: 0000000000000000 [ 173.546380][ T5897] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 173.555354][ T5897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.561976][ T5897] CR2: 0000001b2dd22ff8 CR3: 000000002f5db000 CR4: 00000000003506e0 [ 173.569987][ T5897] Call Trace: [ 173.573298][ T5897] [ 173.576260][ T5897] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 173.581675][ T5897] ? __rwlock_init+0x150/0x150 [ 173.586481][ T5897] __writeback_single_inode+0x720/0xee0 [ 173.592430][ T5897] writeback_sb_inodes+0x813/0x1020 [ 173.597694][ T5897] ? queue_io+0x530/0x530 [ 173.602075][ T5897] ? move_expired_inodes+0x726/0x770 [ 173.607415][ T5897] ? rcu_is_watching+0x15/0xb0 [ 173.612217][ T5897] ? queue_io+0x3ba/0x530 [ 173.616623][ T5897] wb_writeback+0x45e/0xbe0 [ 173.621186][ T5897] ? queue_io+0x391/0x530 [ 173.625567][ T5897] ? percpu_ref_tryget+0x250/0x250 [ 173.630723][ T5897] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 173.636739][ T5897] ? __lock_acquire+0x7d80/0x7d80 [ 173.641896][ T5897] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.647138][ T5897] wb_workfn+0x400/0xe60 [ 173.651439][ T5897] ? inode_wait_for_writeback+0x230/0x230 [ 173.657208][ T5897] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 173.665230][ T5897] ? __lock_acquire+0x7d80/0x7d80 [ 173.670303][ T5897] ? read_lock_is_recursive+0x20/0x20 [ 173.675726][ T5897] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.680973][ T5897] ? process_scheduled_works+0x975/0x1600 [ 173.686743][ T5897] ? process_scheduled_works+0x975/0x1600 [ 173.692506][ T5897] process_scheduled_works+0xa60/0x1600 [ 173.698112][ T5897] ? worker_attach_to_pool+0x370/0x370 [ 173.703697][ T5897] ? assign_work+0x3cc/0x5d0 [ 173.708328][ T5897] worker_thread+0xa5e/0xfe0 [ 173.712966][ T5897] kthread+0x2fa/0x390 [ 173.717071][ T5897] ? pr_cont_work+0x550/0x550 [ 173.721802][ T5897] ? kthread_blkcg+0xd0/0xd0 [ 173.726431][ T5897] ret_from_fork+0x48/0x80 [ 173.730885][ T5897] ? kthread_blkcg+0xd0/0xd0 [ 173.735515][ T5897] ret_from_fork_asm+0x11/0x20 [ 173.740321][ T5897] [ 173.743362][ T5897] Modules linked in: [ 173.747360][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.792176][ T5897] ---[ end trace 0000000000000000 ]--- [ 173.798377][ T5897] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 173.804683][ T5897] Code: c7 c1 00 53 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 53 33 97 e8 4f 11 84 ff e9 5e fe ff ff e8 f5 8e 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 173.854198][ T5897] RSP: 0018:ffffc90004c27340 EFLAGS: 00010293 [ 173.883162][ T5897] RAX: ffffffff825be28b RBX: ffff88806a3e8ea8 RCX: ffff8880271f9e00 [ 173.905902][ T5897] RDX: 0000000000000000 RSI: ffffffff8d339860 RDI: 0000000000000000 [ 173.921988][ T5897] RBP: ffffc90004c274d0 R08: ffff8880271f9e00 R09: 0000000000000003 [ 173.949089][ T5897] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 173.953016][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.967290][ T5897] R13: 1ffff92000984e6c R14: ffff88806a3e8e58 R15: 0000000000000000 [ 173.986709][ T5897] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 174.007623][ T5897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.029893][ T5897] CR2: 00007f5f50221850 CR3: 000000002f70c000 CR4: 00000000003526f0 [ 174.052090][ T5897] Kernel panic - not syncing: Fatal exception [ 174.058597][ T5897] Kernel Offset: disabled [ 174.062929][ T5897] Rebooting in 86400 seconds..