last executing test programs: 4m18.542297374s ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 4m17.55252708s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 4m12.831875589s ago: executing program 2 (id=29): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6KqfxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//zBiH1E=") syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808010, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) 4m11.531702891s ago: executing program 32 (id=29): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808010, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) 1m59.680184103s ago: executing program 6 (id=213): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000040)={[{@gid}, {}, {@nls={'nls', 0x3d, 'cp857'}}]}, 0x1, 0x5f7, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/49, 0x31) 1m55.996963836s ago: executing program 6 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 1m54.497653741s ago: executing program 6 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 1m50.491568465s ago: executing program 6 (id=226): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaca, &(0x7f0000000e00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m49.370325532s ago: executing program 6 (id=230): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100fefffffffedbdf258020"], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000600)={0x8, 0x41}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, 0x0, &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r6, 0x0, 0x68, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000340)={0x0, 0x1, 0x1d04, 0xfffffffe, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x1000, 0x0, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x394c, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/96) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m44.288447027s ago: executing program 6 (id=237): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) close(0x3) 1m41.314269051s ago: executing program 33 (id=237): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) close(0x3) 27.451710675s ago: executing program 0 (id=378): io_setup(0x2278, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xb00}}}}}}, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 24.458469941s ago: executing program 0 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) setuid(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 21.980343333s ago: executing program 0 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 19.417832968s ago: executing program 0 (id=397): keyctl$setperm(0x5, 0x0, 0x120c0603) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r9, 0x5501) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r5, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 19.316467827s ago: executing program 4 (id=398): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x5}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000005c0)={0x2, r4, 'id1\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r1}, 0x18) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0xd, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) 19.250868688s ago: executing program 3 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 18.482261532s ago: executing program 3 (id=402): io_setup(0x2278, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xb00}}}}}}, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 16.092649678s ago: executing program 3 (id=407): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x20, @string={0x20, 0x3, "b8a17dd6a0e28634ef41cfefe53fb97acea028eb76fa9e4734065c4035cd"}}}, 0x0) 14.931910074s ago: executing program 1 (id=410): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r7 = dup(0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r5, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 13.065784798s ago: executing program 1 (id=412): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r1, &(0x7f00000001c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000700)='1', 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002040)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd29, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) 12.565297895s ago: executing program 4 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r5 = socket(0xa, 0x801, 0x0) getsockopt(r5, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) setuid(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 11.91098496s ago: executing program 0 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 11.803959885s ago: executing program 5 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 11.282603105s ago: executing program 3 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 11.281075867s ago: executing program 4 (id=417): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r4, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 10.667567508s ago: executing program 7 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 9.376364758s ago: executing program 7 (id=419): io_setup(0x2278, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xb00}}}}}}, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 9.244031063s ago: executing program 1 (id=420): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 9.091631703s ago: executing program 5 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 7.426116996s ago: executing program 1 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 7.392011366s ago: executing program 7 (id=423): mount$bind(0x0, 0x0, 0x0, 0x101020, 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000440)=ANY=[@ANYBLOB="03021300000fff0019fd884c14936c2023a036a01f30035e2eb896b9cf4b07e624360bfc8984"], 0x22, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000030603000000000000000000050000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040012}, 0x40000) r10 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEMERASE(r10, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) 7.148763815s ago: executing program 5 (id=424): socket$inet_tcp(0x2, 0x1, 0x0) flock(0xffffffffffffffff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001900010027bd700000000000fc020000000000000000000000000000ac141418000000000000000000000000000100000000fffe0a000000160000"], 0xb8}, 0x1, 0x0, 0x0, 0x20004060}, 0x0) r2 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r2, 0x0) sync() r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) timer_create(0x4, 0x0, &(0x7f0000000880)=0x0) clock_gettime(0x0, &(0x7f00000008c0)) timer_settime(r5, 0x0, 0x0, &(0x7f0000000940)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) 6.834636944s ago: executing program 3 (id=425): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r7 = dup(0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r5, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 6.500628244s ago: executing program 4 (id=426): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x5}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000005c0)={0x2, r4, 'id1\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r1}, 0x18) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) 5.315936383s ago: executing program 5 (id=427): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100fefffffffedbdf258020"], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000600)={0x8, 0x41}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), 0x0) syz_io_uring_modify_offsets$flags(r6, 0x0, 0x68, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000340)={0x0, 0x1, 0x1d04, 0xfffffffe, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x1000, 0x0, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x394c, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/96) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.224382231s ago: executing program 3 (id=428): keyctl$setperm(0x5, 0x0, 0x120c0603) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r9, 0x5501) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r5, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 5.179543943s ago: executing program 7 (id=429): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) open(&(0x7f0000000040)='./file1\x00', 0x8000, 0x40) 4.841364353s ago: executing program 0 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r6, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 4.581461424s ago: executing program 7 (id=431): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r9, 0x5501) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r5, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.373691922s ago: executing program 4 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x56, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 1.28754042s ago: executing program 5 (id=433): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r1, &(0x7f00000001c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000700)='1', 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002040)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd29, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) 1.140865436s ago: executing program 1 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 925.327219ms ago: executing program 5 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 831.014772ms ago: executing program 4 (id=436): io_setup(0x2278, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) setrlimit(0x1, 0x0) 600.129559ms ago: executing program 7 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x20000008}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f0000001ffc)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) statx(r5, &(0x7f0000000380)='./bus\x00', 0x1000, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000000000020200000006000000000000070000000000003d89f8f1a2"], 0x0, 0x38}, 0x28) 0s ago: executing program 1 (id=438): keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) close_range(r4, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) kernel console output (not intermixed with test programs): ered disabled state [ 94.599227][ T5621] bridge_slave_1: entered allmulticast mode [ 94.601525][ T5621] bridge_slave_1: entered promiscuous mode [ 94.623208][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.623360][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.623524][ T5630] bridge_slave_0: entered allmulticast mode [ 94.627364][ T5630] bridge_slave_0: entered promiscuous mode [ 94.631700][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.631818][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.631977][ T5630] bridge_slave_1: entered allmulticast mode [ 94.635695][ T5630] bridge_slave_1: entered promiscuous mode [ 94.701307][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.701423][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.701568][ T5635] bridge_slave_0: entered allmulticast mode [ 94.704380][ T5635] bridge_slave_0: entered promiscuous mode [ 94.765357][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.765468][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.765896][ T5633] bridge_slave_0: entered allmulticast mode [ 94.768045][ T5633] bridge_slave_0: entered promiscuous mode [ 94.771469][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.771587][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.772028][ T5635] bridge_slave_1: entered allmulticast mode [ 94.775509][ T5635] bridge_slave_1: entered promiscuous mode [ 94.834177][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.834301][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.835055][ T5631] bridge_slave_0: entered allmulticast mode [ 94.837022][ T5631] bridge_slave_0: entered promiscuous mode [ 94.847262][ T5618] hsr_slave_0: entered promiscuous mode [ 94.848561][ T5618] hsr_slave_1: entered promiscuous mode [ 94.851681][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.852633][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.853089][ T5633] bridge_slave_1: entered allmulticast mode [ 94.855612][ T5633] bridge_slave_1: entered promiscuous mode [ 94.879905][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.885564][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.886464][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.886580][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.886780][ T5631] bridge_slave_1: entered allmulticast mode [ 94.890088][ T5631] bridge_slave_1: entered promiscuous mode [ 94.918594][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.923774][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.941873][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.005998][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.063196][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.114079][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.133382][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.150443][ T5630] team0: Port device team_slave_0 added [ 95.154840][ T5621] team0: Port device team_slave_0 added [ 95.158830][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.188403][ T5635] team0: Port device team_slave_0 added [ 95.190902][ T5630] team0: Port device team_slave_1 added [ 95.193891][ T5621] team0: Port device team_slave_1 added [ 95.232555][ T5641] Bluetooth: hci0: command tx timeout [ 95.234233][ T5635] team0: Port device team_slave_1 added [ 95.299207][ T5633] team0: Port device team_slave_0 added [ 95.343056][ T5631] team0: Port device team_slave_0 added [ 95.352677][ T5633] team0: Port device team_slave_1 added [ 95.369433][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.369456][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.369496][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.371487][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.371508][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.371552][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.374326][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.374346][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.374390][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.375681][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.375701][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.375743][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.390824][ T5631] team0: Port device team_slave_1 added [ 95.406879][ T5641] Bluetooth: hci1: command tx timeout [ 95.488872][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.488896][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.488940][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.492515][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.492536][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.492579][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.508709][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.508731][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.508775][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.597568][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.597592][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.597636][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.639877][ T5641] Bluetooth: hci2: command tx timeout [ 95.655104][ T5621] hsr_slave_0: entered promiscuous mode [ 95.656293][ T5621] hsr_slave_1: entered promiscuous mode [ 95.657178][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 95.657261][ T5621] Cannot create hsr debugfs directory [ 95.658227][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.658247][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.658290][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.723517][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.723541][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.723585][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.728616][ T5641] Bluetooth: hci4: command tx timeout [ 95.728654][ T5641] Bluetooth: hci3: command tx timeout [ 95.728694][ T5641] Bluetooth: hci5: command tx timeout [ 95.770756][ T5635] hsr_slave_0: entered promiscuous mode [ 95.773418][ T5635] hsr_slave_1: entered promiscuous mode [ 95.774275][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 95.774302][ T5635] Cannot create hsr debugfs directory [ 95.794391][ T5630] hsr_slave_0: entered promiscuous mode [ 95.797123][ T5630] hsr_slave_1: entered promiscuous mode [ 95.799491][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 95.799516][ T5630] Cannot create hsr debugfs directory [ 95.981032][ T5633] hsr_slave_0: entered promiscuous mode [ 95.982004][ T5633] hsr_slave_1: entered promiscuous mode [ 95.983753][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 95.983781][ T5633] Cannot create hsr debugfs directory [ 96.125857][ T5631] hsr_slave_0: entered promiscuous mode [ 96.126979][ T5631] hsr_slave_1: entered promiscuous mode [ 96.127611][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 96.127640][ T5631] Cannot create hsr debugfs directory [ 96.471205][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.486623][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.538390][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.541921][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.544538][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.556758][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.618100][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.621481][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.763830][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.769160][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.770753][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.777257][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.784597][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.794189][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.804128][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.814858][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.917813][ T5635] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.924182][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.940601][ T5635] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.954197][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.955113][ T5635] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.957956][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.972784][ T5635] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.983706][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.099079][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.105759][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.126740][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.131634][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.147616][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.152025][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.164438][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.183477][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.187784][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.307235][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.311952][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.312438][ T4933] Bluetooth: hci0: command tx timeout [ 97.346796][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.350663][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.351994][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.363694][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.385363][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.389511][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.390466][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.416279][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.423004][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.423140][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.472940][ T4933] Bluetooth: hci1: command tx timeout [ 97.475760][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.475877][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.560017][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.579204][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.619983][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.620077][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.623219][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.623339][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.638732][ T5618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.638766][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.679875][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.685464][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.686481][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.695235][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.713031][ T4933] Bluetooth: hci2: command tx timeout [ 97.729910][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.737814][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.750527][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.760942][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.793989][ T5641] Bluetooth: hci3: command tx timeout [ 97.794008][ T5619] Bluetooth: hci4: command tx timeout [ 97.794083][ T4933] Bluetooth: hci5: command tx timeout [ 97.799226][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.850622][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.850752][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.936685][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.936888][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.077967][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.180312][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.235078][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.239855][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.239977][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.318023][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.318170][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.454960][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.524069][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.524193][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.568574][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.568707][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.637937][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.800010][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.877883][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.878009][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.925039][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.925178][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.180733][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.395765][ T4933] Bluetooth: hci0: command tx timeout [ 99.555050][ T4933] Bluetooth: hci1: command tx timeout [ 99.594877][ T5618] veth0_vlan: entered promiscuous mode [ 99.644827][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.691075][ T5618] veth1_vlan: entered promiscuous mode [ 99.794351][ T4933] Bluetooth: hci2: command tx timeout [ 99.876531][ T4933] Bluetooth: hci4: command tx timeout [ 99.876577][ T4933] Bluetooth: hci5: command tx timeout [ 99.876610][ T4933] Bluetooth: hci3: command tx timeout [ 99.892748][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.999581][ T5618] veth0_macvtap: entered promiscuous mode [ 100.043645][ T5618] veth1_macvtap: entered promiscuous mode [ 100.059710][ T5621] veth0_vlan: entered promiscuous mode [ 100.165078][ T5621] veth1_vlan: entered promiscuous mode [ 100.211473][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.268168][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.310685][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.403871][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.404020][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.404083][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.509071][ T5621] veth0_macvtap: entered promiscuous mode [ 100.532525][ T146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.545151][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.576930][ T5621] veth1_macvtap: entered promiscuous mode [ 100.763594][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.767105][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.767131][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.811443][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.968781][ T1387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.968813][ T1387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.026843][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.046329][ T5633] veth0_vlan: entered promiscuous mode [ 101.082873][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.082944][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.083006][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.083066][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.171506][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.191906][ T5633] veth1_vlan: entered promiscuous mode [ 101.248202][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.248235][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.288883][ T5635] veth0_vlan: entered promiscuous mode [ 101.370266][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.370298][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.376235][ T5635] veth1_vlan: entered promiscuous mode [ 101.530357][ T5633] veth0_macvtap: entered promiscuous mode [ 101.540419][ T5631] veth0_vlan: entered promiscuous mode [ 101.555213][ T5630] veth0_vlan: entered promiscuous mode [ 101.587221][ T5633] veth1_macvtap: entered promiscuous mode [ 101.637474][ T5631] veth1_vlan: entered promiscuous mode [ 101.676803][ T5630] veth1_vlan: entered promiscuous mode [ 101.680488][ T5635] veth0_macvtap: entered promiscuous mode [ 101.704561][ T5850] loop1: detected capacity change from 0 to 32768 [ 101.728016][ T5635] veth1_macvtap: entered promiscuous mode [ 101.737983][ T5850] (syz.1.2,5850,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.744653][ T5850] (syz.1.2,5850,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.813540][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.841275][ T5850] JBD2: Ignoring recovery information on journal [ 101.924603][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.974928][ T5857] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 102.008223][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.046466][ T5850] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 102.107948][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.159438][ T5631] veth0_macvtap: entered promiscuous mode [ 102.262358][ T1387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.262432][ T1387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.262496][ T1387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.262557][ T1387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.292591][ T5850] ocfs2: Unmounting device (7,1) on (node local) [ 102.312235][ T5631] veth1_macvtap: entered promiscuous mode [ 102.386388][ T5630] veth0_macvtap: entered promiscuous mode [ 102.423751][ T146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.424429][ T146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.424494][ T146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.424556][ T146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.486488][ T5630] veth1_macvtap: entered promiscuous mode [ 102.575338][ T5860] loop0: detected capacity change from 0 to 32768 [ 102.576176][ T5862] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.718874][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.827215][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.911609][ T5864] loop1: detected capacity change from 0 to 1024 [ 102.947578][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.947609][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.954689][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.068482][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.080523][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.080552][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.133597][ T1103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.134660][ T1103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.134732][ T1103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.236670][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.237434][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.260331][ T90] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.362797][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.362828][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.363074][ T1103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.446217][ T90] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.461802][ T90] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.461845][ T90] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 103.461878][ T90] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.461943][ T90] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 103.461989][ T90] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 103.472666][ T1387] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.473861][ T1387] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.535211][ T90] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.535252][ T90] usb 1-1: Product: syz [ 103.535278][ T90] usb 1-1: Manufacturer: syz [ 103.539314][ T1387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.539340][ T1387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.599303][ T90] cdc_wdm 1-1:1.0: skipping garbage [ 103.599334][ T90] cdc_wdm 1-1:1.0: skipping garbage [ 103.620869][ T90] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 103.620902][ T90] cdc_wdm 1-1:1.0: Unknown control protocol [ 103.842015][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.842046][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.919269][ T5875] loop3: detected capacity change from 0 to 512 [ 103.960847][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.960881][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.992477][ T5875] ======================================================= [ 103.992477][ T5875] WARNING: The mand mount option has been deprecated and [ 103.992477][ T5875] and is ignored by this kernel. Remove the mand [ 103.992477][ T5875] option from the mount to silence this warning. [ 103.992477][ T5875] ======================================================= [ 103.992668][ T5875] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.042874][ T5875] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.043350][ T5875] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 104.056468][ T5875] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 104.056862][ T5875] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.116429][ T5875] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm syz.3.4: Invalid block bitmap block 0 in block_group 0 [ 104.116613][ T5875] loop3: lost filesystem error report for type 5 error -117 [ 104.142348][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 104.142385][ C1] EXT4-fs (loop3): last error at time 1791170658: ext4_read_block_bitmap_nowait:486 [ 104.159317][ T5875] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm syz.3.4: Invalid block bitmap block 0 in block_group 0 [ 104.159369][ T5875] loop3: lost filesystem error report for type 5 error -117 [ 104.178060][ T5875] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:486: comm syz.3.4: Invalid block bitmap block 0 in block_group 0 [ 104.178111][ T5875] loop3: lost filesystem error report for type 5 error -117 [ 104.188213][ T5875] Quota error (device loop3): write_blk: dquota write failed [ 104.188325][ T5875] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 104.188376][ T5875] EXT4-fs error (device loop3): ext4_acquire_dquot:7067: comm syz.3.4: Failed to acquire dquot type 1 [ 104.188413][ T5875] loop3: lost filesystem error report for type 5 error -28 [ 104.248422][ T5875] EXT4-fs (loop3): 1 orphan inode deleted [ 104.264079][ T59] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 104.264314][ T59] EXT4-fs error (device loop3): ext4_release_dquot:7103: comm kworker/u8:4: Failed to release dquot type 1 [ 104.264354][ T59] loop3: lost filesystem error report for type 5 error -117 [ 104.306703][ T5875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.331046][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.331079][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.348891][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6'. [ 104.349017][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6'. [ 104.447251][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.495214][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.495247][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.607371][ T5882] loop1: detected capacity change from 0 to 1024 [ 104.949667][ T5889] loop2: detected capacity change from 0 to 512 [ 104.967585][ T5889] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.967613][ T5889] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.996024][ T5747] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.030644][ T5890] loop4: detected capacity change from 0 to 256 [ 105.071491][ T5889] EXT4-fs (loop2): 1 truncate cleaned up [ 105.143495][ T5889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.164575][ T5747] usb 6-1: Using ep0 maxpacket: 8 [ 105.180391][ T5747] usb 6-1: unable to get BOS descriptor or descriptor too short [ 105.180455][ T5747] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 105.203983][ T5747] usb 6-1: config 4 interface 0 has no altsetting 0 [ 105.222499][ T5893] ip6gretap1: entered allmulticast mode [ 105.223343][ T5747] usb 6-1: string descriptor 0 read error: -22 [ 105.223511][ T5747] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 105.319038][ T5747] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 105.376798][ T5747] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.377392][ T5747] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 105.377478][ T5747] usb 6-1: media controller created [ 105.427862][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.892209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.942188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.022198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.102202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.142192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.212745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 106.282188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.312195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.362195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.442206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.908420][ T25] usb 1-1: USB disconnect, device number 2 [ 108.048180][ T5747] zl10353_read_register: readreg error (reg=127, ret==0) [ 108.059890][ T5886] usb 6-1: dvb_usb_au6610: wlen=4100, aborting [ 109.768604][ T5900] input: syz0 as /devices/virtual/input/input5 [ 109.952909][ T5747] usb 6-1: USB disconnect, device number 2 [ 109.994246][ T5912] loop0: detected capacity change from 0 to 128 [ 110.008810][ T5912] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.021049][ T5912] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.058535][ T5915] loop5: detected capacity change from 0 to 128 [ 110.153201][ T5908] nvmet: adding nsid 1 to subsystem testsubsys [ 110.233133][ T5908] nvmet: failed to open block device /dev/nullb1: (-2) [ 110.301714][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.551061][ T5914] loop4: detected capacity change from 0 to 4096 [ 110.649135][ T1103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.869031][ T101] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 110.899980][ T5919] loop5: detected capacity change from 0 to 256 [ 110.914806][ T5919] exfat: Deprecated parameter 'utf8' [ 110.969967][ T5914] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 110.970011][ T5914] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 110.989032][ T5919] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 111.009959][ T5908] nvme nvme0: creating 2 I/O queues. [ 111.038438][ T5921] loop0: detected capacity change from 0 to 256 [ 111.051455][ T5921] exfat: Deprecated parameter 'namecase' [ 111.051576][ T5921] exfat: Deprecated parameter 'namecase' [ 111.101981][ T5908] nvme nvme0: new ctrl: "testsubsys" [ 111.184363][ T5921] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d) [ 111.278760][ T1103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.424719][ T59] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 111.427631][ T5630] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 111.427672][ T5630] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 111.427699][ T5630] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 111.474049][ T12] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 111.622097][ T1103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.955920][ T5929] mmap: syz.4.36 (5929): VmData 37724160 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 112.659156][ T1103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.721181][ T5932] loop0: detected capacity change from 0 to 256 [ 112.722517][ T5932] exfat: Deprecated parameter 'utf8' [ 113.876057][ T5934] input: syz0 as /devices/virtual/input/input6 [ 114.529325][ T5932] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 114.646387][ T5937] loop4: detected capacity change from 0 to 128 [ 114.695730][ T5937] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 114.695780][ T5937] hpfs: filesystem error: improperly stopped [ 114.695805][ T5937] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 114.695831][ T5937] hpfs: You really don't want any checks? You are crazy... [ 114.695858][ T5937] hpfs: Code page index out of array [ 114.695871][ T5937] hpfs: code page support is disabled [ 114.707838][ T5937] hpfs: hpfs_map_4sectors(): unaligned read [ 114.708114][ T5937] hpfs: hpfs_map_4sectors(): unaligned read [ 114.708131][ T5937] hpfs: filesystem error: unable to find root dir [ 114.905862][ T4933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.908372][ T4933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.909156][ T4933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.920254][ T4933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.960988][ T4933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.344072][ T1103] bridge_slave_1: left allmulticast mode [ 115.344120][ T1103] bridge_slave_1: left promiscuous mode [ 115.346749][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.422100][ T1103] bridge_slave_0: left allmulticast mode [ 115.446773][ T1103] bridge_slave_0: left promiscuous mode [ 115.447054][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.720130][ T5947] null_blk: nullb1: using native zone append [ 115.770587][ T5950] nvmet: failed to open block device /dev/nullb1: (-2) [ 115.801172][ T5950] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 115.892209][ T5954] loop1: detected capacity change from 0 to 256 [ 115.901102][ T5954] exfat: Deprecated parameter 'utf8' [ 115.901173][ T5954] exfat: Deprecated parameter 'namecase' [ 115.901323][ T5954] exfat: Deprecated parameter 'namecase' [ 115.901366][ T5954] exfat: Deprecated parameter 'utf8' [ 116.036711][ T5954] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 116.037248][ T5954] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 116.195933][ T146] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 116.326464][ T5950] nvme nvme1: creating 2 I/O queues. [ 116.341412][ T5950] nvme nvme1: new ctrl: "testsubsys" [ 116.440056][ T5960] loop4: detected capacity change from 0 to 32768 [ 116.456631][ T5947] null_blk: disk nullb1 created [ 116.618022][ T5960] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 116.691687][ T5972] loop3: detected capacity change from 0 to 64 [ 116.959607][ T5630] ocfs2: Unmounting device (7,4) on (node local) [ 116.994879][ T4933] Bluetooth: hci3: command tx timeout [ 117.360879][ T13] nvme nvme1: rescanning namespaces. [ 117.380140][ T37] nvme nvme0: rescanning namespaces. [ 117.381347][ T5982] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 117.989680][ T5987] input: syz0 as /devices/virtual/input/input7 [ 119.180007][ T4933] Bluetooth: hci3: command tx timeout [ 119.234598][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.467019][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.497330][ T1103] bond0 (unregistering): Released all slaves [ 120.265160][ T5985] input: syz0 as /devices/virtual/input/input8 [ 120.318762][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 120.369472][ T50] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 120.675529][ T5982] nvme nvme2: creating 2 I/O queues. [ 121.301541][ T4933] Bluetooth: hci3: command tx timeout [ 121.454391][ T5982] nvme nvme2: new ctrl: "testsubsys" [ 121.970393][ T6010] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 123.315526][ T4933] Bluetooth: hci3: command tx timeout [ 123.663764][ T6020] input: syz0 as /devices/virtual/input/input9 [ 123.808191][ T146] nvmet: Created nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 123.832817][ T6010] nvme nvme3: creating 2 I/O queues. [ 123.856601][ T6010] nvme nvme3: new ctrl: "testsubsys" [ 124.298080][ T1103] hsr_slave_0: left promiscuous mode [ 124.310937][ T1103] hsr_slave_1: left promiscuous mode [ 124.312024][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.312066][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.347795][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.347828][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.381759][ T1103] veth1_macvtap: left promiscuous mode [ 124.381832][ T1103] veth0_macvtap: left promiscuous mode [ 124.381966][ T1103] veth1_vlan: left promiscuous mode [ 124.382127][ T1103] veth0_vlan: left promiscuous mode [ 124.455505][ T4998] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.543290][ T5747] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 124.622266][ T4998] usb 4-1: Using ep0 maxpacket: 8 [ 124.623207][ T4998] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 124.625917][ T4998] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.625956][ T4998] usb 4-1: config 179 has no interface number 0 [ 124.626009][ T4998] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 124.626056][ T4998] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 124.626104][ T4998] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.626150][ T4998] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 124.626198][ T4998] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.626262][ T4998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.671615][ T6031] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.713465][ T5747] usb 6-1: Using ep0 maxpacket: 8 [ 124.723929][ T5747] usb 6-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 124.739934][ T5747] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 124.740022][ T5747] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.740069][ T5747] usb 6-1: config 0 interface 0 has no altsetting 0 [ 124.740117][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.796657][ T5747] usb 6-1: config 0 descriptor?? [ 125.126685][ T5746] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10 [ 125.243715][ T30] usb 4-1: USB disconnect, device number 2 [ 125.243715][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.243948][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 125.291954][ T6029] loop4: detected capacity change from 0 to 32768 [ 125.439877][ T6029] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 125.487563][ T5747] input: HID 0518:0002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0518:0002.0001/input/input11 [ 125.586592][ T6029] XFS (loop4): Ending clean mount [ 125.688564][ T6051] loop0: detected capacity change from 0 to 512 [ 125.699900][ T6051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.718739][ T6051] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 125.763575][ T6051] EXT4-fs (loop0): orphan cleanup on readonly fs [ 125.807411][ T6051] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 125.807460][ T6051] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 125.842003][ T5630] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 125.850446][ T5747] ezkey 0003:0518:0002.0001: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.5-1/input0 [ 125.936730][ T6051] EXT4-fs (loop0): 1 truncate cleaned up [ 126.052050][ T6051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.165525][ T6051] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #2: block 4: comm syz.0.48: lblock 0 mapped to illegal pblock 4 (length 1) [ 126.191714][ T5747] usb 6-1: USB disconnect, device number 3 [ 126.217048][ T6051] EXT4-fs (loop0): Remounting filesystem read-only [ 127.098806][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.135201][ T6058] fido_id[6058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 127.201984][ T6066] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 127.373091][ T1416] nvmet: Created nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 127.403126][ T6066] nvme nvme4: creating 2 I/O queues. [ 127.443134][ T6066] nvme nvme4: new ctrl: "testsubsys" [ 127.506953][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 127.576123][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 127.782775][ T5746] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 128.554247][ T5746] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 128.558586][ T5746] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.558638][ T5746] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.558694][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.567041][ T5746] usb 1-1: config 0 descriptor?? [ 128.716029][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 129.167234][ T5746] waltop 0003:172F:0501.0002: item fetching failed at offset 5/6 [ 129.172761][ T5746] waltop 0003:172F:0501.0002: probe with driver waltop failed with error -22 [ 131.456671][ T25] usb 1-1: USB disconnect, device number 3 [ 132.612965][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.613067][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.897482][ T6096] input: syz0 as /devices/virtual/input/input12 [ 134.534173][ T6107] input: syz0 as /devices/virtual/input/input13 [ 134.771511][ T6113] loop0: detected capacity change from 0 to 256 [ 134.789044][ T6113] exfat: Deprecated parameter 'utf8' [ 134.789078][ T6113] exfat: Deprecated parameter 'utf8' [ 134.789204][ T6113] exfat: Deprecated parameter 'utf8' [ 134.789241][ T6113] exfat: Deprecated parameter 'namecase' [ 134.894167][ T6113] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 135.095341][ T6117] loop4: detected capacity change from 0 to 2048 [ 135.214882][ T6122] loop5: detected capacity change from 0 to 512 [ 135.283411][ T6122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c018, mo2=0102] [ 135.283556][ T6122] System zones: 1-12 [ 135.283810][ T6122] EXT4-fs (loop5): orphan cleanup on readonly fs [ 135.283836][ T6122] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 135.288957][ T6122] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 135.302197][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 135.302226][ C1] EXT4-fs (loop5): initial error at time 1791170689: ext4_mb_generate_buddy:1314 [ 135.302264][ C1] EXT4-fs (loop5): last error at time 1791170689: ext4_mb_generate_buddy:1314 [ 135.307016][ T6122] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.67: attempt to clear invalid blocks 2 len 1 [ 135.307198][ T6122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.308991][ T6122] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.67: invalid indirect mapped block 1819239214 (level 0) [ 135.309042][ T6122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.309479][ T6122] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.67: invalid indirect mapped block 1819239214 (level 1) [ 135.309630][ T6122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 135.310526][ T6122] EXT4-fs (loop5): 1 truncate cleaned up [ 135.358681][ T6117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.383585][ T6122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.492378][ T6122] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 135.494871][ T6122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c018, mo2=0102] [ 135.494947][ T6122] EXT4-fs error (device loop5): __ext4_remount:6872: comm syz.5.67: Abort forced by user [ 135.504216][ T6122] EXT4-fs (loop5): Remounting filesystem read-only [ 135.504246][ T6122] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 135.565089][ T4933] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 135.568155][ T4933] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 135.568190][ T4933] CPU: 1 UID: 0 PID: 4933 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 135.568234][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 135.568259][ T4933] Workqueue: hci1 hci_rx_work [ 135.568325][ T4933] Call Trace: [ 135.568337][ T4933] [ 135.568352][ T4933] dump_stack_lvl+0x100/0x190 [ 135.568410][ T4933] sysfs_warn_dup.cold+0x1c/0x28 [ 135.568471][ T4933] sysfs_create_dir_ns+0x24b/0x2b0 [ 135.568520][ T4933] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 135.568566][ T4933] ? find_held_lock+0x2b/0x80 [ 135.568626][ T4933] ? kobject_add_internal+0x25f/0x930 [ 135.568696][ T4933] ? kobject_add_internal+0x25f/0x930 [ 135.568762][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.568809][ T4933] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.568861][ T4933] kobject_add_internal+0x2c8/0x930 [ 135.568933][ T4933] kobject_add+0x16a/0x1e0 [ 135.568968][ T4933] ? __pfx_kobject_add+0x10/0x10 [ 135.569028][ T4933] ? class_to_subsys+0x10f/0x150 [ 135.569076][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.569125][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.569171][ T4933] ? kobject_put+0xb9/0x640 [ 135.569227][ T4933] ? _raw_spin_unlock+0x28/0x50 [ 135.569281][ T4933] device_add+0x294/0x1970 [ 135.569324][ T4933] ? __pfx_dev_set_name+0x10/0x10 [ 135.569374][ T4933] ? __pfx_device_add+0x10/0x10 [ 135.569413][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.569465][ T4933] ? find_held_lock+0x2b/0x80 [ 135.569520][ T4933] ? hci_find_link_key+0x1a4/0x3c0 [ 135.569566][ T4933] ? hci_find_link_key+0x1a4/0x3c0 [ 135.569611][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.569669][ T4933] hci_conn_add_sysfs+0x1a3/0x260 [ 135.569727][ T4933] hci_conn_complete_evt+0x5bb/0x13f0 [ 135.569795][ T4933] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 135.569854][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.569903][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.569948][ T4933] ? __skb_clone+0x570/0x760 [ 135.570008][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.570054][ T4933] ? skb_pull_data+0x15f/0x1e0 [ 135.570108][ T4933] hci_event_packet+0x8e9/0xcd0 [ 135.570146][ T4933] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 135.570209][ T4933] ? __pfx_hci_event_packet+0x10/0x10 [ 135.570255][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.570301][ T4933] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.570350][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.570406][ T4933] hci_rx_work+0x451/0xfc0 [ 135.570478][ T4933] process_one_work+0xac7/0x1b10 [ 135.570557][ T4933] ? __pfx_process_one_work+0x10/0x10 [ 135.570618][ T4933] ? lock_acquire+0x1d1/0x380 [ 135.570671][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.570732][ T4933] worker_thread+0x5ef/0xe50 [ 135.570808][ T4933] ? kthread+0x13a/0x450 [ 135.570858][ T4933] ? __pfx_worker_thread+0x10/0x10 [ 135.570915][ T4933] kthread+0x373/0x450 [ 135.570965][ T4933] ? __pfx_kthread+0x10/0x10 [ 135.571021][ T4933] ret_from_fork+0x730/0xd60 [ 135.571064][ T4933] ? __pfx_ret_from_fork+0x10/0x10 [ 135.571107][ T4933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.571153][ T4933] ? __switch_to+0x800/0x10f0 [ 135.571204][ T4933] ? __switch_to_asm+0x39/0x70 [ 135.571242][ T4933] ? __pfx_kthread+0x10/0x10 [ 135.571298][ T4933] ret_from_fork_asm+0x1a/0x30 [ 135.571359][ T4933] [ 135.571483][ T4933] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 135.571533][ T4933] Bluetooth: hci1: failed to register connection device [ 135.680011][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.894312][ T5635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.177819][ T6145] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 137.347411][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.347531][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.347712][ T5939] bridge_slave_0: entered allmulticast mode [ 137.351996][ T5939] bridge_slave_0: entered promiscuous mode [ 137.403406][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.403526][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.403691][ T5939] bridge_slave_1: entered allmulticast mode [ 137.454497][ T5939] bridge_slave_1: entered promiscuous mode [ 137.537178][ T13] nvmet: Created nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 137.564183][ T6142] nvme nvme5: creating 2 I/O queues. [ 137.607407][ T6142] nvme nvme5: new ctrl: "testsubsys" [ 137.633006][ T4933] Bluetooth: hci1: command tx timeout [ 137.950159][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.536888][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.694975][ T6161] loop5: detected capacity change from 0 to 2048 [ 138.786014][ T6161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.794248][ T6161] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.935592][ T5939] team0: Port device team_slave_0 added [ 138.956516][ T5939] team0: Port device team_slave_1 added [ 140.289425][ T5619] Bluetooth: hci1: command tx timeout [ 140.314673][ T6167] input: syz0 as /devices/virtual/input/input14 [ 140.325273][ T5635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.485305][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 140.489535][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.489558][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.489604][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.665855][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.665881][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.665927][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.845522][ T6175] loop3: detected capacity change from 0 to 64 [ 141.210068][ T5939] hsr_slave_0: entered promiscuous mode [ 141.216961][ T5939] hsr_slave_1: entered promiscuous mode [ 141.223882][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 141.223915][ T5939] Cannot create hsr debugfs directory [ 141.569828][ T6179] input: syz0 as /devices/virtual/input/input15 [ 142.100273][ T6184] loop3: detected capacity change from 0 to 256 [ 142.352254][ T4933] Bluetooth: hci1: command tx timeout [ 144.261661][ T6189] input: syz0 as /devices/virtual/input/input16 [ 144.346618][ T6193] loop1: detected capacity change from 0 to 1024 [ 144.540276][ T6193] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 144.540322][ T6193] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 144.540437][ T6193] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 144.557315][ T6193] EXT4-fs (loop1): invalid journal inode [ 144.557415][ T6193] EXT4-fs (loop1): can't get journal size [ 144.618556][ T6193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.747440][ T6193] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 144.747440][ T6193] [ 145.106470][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.275413][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 145.915121][ T5939] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 145.981715][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.021142][ T5939] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.073327][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.080905][ T5939] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.141213][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.155929][ T5939] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 146.198665][ T5939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.373602][ T6216] loop4: detected capacity change from 0 to 2048 [ 146.551770][ T6216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.668544][ T6216] EXT4-fs error (device loop4): ext4_find_extent:903: inode #2: comm syz.4.89: inode has invalid extent depth: 8 [ 146.710190][ T6216] EXT4-fs (loop4): Remounting filesystem read-only [ 146.776397][ T6229] loop5: detected capacity change from 0 to 2048 [ 146.827826][ T6229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.207293][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.90'. [ 147.353150][ T6237] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 147.371782][ T6237] 9p: Bad value for 'rfdno' [ 147.868901][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.493772][ T6239] input: syz0 as /devices/virtual/input/input17 [ 149.768380][ T5635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.890158][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.891140][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.91'. [ 150.562017][ T6248] input: syz0 as /devices/virtual/input/input18 [ 151.735526][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.948168][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.948305][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.033699][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.033824][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.198314][ T5939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.198353][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.709229][ T6262] input: syz0 as /devices/virtual/input/input19 [ 155.452710][ T6274] loop1: detected capacity change from 0 to 256 [ 155.607670][ T6275] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 155.938865][ T1416] nvmet: Created nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 155.962321][ T6275] nvme nvme6: creating 2 I/O queues. [ 156.017392][ T6275] nvme nvme6: new ctrl: "testsubsys" [ 156.108414][ T6282] loop1: detected capacity change from 0 to 1024 [ 156.863626][ T6289] input: syz0 as /devices/virtual/input/input20 [ 158.555041][ T6297] loop3: detected capacity change from 0 to 16 [ 158.623147][ T6297] erofs (device loop3): DAX unsupported by block device. Turning off DAX. [ 160.058540][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.461681][ T6315] input: syz0 as /devices/virtual/input/input21 [ 163.381317][ T6297] erofs (device loop3): mounted with root inode @ nid 36. [ 163.465206][ T6324] loop0: detected capacity change from 0 to 2048 [ 163.530217][ T6324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.624706][ T6333] loop5: detected capacity change from 0 to 256 [ 163.654922][ T6333] exfat: Deprecated parameter 'utf8' [ 163.655022][ T6333] exfat: Deprecated parameter 'namecase' [ 163.749256][ T6333] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 164.155342][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 164.494309][ T6337] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 164.516093][ T6337] 9p: Bad value for 'rfdno' [ 164.786792][ T6329] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 165.108985][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.288824][ T5939] veth0_vlan: entered promiscuous mode [ 167.533861][ T6345] input: syz0 as /devices/virtual/input/input22 [ 167.654684][ T5939] veth1_vlan: entered promiscuous mode [ 167.980770][ T5939] veth0_macvtap: entered promiscuous mode [ 168.000793][ T6350] loop3: detected capacity change from 0 to 2048 [ 168.015668][ T5939] veth1_macvtap: entered promiscuous mode [ 168.157733][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.165800][ T6350] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 168.239537][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.303004][ T6147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.308013][ T101] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.308078][ T101] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.308143][ T101] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.597881][ T6361] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.706866][ T6360] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 168.905481][ T6366] loop4: detected capacity change from 0 to 2048 [ 168.926348][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.926370][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.123699][ T6366] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 169.123882][ T6366] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 169.123906][ T6366] UDF-fs: Scanning with blocksize 512 failed [ 169.267857][ T6366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.331314][ T6147] nvmet: Created nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 169.350793][ T6360] nvme nvme7: creating 2 I/O queues. [ 169.368967][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.368999][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.456959][ T6360] nvme nvme7: new ctrl: "testsubsys" [ 170.592831][ T6379] input: syz0 as /devices/virtual/input/input23 [ 172.920283][ T6378] input: syz0 as /devices/virtual/input/input24 [ 173.542528][ T6390] loop4: detected capacity change from 0 to 64 [ 173.627922][ T6390] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 173.699851][ T6392] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 174.370414][ T50] nvmet: Created nvm controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 174.427850][ T6392] nvme nvme8: creating 2 I/O queues. [ 174.798340][ T6392] nvme nvme8: new ctrl: "testsubsys" [ 175.100486][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.113066][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.131492][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.134536][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.135496][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.489827][ T6413] loop5: detected capacity change from 0 to 1024 [ 175.607769][ T6413] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 175.785398][ T6413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.934409][ T6402] loop0: detected capacity change from 0 to 32768 [ 175.986012][ T5635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.008441][ T6402] JBD2: Ignoring recovery information on journal [ 177.550372][ T5619] Bluetooth: hci6: command tx timeout [ 177.577992][ T6402] JBD2: journal reset failed [ 177.578011][ T6402] (syz.0.120,6402,1):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 177.578051][ T6402] (syz.0.120,6402,1):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 177.813109][ T6423] input: syz0 as /devices/virtual/input/input25 [ 178.093617][ T1110] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.213635][ T6429] loop4: detected capacity change from 0 to 16 [ 178.234855][ T6429] erofs (device loop4): mounted with root inode @ nid 36. [ 178.624839][ T1110] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.378574][ T6436] input: syz0 as /devices/virtual/input/input26 [ 179.619431][ T5619] Bluetooth: hci6: command tx timeout [ 179.788885][ T1110] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.933935][ T6440] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 180.644004][ T6447] input: syz0 as /devices/virtual/input/input27 [ 181.732494][ T5619] Bluetooth: hci6: command tx timeout [ 181.942732][ T50] nvmet: Created nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 181.945945][ T6440] nvme nvme9: creating 2 I/O queues. [ 181.950319][ T6440] nvme nvme9: new ctrl: "testsubsys" [ 181.985955][ T1110] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.261202][ T6454] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 182.439412][ T6463] loop1: detected capacity change from 0 to 1024 [ 182.477547][ T6463] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 182.514125][ T6463] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 182.546845][ T1460] nvmet: Created nvm controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 182.571495][ T6454] nvme nvme10: creating 2 I/O queues. [ 182.582097][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.619264][ T6454] nvme nvme10: new ctrl: "testsubsys" [ 182.647650][ T6463] EXT4-fs error (device loop1): ext4_empty_dir:3102: inode #2: block 48: comm syz.1.116: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 182.668010][ T6463] EXT4-fs warning (device loop1): ext4_empty_dir:3106: inode #2: comm syz.1.116: directory missing '..' [ 182.728639][ T1110] bridge_slave_1: left allmulticast mode [ 182.728677][ T1110] bridge_slave_1: left promiscuous mode [ 182.728950][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.779255][ T1110] bridge_slave_0: left allmulticast mode [ 182.779291][ T1110] bridge_slave_0: left promiscuous mode [ 182.780872][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.119032][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.665923][ T6479] loop1: detected capacity change from 0 to 512 [ 183.679657][ T6479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.679722][ T6479] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.750742][ T6479] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 183.794486][ T5619] Bluetooth: hci6: command tx timeout [ 184.515235][ T6479] EXT4-fs (loop1): 1 truncate cleaned up [ 184.537628][ T6479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.666306][ T6468] loop4: detected capacity change from 0 to 32768 [ 184.688962][ T6468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.130 (6468) [ 184.737331][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.776376][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.806594][ T1110] bond0 (unregistering): Released all slaves [ 184.837752][ T6468] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.837791][ T6468] BTRFS info (device loop4): using sha256 checksum algorithm [ 185.081911][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.136549][ T6468] BTRFS info (device loop4): enabling ssd optimizations [ 185.136587][ T6468] BTRFS info (device loop4): turning on async discard [ 185.136616][ T6468] BTRFS info (device loop4): enabling free space tree [ 185.503933][ T5630] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.876270][ T6507] input: syz0 as /devices/virtual/input/input28 [ 188.109476][ T6523] loop1: detected capacity change from 0 to 1024 [ 189.594615][ T6528] input: syz0 as /devices/virtual/input/input29 [ 189.670049][ T1110] hsr_slave_0: left promiscuous mode [ 189.692326][ T1110] hsr_slave_1: left promiscuous mode [ 189.693301][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.693327][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.698688][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.698714][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.978659][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 189.978686][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 190.121891][ T1110] veth1_macvtap: left promiscuous mode [ 190.121944][ T1110] veth0_macvtap: left promiscuous mode [ 190.122068][ T1110] veth1_vlan: left promiscuous mode [ 190.160566][ T1110] veth0_vlan: left promiscuous mode [ 191.357579][ T6541] loop4: detected capacity change from 0 to 1024 [ 191.754209][ T6542] input: syz0 as /devices/virtual/input/input30 [ 192.565968][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 192.628642][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 192.705272][ T6545] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 193.021433][ T59] nvmet: Created nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 193.034668][ T6545] nvme nvme11: creating 2 I/O queues. [ 193.043619][ T6545] nvme nvme11: new ctrl: "testsubsys" [ 193.167920][ T6555] loop3: detected capacity change from 0 to 256 [ 193.189246][ T6555] exfat: Deprecated parameter 'utf8' [ 193.191797][ T6555] exfat: Deprecated parameter 'namecase' [ 193.191849][ T6555] exfat: Deprecated parameter 'namecase' [ 193.306134][ T6555] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 193.637635][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.637711][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.018501][ T6566] loop0: detected capacity change from 0 to 4096 [ 195.129559][ T6566] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 196.084904][ T6574] input: syz0 as /devices/virtual/input/input31 [ 197.116526][ T6566] ntfs3(loop0): ino=19, mi_enum_attr [ 197.116570][ T6566] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 197.139527][ T6566] ntfs3(loop0): ino=18, mi_enum_attr [ 197.141756][ T6566] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 197.871586][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 197.883986][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.886408][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.886598][ T6407] bridge_slave_0: entered allmulticast mode [ 197.918933][ T6407] bridge_slave_0: entered promiscuous mode [ 197.944179][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.944359][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.944514][ T6407] bridge_slave_1: entered allmulticast mode [ 197.999022][ T6407] bridge_slave_1: entered promiscuous mode [ 198.287945][ T6607] loop5: detected capacity change from 0 to 164 [ 198.423076][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.426798][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.602170][ T6605] input: syz0 as /devices/virtual/input/input32 [ 198.816202][ T6407] team0: Port device team_slave_0 added [ 198.912289][ T6407] team0: Port device team_slave_1 added [ 199.134273][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.134300][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.134345][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.136584][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.136605][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.136651][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.280888][ T6407] hsr_slave_0: entered promiscuous mode [ 199.288387][ T6407] hsr_slave_1: entered promiscuous mode [ 199.289455][ T6407] debugfs: 'hsr0' already exists in 'hsr' [ 199.289483][ T6407] Cannot create hsr debugfs directory [ 200.248363][ T6607] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 200.307076][ T6607] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 201.670587][ T6618] input: syz0 as /devices/virtual/input/input33 [ 202.114099][ T6621] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 202.372195][ T1214] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 202.411625][ T1110] nvmet: Created nvm controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 202.421549][ T6621] nvme nvme12: creating 2 I/O queues. [ 202.453578][ T6621] nvme nvme12: new ctrl: "testsubsys" [ 202.522659][ T1214] usb 2-1: Using ep0 maxpacket: 8 [ 202.523642][ T1214] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 202.551126][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.551167][ T1214] usb 2-1: Product: syz [ 202.551193][ T1214] usb 2-1: Manufacturer: syz [ 202.551219][ T1214] usb 2-1: SerialNumber: syz [ 202.587448][ T1214] usb 2-1: config 0 descriptor?? [ 202.603948][ T1214] gspca_main: se401-2.14.0 probing 047d:5003 [ 202.621455][ T6407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.646706][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.647892][ T6407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.674299][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.675373][ T6407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.720618][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.730778][ T6407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.771283][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.203731][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.255391][ T1214] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 203.298764][ T1214] usb 2-1: USB disconnect, device number 2 [ 203.308071][ T6407] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.339270][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.339391][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.994375][ T6648] input: syz0 as /devices/virtual/input/input35 [ 206.160120][ T6645] input: syz0 as /devices/virtual/input/input36 [ 206.918555][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.918680][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.126005][ T6662] input: syz0 as /devices/virtual/input/input37 [ 210.812693][ T6670] input: syz0 as /devices/virtual/input/input38 [ 210.956332][ T6674] jffs2: notice: (6674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 211.263113][ T6680] loop4: detected capacity change from 0 to 64 [ 211.676449][ T6684] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 211.820436][ T6690] loop4: detected capacity change from 0 to 256 [ 212.077412][ T1460] nvmet: Created nvm controller 14 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 212.084036][ T6684] nvme nvme13: creating 2 I/O queues. [ 212.106570][ T6684] nvme nvme13: new ctrl: "testsubsys" [ 212.853614][ T6705] input: syz0 as /devices/virtual/input/input39 [ 215.641614][ T6714] input: syz0 as /devices/virtual/input/input40 [ 215.945060][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.199783][ T6712] Bluetooth: hci0: command 0x0406 tx timeout [ 216.199845][ T6712] Bluetooth: hci1: command 0x0406 tx timeout [ 216.199885][ T6712] Bluetooth: hci2: command 0x0406 tx timeout [ 216.199947][ T6712] Bluetooth: hci4: command 0x0406 tx timeout [ 216.199983][ T6712] Bluetooth: hci5: command 0x0406 tx timeout [ 217.165460][ T6729] input: syz0 as /devices/virtual/input/input41 [ 219.980882][ T6747] input: syz0 as /devices/virtual/input/input42 [ 220.460015][ T6751] loop1: detected capacity change from 0 to 256 [ 220.477017][ T6751] exfat: Deprecated parameter 'namecase' [ 220.477098][ T6751] exfat: Deprecated parameter 'namecase' [ 221.134852][ T6756] loop0: detected capacity change from 0 to 512 [ 221.155991][ T6756] EXT4-fs: Ignoring removed bh option [ 221.268183][ T6756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.361339][ T6751] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 221.416242][ T6756] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.178: bad orphan inode 131083 [ 221.416293][ T6756] loop0: lost filesystem error report for type 5 error -117 [ 221.422153][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 221.422185][ C1] EXT4-fs (loop0): initial error at time 1791170775: ext4_orphan_get:1429 [ 221.422225][ C1] EXT4-fs (loop0): last error at time 1791170775: ext4_orphan_get:1429 [ 221.512876][ T6756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.684330][ T6407] veth0_vlan: entered promiscuous mode [ 222.022258][ T6407] veth1_vlan: entered promiscuous mode [ 222.341973][ T6407] veth0_macvtap: entered promiscuous mode [ 222.452454][ T6407] veth1_macvtap: entered promiscuous mode [ 222.507754][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.535719][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.622507][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.643607][ T1103] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.643672][ T1103] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.643737][ T1103] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.643796][ T1103] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.010405][ T6768] input: syz0 as /devices/virtual/input/input43 [ 224.402889][ T6777] loop0: detected capacity change from 0 to 512 [ 224.454584][ T6777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 224.454730][ T6777] System zones: 1-12 [ 224.725346][ T6777] EXT4-fs error (device loop0): ext4_xattr_inode_iget:470: comm syz.0.180: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 224.725400][ T6777] loop0: lost filesystem error report for type 5 error -117 [ 224.732159][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 224.732191][ C0] EXT4-fs (loop0): initial error at time 1791170779: ext4_xattr_inode_iget:470 [ 224.732229][ C0] EXT4-fs (loop0): last error at time 1791170779: ext4_xattr_inode_iget:470 [ 225.181812][ T6777] EXT4-fs (loop0): 1 orphan inode deleted [ 225.361224][ T6777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.437051][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.437083][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.649396][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.702605][ T6786] loop4: detected capacity change from 0 to 8192 [ 225.721526][ T1416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.721555][ T1416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.942792][ T6790] loop5: detected capacity change from 0 to 16 [ 225.983368][ T5762] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 226.164000][ T6794] loop6: detected capacity change from 0 to 256 [ 226.168581][ T6794] exfat: Deprecated parameter 'namecase' [ 226.215171][ T6794] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d) [ 226.335579][ T5762] usb 2-1: Using ep0 maxpacket: 16 [ 226.351266][ T5762] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 226.355168][ T5762] usb 2-1: config index 0 descriptor too short (expected 82, got 18) [ 226.378017][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.378055][ T5762] usb 2-1: Product: syz [ 226.378079][ T5762] usb 2-1: Manufacturer: syz [ 226.378103][ T5762] usb 2-1: SerialNumber: syz [ 226.904971][ T6795] input: syz0 as /devices/virtual/input/input44 [ 228.111076][ T6802] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 228.246380][ T1091] nvmet: Created nvm controller 15 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 228.248070][ T6802] nvme nvme14: creating 2 I/O queues. [ 228.496258][ T6807] loop4: detected capacity change from 0 to 4096 [ 228.515062][ T5762] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 228.823624][ T6802] nvme nvme14: new ctrl: "testsubsys" [ 228.967790][ T6812] input: syz0 as /devices/virtual/input/input45 [ 230.377812][ T6811] input: syz0 as /devices/virtual/input/input46 [ 231.593358][ C0] nvme nvme13: long keepalive RTT (1510 ms) [ 232.056019][ T6807] ntfs3(loop4): Failed to read $UpCase (-4). [ 232.105858][ T5762] usb 2-1: device descriptor read/all, error -71 [ 232.949848][ T6822] input: syz0 as /devices/virtual/input/input47 [ 234.814939][ T5762] usb 2-1: USB disconnect, device number 3 [ 236.571864][ T6839] loop5: detected capacity change from 0 to 64 [ 237.248597][ T6842] input: syz0 as /devices/virtual/input/input48 [ 238.855453][ T6845] loop0: detected capacity change from 0 to 2048 [ 238.919874][ T6845] NILFS (loop0): invalid segment: Magic number mismatch [ 238.919913][ T6845] NILFS (loop0): trying rollback from an earlier position [ 238.955943][ T6845] NILFS (loop0): recovery complete [ 239.018713][ T6848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.168178][ T6845] syz.0.190: attempt to access beyond end of device [ 239.168178][ T6845] loop0: rw=8388608, sector=2388, nr_sectors = 4 limit=2048 [ 239.169513][ T6845] NILFS (loop0): I/O error reading node block for GC (ino=6, vblocknr=2147483649) [ 239.169552][ T6845] NILFS (loop0): error -5 preparing GC: cannot read source blocks [ 239.431738][ T6853] loop5: detected capacity change from 0 to 764 [ 239.498666][ T6853] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 239.840875][ T6856] loop6: detected capacity change from 0 to 2048 [ 239.864946][ T6856] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 239.864989][ T6856] NILFS (loop6): mounting unchecked fs [ 240.106722][ T5611] udevd[5611]: incorrect nilfs2 checksum on /dev/loop6 [ 240.137460][ T6856] NILFS (loop6): recovery complete [ 240.148746][ T6861] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.476286][ T6863] input: syz0 as /devices/virtual/input/input49 [ 241.497998][ T6865] loop1: detected capacity change from 0 to 512 [ 241.802348][ T6865] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 241.823339][ T6865] EXT4-fs (loop1): 1 truncate cleaned up [ 241.826013][ T6865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.176258][ T6871] input: syz0 as /devices/virtual/input/input50 [ 243.289578][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.797767][ T6879] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 244.648310][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 245.475413][ T6887] input: syz0 as /devices/virtual/input/input51 [ 246.797586][ T6890] loop6: detected capacity change from 0 to 1024 [ 246.814064][ T6891] loop0: detected capacity change from 0 to 512 [ 246.866247][ T6891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 246.866392][ T6891] System zones: 1-12 [ 246.898959][ T6891] EXT4-fs error (device loop0): ext4_xattr_inode_iget:470: comm syz.0.217: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 246.899011][ T6891] loop0: lost filesystem error report for type 5 error -117 [ 246.899582][ T6891] EXT4-fs (loop0): 1 orphan inode deleted [ 246.950217][ T6891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.097756][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.989763][ T6912] loop4: detected capacity change from 0 to 512 [ 249.252419][ T6913] input: syz0 as /devices/virtual/input/input52 [ 250.508672][ T6912] EXT4-fs: Ignoring removed bh option [ 250.516476][ T6911] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 250.542238][ T6912] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz.4.223: corrupted in-inode xattr: e_value size too large [ 250.542288][ T6912] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.544118][ T6912] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.223: couldn't read orphan inode 15 (err -117) [ 250.544166][ T6912] loop4: lost filesystem error report for type 5 error -117 [ 250.620763][ T6912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.213085][ T6923] input: syz0 as /devices/virtual/input/input53 [ 252.622024][ T1397] nvmet: Created nvm controller 16 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 252.657970][ T6911] nvme nvme15: creating 2 I/O queues. [ 252.677520][ T6911] nvme nvme15: new ctrl: "testsubsys" [ 252.804818][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.065358][ T6930] warning: `syz.5.228' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.117524][ T6932] loop6: detected capacity change from 0 to 2048 [ 253.195951][ T6935] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.285545][ T6936] loop1: detected capacity change from 0 to 2048 [ 253.361817][ T6936] Alternate GPT is invalid, using primary GPT. [ 253.361924][ T6936] loop1: p1 p2 p3 [ 253.361952][ T6936] loop1: partition table partially beyond EOD, truncated [ 253.392303][ T6933] loop4: detected capacity change from 0 to 4096 [ 253.507474][ T6937] overlayfs: upper fs does not support tmpfile. [ 253.508436][ T6937] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 253.508461][ T6937] overlayfs: failed to set xattr on upper [ 253.508474][ T6937] overlayfs: ...falling back to redirect_dir=nofollow. [ 253.508487][ T6937] overlayfs: ...falling back to index=off. [ 253.508500][ T6937] overlayfs: ...falling back to uuid=null. [ 253.827338][ T6933] ntfs3(loop4): failed to convert "0000" to cp949 [ 253.842041][ T6933] ntfs3(loop4): failed to convert name for inode 1e. [ 253.856663][ T6933] ntfs3(loop4): ino=1f, mi_enum_attr [ 253.856718][ T6933] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 254.465409][ T6935] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 254.465454][ T6935] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 254.553170][ T6935] Remounting filesystem read-only [ 254.630779][ T6407] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 254.663713][ T6407] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 256.743359][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.743455][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.155340][ T6949] input: syz0 as /devices/virtual/input/input55 [ 258.600413][ T6407] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 258.839926][ T6955] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 259.018471][ T1397] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.061818][ T6960] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 259.246658][ T1397] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.253964][ T1416] nvmet: Created nvm controller 17 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 259.279080][ T6955] nvme nvme16: creating 2 I/O queues. [ 259.290221][ T6955] nvme nvme16: new ctrl: "testsubsys" [ 259.708828][ T6968] input: syz0 as /devices/virtual/input/input56 [ 261.191345][ T1397] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.416612][ T50] nvmet: Created nvm controller 18 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 261.431550][ T6960] nvme nvme17: creating 2 I/O queues. [ 261.468183][ T6960] nvme nvme17: new ctrl: "testsubsys" [ 261.696443][ T1397] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.133325][ T6976] loop3: detected capacity change from 0 to 512 [ 262.349043][ T6976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 262.519344][ T6976] EXT4-fs error (device loop3): ext4_validate_block_bitmap:444: comm syz.3.241: bg 0: block 393: padding at end of block bitmap is not set [ 262.519399][ T6976] loop3: lost filesystem error report for type 5 error -117 [ 262.523326][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 262.523356][ C0] EXT4-fs (loop3): initial error at time 1791170817: ext4_validate_block_bitmap:444 [ 262.523398][ C0] EXT4-fs (loop3): last error at time 1791170817: ext4_validate_block_bitmap:444 [ 262.581633][ T1397] bridge_slave_1: left allmulticast mode [ 262.581661][ T1397] bridge_slave_1: left promiscuous mode [ 262.581852][ T1397] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.606971][ T6976] EXT4-fs (loop3): Remounting filesystem read-only [ 262.622020][ T6976] EXT4-fs (loop3): 2 truncates cleaned up [ 262.635973][ T1397] bridge_slave_0: left allmulticast mode [ 262.636000][ T1397] bridge_slave_0: left promiscuous mode [ 262.636202][ T1397] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.781861][ T6978] input: syz0 as /devices/virtual/input/input57 [ 263.171138][ T6976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.486753][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.487772][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.515104][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.518696][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.521510][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.522343][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.154106][ T6989] input: syz0 as /devices/virtual/input/input58 [ 265.573713][ T6992] loop3: detected capacity change from 0 to 1764 [ 265.632346][ T5619] Bluetooth: hci3: command tx timeout [ 267.610799][ T1397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.647628][ T1397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.676950][ T1397] bond0 (unregistering): Released all slaves [ 267.713365][ T5619] Bluetooth: hci3: command tx timeout [ 268.004620][ T7012] loop3: detected capacity change from 0 to 512 [ 268.038164][ T7012] EXT4-fs: test_dummy_encryption requires encrypt feature [ 268.100226][ T7012] devpts: Unknown parameter './file0' [ 268.992776][ T7025] loop3: detected capacity change from 0 to 256 [ 269.357550][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.249'. [ 269.440506][ T7034] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 269.528799][ T101] nvmet: Created nvm controller 19 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 269.530442][ T7034] nvme nvme18: creating 2 I/O queues. [ 269.575776][ T7034] nvme nvme18: new ctrl: "testsubsys" [ 269.577544][ T1397] hsr_slave_0: left promiscuous mode [ 269.612268][ T1397] hsr_slave_1: left promiscuous mode [ 269.620347][ T1397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.620379][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.639345][ T1397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.639381][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.768452][ T1397] veth1_macvtap: left promiscuous mode [ 269.768492][ T1397] veth0_macvtap: left promiscuous mode [ 269.768660][ T1397] veth1_vlan: left promiscuous mode [ 269.768731][ T1397] veth0_vlan: left promiscuous mode [ 269.792449][ T5641] Bluetooth: hci3: command tx timeout [ 270.336607][ T7048] input: syz0 as /devices/virtual/input/input59 [ 271.874698][ T5619] Bluetooth: hci3: command tx timeout [ 271.874693][ T5747] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 271.911207][ T7052] loop4: detected capacity change from 0 to 1024 [ 271.992043][ T7052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.036020][ T5747] usb 2-1: Using ep0 maxpacket: 32 [ 272.048057][ T5747] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 272.048641][ T7052] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 272.099902][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.099946][ T5747] usb 2-1: Product: syz [ 272.099972][ T5747] usb 2-1: Manufacturer: syz [ 272.099998][ T5747] usb 2-1: SerialNumber: syz [ 272.132259][ T5747] usb 2-1: config 0 descriptor?? [ 272.159480][ T5747] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 272.159835][ T5747] dvb-usb: bulk message failed: -22 (4/0) [ 272.159861][ T5747] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 272.159996][ T5747] dvb-usb: bulk message failed: -22 (5/0) [ 272.160017][ T5747] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 272.223143][ T5747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.224134][ T5747] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 272.224194][ T5747] usb 2-1: media controller created [ 272.269242][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.316508][ T5747] usb 2-1: selecting invalid altsetting 3 [ 272.316540][ T5747] ttusb2: set interface to alts=3 failed [ 272.349499][ T7045] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 272.351449][ T7045] dvb-usb: bulk message failed: -22 (7/0) [ 272.351473][ T7045] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 272.351539][ T7045] ttusb2: i2c transfer failed. [ 272.428557][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.132538][ T5747] DVB: Unable to find symbol tda10086_attach() [ 273.132559][ T5747] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 273.134685][ T5747] dvb-usb: bulk message failed: -22 (4/0) [ 273.134712][ T5747] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 273.134840][ T5747] dvb-usb: bulk message failed: -22 (5/0) [ 273.134860][ T5747] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 273.134934][ T5747] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 273.210093][ T5747] usb 2-1: USB disconnect, device number 4 [ 273.449495][ T7067] loop4: detected capacity change from 0 to 2048 [ 273.526607][ T7067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.595667][ T5747] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 273.660644][ T7067] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 275.058620][ T1397] team0 (unregistering): Port device team_slave_1 removed [ 275.108968][ T1397] team0 (unregistering): Port device team_slave_0 removed [ 275.158151][ T7078] loop1: detected capacity change from 0 to 164 [ 275.227609][ T7078] Symlink component flag not implemented [ 275.227701][ T7078] Symlink component flag not implemented (7) [ 275.239722][ T7078] Symlink component flag not implemented (7) [ 276.673107][ T7080] input: syz0 as /devices/virtual/input/input60 [ 277.002668][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 277.790023][ T7093] loop5: detected capacity change from 0 to 1024 [ 278.369116][ T7096] hfsplus: xattr search failed [ 278.488410][ T7096] hfsplus: can't free extent: start 2889, count 1 [ 278.763980][ T7101] input: syz0 as /devices/virtual/input/input61 [ 280.143536][ T7104] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 280.296812][ T7114] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 280.578413][ T6817] nvmet: Created nvm controller 20 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 280.624391][ T7104] nvme nvme19: creating 2 I/O queues. [ 280.642801][ T7104] nvme nvme19: new ctrl: "testsubsys" [ 280.779946][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.780054][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.780200][ T6984] bridge_slave_0: entered allmulticast mode [ 280.816290][ T6984] bridge_slave_0: entered promiscuous mode [ 280.819418][ T146] nvmet: Created nvm controller 21 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 280.825272][ T7122] loop5: detected capacity change from 0 to 1024 [ 280.851798][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.851919][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.852853][ T6984] bridge_slave_1: entered allmulticast mode [ 280.861673][ T7122] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 280.886910][ T6984] bridge_slave_1: entered promiscuous mode [ 280.900886][ T7114] nvme nvme20: creating 2 I/O queues. [ 281.094511][ T7114] nvme nvme20: new ctrl: "testsubsys" [ 281.335664][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.363123][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.593117][ T6984] team0: Port device team_slave_0 added [ 281.620417][ T6984] team0: Port device team_slave_1 added [ 281.678645][ T7138] loop0: detected capacity change from 0 to 256 [ 281.693570][ T7138] exfat: Deprecated parameter 'utf8' [ 281.698621][ T7138] exfat: Deprecated parameter 'namecase' [ 281.785501][ T7138] exFAT-fs (loop0): error, bad upcase table size (0 bytes). Please run fsck [ 282.553273][ T7145] input: syz0 as /devices/virtual/input/input62 [ 283.662329][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.662355][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.662399][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.420845][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.420870][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.420905][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.577095][ T6984] hsr_slave_0: entered promiscuous mode [ 284.578234][ T6984] hsr_slave_1: entered promiscuous mode [ 284.579036][ T6984] debugfs: 'hsr0' already exists in 'hsr' [ 284.579064][ T6984] Cannot create hsr debugfs directory [ 288.465431][ T7166] input: syz0 as /devices/virtual/input/input63 [ 288.894397][ T7172] input: syz0 as /devices/virtual/input/input64 [ 290.262697][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 291.474242][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.265'. [ 291.537698][ T6984] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 291.599799][ T6984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.604387][ T6984] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 291.670720][ T6984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.695719][ T6984] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 291.735201][ T6984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.744086][ T6984] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 291.778890][ T6984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.220823][ T7203] loop5: detected capacity change from 0 to 164 [ 292.710185][ T6984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.783053][ T6984] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.052129][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.052252][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.444534][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.444660][ T6817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.850022][ T7233] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 297.999586][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 299.381084][ T7264] loop3: detected capacity change from 0 to 256 [ 299.383954][ T7264] exfat: Deprecated parameter 'namecase' [ 299.384031][ T7264] exfat: Deprecated parameter 'namecase' [ 299.393442][ T7264] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 299.670909][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.293'. [ 299.671662][ T7269] netlink: 'syz.5.293': attribute type 1 has an invalid length. [ 299.726262][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.280'. [ 299.813511][ T7276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 299.846902][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'. [ 301.741715][ T7309] loop3: detected capacity change from 0 to 512 [ 301.789340][ T6984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.791999][ T7309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.873112][ T6039] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 301.940306][ T7309] fs-verity (loop3, inode 15): Unknown hash algorithm number: 3 [ 302.022923][ T6039] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 302.030815][ T6039] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.030858][ T6039] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.065724][ T6039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.065766][ T6039] usb 1-1: SerialNumber: syz [ 302.135483][ T6039] usb 1-1: 0:2 : does not exist [ 302.194519][ T7320] loop4: detected capacity change from 0 to 256 [ 302.214857][ T7320] exfat: Deprecated parameter 'utf8' [ 302.214929][ T7320] exfat: Deprecated parameter 'namecase' [ 302.215058][ T7320] exfat: Deprecated parameter 'namecase' [ 302.215097][ T7320] exfat: Deprecated parameter 'utf8' [ 302.268772][ T7317] loop1: detected capacity change from 0 to 4096 [ 302.346098][ T7320] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 302.346641][ T7320] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 302.435050][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 302.455026][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.581260][ T7324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.771374][ T6039] usb 1-1: USB disconnect, device number 4 [ 302.908723][ T7317] NILFS (loop1): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 302.908794][ T7317] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 302.946119][ T7317] Remounting filesystem read-only [ 305.168524][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 305.178320][ T7349] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 306.565844][ T7363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 306.598380][ T6984] veth0_vlan: entered promiscuous mode [ 306.631512][ T6984] veth1_vlan: entered promiscuous mode [ 306.918478][ T6984] veth0_macvtap: entered promiscuous mode [ 306.927153][ T6984] veth1_macvtap: entered promiscuous mode [ 307.698673][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.762211][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'. [ 307.785875][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.848206][ T1460] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.848276][ T1460] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.848334][ T1460] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.848392][ T1460] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.691771][ T7379] input: syz0 as /devices/virtual/input/input65 [ 310.069011][ T7388] loop3: detected capacity change from 0 to 2048 [ 310.110287][ T7388] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18881, location=18881 [ 310.172811][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.172843][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.179404][ T7388] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.304182][ T7393] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 310.379037][ T1460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.379072][ T1460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.648188][ T1387] nvmet: Created nvm controller 22 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 310.661883][ T7393] nvme nvme21: creating 2 I/O queues. [ 310.933904][ T7386] comedi comedi1: reset error (fatal) [ 312.449128][ T7412] input: syz0 as /devices/virtual/input/input66 [ 313.951949][ T7408] loop3: detected capacity change from 0 to 4096 [ 313.971888][ T7408] ntfs3(loop3): ino=3, mi_enum_attr [ 314.515244][ T7408] ntfs3(loop3): ino=9, attr_set_size_ex [ 315.310315][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.327'. [ 316.084076][ T7435] loop4: detected capacity change from 0 to 512 [ 316.741149][ T7440] input: syz0 as /devices/virtual/input/input67 [ 317.555020][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.555101][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.789681][ T7435] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 317.951956][ T7435] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.317: invalid indirect mapped block 2683928664 (level 1) [ 317.952020][ T7435] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 317.963922][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 317.963960][ C0] EXT4-fs (loop4): initial error at time 1791170872: ext4_free_branches:1020: inode 13 [ 317.964009][ C0] EXT4-fs (loop4): last error at time 1791170872: ext4_free_branches:1020: inode 13 [ 318.135739][ T7435] EXT4-fs (loop4): 1 truncate cleaned up [ 318.146730][ T7435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.193790][ T30] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 319.300582][ T7435] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 319.344453][ T30] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 319.356244][ T30] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 319.356303][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 319.356352][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.435658][ T7435] EXT4-fs (loop4): can't enable nombcache during remount [ 319.461227][ T30] usb 6-1: config 0 descriptor?? [ 319.486177][ T7459] loop0: detected capacity change from 0 to 512 [ 319.506053][ T7459] EXT4-fs: Ignoring removed oldalloc option [ 319.539975][ T7459] EXT4-fs (loop0): Test dummy encryption mode enabled [ 319.567596][ T7461] loop3: detected capacity change from 0 to 512 [ 319.607051][ T7459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.609522][ T7461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 319.609696][ T7461] System zones: 1-12 [ 319.645185][ T7461] EXT4-fs error (device loop3): ext4_xattr_inode_iget:470: comm syz.3.332: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 319.645235][ T7461] loop3: lost filesystem error report for type 5 error -117 [ 319.648166][ T7461] EXT4-fs (loop3): 1 orphan inode deleted [ 319.684539][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.691901][ T7461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.732586][ T7466] loop7: detected capacity change from 0 to 2048 [ 319.748740][ T7466] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=18881, location=18881 [ 319.894064][ T7466] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.955950][ T30] waltop 0003:172F:0501.0003: item fetching failed at offset 5/6 [ 319.956769][ T30] waltop 0003:172F:0501.0003: probe with driver waltop failed with error -22 [ 320.101932][ T7459] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 320.177812][ T30] usb 6-1: USB disconnect, device number 4 [ 320.196474][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.652256][ T7488] loop1: detected capacity change from 0 to 512 [ 321.655149][ T7488] EXT4-fs: Ignoring removed bh option [ 321.661413][ T7488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 321.685121][ T7490] loop4: detected capacity change from 0 to 512 [ 321.696615][ T7490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 321.696835][ T7488] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.331: bad orphan inode 131083 [ 321.696875][ T7488] loop1: lost filesystem error report for type 5 error -117 [ 321.713911][ T7488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.879362][ T7490] EXT4-fs error (device loop4): ext4_validate_block_bitmap:444: comm syz.4.337: bg 0: block 393: padding at end of block bitmap is not set [ 321.879417][ T7490] loop4: lost filesystem error report for type 5 error -117 [ 321.882109][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 321.882139][ C0] EXT4-fs (loop4): initial error at time 1791170876: ext4_validate_block_bitmap:444 [ 321.882176][ C0] EXT4-fs (loop4): last error at time 1791170876: ext4_validate_block_bitmap:444 [ 321.933071][ T7490] EXT4-fs (loop4): Remounting filesystem read-only [ 321.933459][ T7490] EXT4-fs (loop4): 2 truncates cleaned up [ 322.053360][ T7490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.470551][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.477065][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.780572][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.782645][ T7503] loop7: detected capacity change from 0 to 512 [ 322.794046][ T7503] EXT4-fs: Ignoring removed oldalloc option [ 322.794092][ T7503] EXT4-fs: Ignoring removed oldalloc option [ 322.927328][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.342'. [ 322.954276][ T7503] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 322.995811][ T7502] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 323.053141][ T7503] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #16: comm syz.7.341: invalid indirect mapped block 83886080 (level 1) [ 323.053204][ T7503] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.053841][ T7503] EXT4-fs (loop7): Remounting filesystem read-only [ 323.054301][ T7503] EXT4-fs (loop7): 1 orphan inode deleted [ 323.054330][ T7503] EXT4-fs (loop7): 1 truncate cleaned up [ 323.080601][ T7503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.423175][ T7517] input: syz0 as /devices/virtual/input/input68 [ 323.790707][ T6984] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.802955][ T1460] nvmet: Created nvm controller 22 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 323.830181][ T7502] nvme nvme21: creating 2 I/O queues. [ 323.928821][ T7525] loop7: detected capacity change from 0 to 1024 [ 323.939443][ T7502] nvme nvme21: new ctrl: "testsubsys" [ 324.421642][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 324.432703][ T7533] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 324.744637][ T90] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 324.913420][ T90] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.915016][ T90] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 324.915058][ T90] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 324.915092][ T90] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 324.915155][ T90] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 324.915233][ T90] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 325.001554][ T90] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.001600][ T90] usb 2-1: Product: syz [ 325.001626][ T90] usb 2-1: Manufacturer: syz [ 325.130449][ T90] cdc_wdm 2-1:1.0: skipping garbage [ 325.130499][ T90] cdc_wdm 2-1:1.0: skipping garbage [ 325.301324][ T90] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 325.301357][ T90] cdc_wdm 2-1:1.0: Unknown control protocol [ 325.417808][ T9] usb 2-1: USB disconnect, device number 5 [ 325.962500][ T7530] loop3: detected capacity change from 0 to 32768 [ 326.809564][ T7536] loop5: detected capacity change from 0 to 32768 [ 326.825434][ T7530] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 326.825434][ T7530] [ 326.849884][ T7530] ERROR: (device loop3): remounting filesystem as read-only [ 327.539695][ T7574] input: syz0 as /devices/virtual/input/input69 [ 329.186235][ T7582] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 329.854696][ T7594] input: syz0 as /devices/virtual/input/input70 [ 330.041386][ T7596] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 330.281470][ T59] nvmet: Created nvm controller 23 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 330.304254][ T7582] nvme nvme22: creating 2 I/O queues. [ 330.483418][ T7582] nvme nvme22: new ctrl: "testsubsys" [ 330.552675][ T59] nvmet: Created nvm controller 24 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 330.649746][ T7596] nvme nvme23: creating 2 I/O queues. [ 330.774971][ T7596] nvme nvme23: new ctrl: "testsubsys" [ 330.915601][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.375'. [ 331.235586][ T7611] loop7: detected capacity change from 0 to 512 [ 331.254156][ T7611] EXT4-fs: Ignoring removed oldalloc option [ 331.260491][ T7611] EXT4-fs (loop7): Test dummy encryption mode enabled [ 331.346655][ T7611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.666898][ T6984] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.968018][ T7625] loop7: detected capacity change from 0 to 512 [ 332.972837][ T7625] EXT4-fs: Ignoring removed bh option [ 333.495966][ T7625] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 333.533495][ T7625] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.368: bad orphan inode 131083 [ 333.533545][ T7625] loop7: lost filesystem error report for type 5 error -117 [ 333.545072][ T7625] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.578626][ T7617] loop3: detected capacity change from 0 to 32768 [ 333.710838][ T7617] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 335.059114][ T7642] jffs2: notice: (7642) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 335.134170][ T5633] ocfs2: Unmounting device (7,3) on (node local) [ 335.172449][ T6984] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.285444][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 335.320463][ T7649] loop0: detected capacity change from 0 to 4096 [ 335.611912][ T7649] ntfs3(loop0): failed to convert "0000" to cp949 [ 335.625196][ T7649] ntfs3(loop0): failed to convert name for inode 1e. [ 335.627988][ T7649] ntfs3(loop0): ino=1f, mi_enum_attr [ 335.628027][ T7649] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 335.700047][ T7661] netlink: 76 bytes leftover after parsing attributes in process `syz.4.377'. [ 335.700165][ T7661] netlink: 76 bytes leftover after parsing attributes in process `syz.4.377'. [ 337.159446][ T7655] loop3: detected capacity change from 0 to 32768 [ 337.211768][ T7655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.372 (7655) [ 337.379986][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 338.036073][ T7655] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.036130][ T7655] BTRFS info (device loop3): using crc32c checksum algorithm [ 338.920661][ T7655] BTRFS error (device loop3): open_ctree failed: -EINTR [ 340.313583][ T7722] netlink: 20 bytes leftover after parsing attributes in process `syz.5.389'. [ 340.556803][ T7728] overlayfs: failed to resolve './bus': -2 [ 341.142463][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'. [ 342.312511][ T7727] input: syz0 as /devices/virtual/input/input71 [ 342.813242][ T7746] input: syz0 as /devices/virtual/input/input72 [ 345.071627][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.400'. [ 345.859600][ T7767] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 346.988250][ T1110] nvmet: Created nvm controller 25 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 346.989920][ T7767] nvme nvme24: creating 2 I/O queues. [ 347.079253][ T7767] nvme nvme24: new ctrl: "testsubsys" [ 347.688952][ T7769] input: syz0 as /devices/virtual/input/input73 [ 347.758006][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.406'. [ 348.632761][ T90] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 349.671917][ T7799] input: syz0 as /devices/virtual/input/input74 [ 350.385449][ T90] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 350.406684][ T90] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.406753][ T90] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.409620][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.409660][ T90] usb 4-1: SerialNumber: syz [ 350.546305][ T90] usb 4-1: 0:2 : does not exist [ 350.575632][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.5.411'. [ 351.175019][ T90] usb 4-1: USB disconnect, device number 3 [ 354.075531][ T7830] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 354.319704][ T6147] nvmet: Created nvm controller 26 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 354.352928][ T7830] nvme nvme25: creating 2 I/O queues. [ 354.379981][ T7830] nvme nvme25: new ctrl: "testsubsys" [ 355.493753][ T7838] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 355.618533][ T7842] input: syz0 as /devices/virtual/input/input75 [ 355.808512][ T13] nvmet: Created nvm controller 27 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 355.810499][ T7838] nvme nvme26: creating 2 I/O queues. [ 355.875488][ T7838] nvme nvme26: new ctrl: "testsubsys" [ 356.338422][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.7.423'. [ 357.875031][ T7863] input: syz0 as /devices/virtual/input/input76 [ 358.161448][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.5.427'. [ 358.247564][ T7869] loop7: detected capacity change from 0 to 512 [ 358.343062][ T7869] EXT4-fs (loop7): 1 truncate cleaned up [ 358.350785][ T7869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.406463][ T7869] EXT4-fs error (device loop7): ext4_find_dest_de:2051: inode #2: block 13: comm syz.7.429: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 358.445659][ T7869] EXT4-fs (loop7): Remounting filesystem read-only [ 358.652821][ T6984] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.917740][ T7876] input: syz0 as /devices/virtual/input/input77 [ 362.465498][ T7894] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 362.625535][ T7897] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 362.812903][ T7400] nvmet: Created nvm controller 28 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 362.830084][ T7894] nvme nvme27: creating 2 I/O queues. [ 362.848673][ T7894] nvme nvme27: new ctrl: "testsubsys" [ 363.285592][ T7400] nvmet: Created nvm controller 29 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:95350193-5635-4a30-92f8-384325ce2659. [ 363.310460][ T7897] nvme nvme28: creating 2 I/O queues. [ 363.331832][ T7897] blk-mq: failed to allocate request map [ 363.345740][ T7897] ------------[ cut here ]------------ [ 363.345760][ T7897] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 363.345781][ T7897] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30, CPU#0: syz.5.435/7897 [ 363.372233][ T7897] Modules linked in: [ 363.378042][ T7897] CPU: 0 UID: 0 PID: 7897 Comm: syz.5.435 Not tainted syzkaller #0 PREEMPT(full) [ 363.387441][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 363.397716][ T7897] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 363.404690][ T7897] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 363.424595][ T7897] RSP: 0018:ffffc9000628f9c8 EFLAGS: 00010202 [ 363.430707][ T7897] RAX: 0000000000000001 RBX: ffffe8ffffccbbc0 RCX: ffffc9000e801000 [ 363.438855][ T7897] RDX: ffffe8ffffccbd40 RSI: ffffffff81f6e43f RDI: ffff88802f041f40 [ 363.447409][ T7897] RBP: ffff888050f9b800 R08: 0000000000000005 R09: 00000000ffffffff [ 363.456037][ T7897] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804966c310 [ 363.464228][ T7897] R13: 0000000000000000 R14: ffffffff8e6600b0 R15: ffff88804966c350 [ 363.472328][ T7897] FS: 00007efc2b71c6c0(0000) GS:ffff888123b4b000(0000) knlGS:0000000000000000 [ 363.481320][ T7897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.488077][ T7897] CR2: 00002000003ef000 CR3: 000000007c8ae000 CR4: 0000000000350ef0 [ 363.496158][ T7897] Call Trace: [ 363.499463][ T7897] [ 363.502463][ T7897] blk_mq_alloc_tag_set+0xdd8/0x1330 [ 363.507812][ T7897] nvme_alloc_io_tag_set+0x3bc/0x750 [ 363.513248][ T7897] ? __pfx_nvme_alloc_io_tag_set+0x10/0x10 [ 363.519112][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.524844][ T7897] ? nvmet_sq_init+0x250/0x320 [ 363.529729][ T7897] ? __pfx_nvmet_sq_init+0x10/0x10 [ 363.534992][ T7897] ? __pfx_nvmf_connect_admin_queue+0x10/0x10 [ 363.541113][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.547254][ T7897] ? nvme_loop_init_io_queues+0x12a/0x190 [ 363.553641][ T7897] ? __pfx_nvme_loop_init_io_queues+0x10/0x10 [ 363.559780][ T7897] nvme_loop_create_ctrl+0x6bc/0xee0 [ 363.565370][ T7897] nvmf_dev_write+0x4ee/0xb60 [ 363.570095][ T7897] vfs_write+0x2aa/0x1050 [ 363.574552][ T7897] ? __pfx_nvmf_dev_write+0x10/0x10 [ 363.579786][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.585558][ T7897] ? lock_acquire+0x1d1/0x380 [ 363.590315][ T7897] ? __fget_files+0x34/0x3d0 [ 363.595026][ T7897] ? __pfx_vfs_write+0x10/0x10 [ 363.599840][ T7897] ? find_held_lock+0x2b/0x80 [ 363.604668][ T7897] ? __fget_files+0x215/0x3d0 [ 363.609386][ T7897] ? __fget_files+0x215/0x3d0 [ 363.614310][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.619997][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.625772][ T7897] ? __fget_files+0x21f/0x3d0 [ 363.630522][ T7897] ksys_write+0x12a/0x250 [ 363.635013][ T7897] ? __pfx_ksys_write+0x10/0x10 [ 363.639945][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.646143][ T7897] do_syscall_64+0x123/0x790 [ 363.650797][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.657124][ T7897] RIP: 0033:0x7efc2a79e159 [ 363.661577][ T7897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.681338][ T7897] RSP: 002b:00007efc2b71c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.689911][ T7897] RAX: ffffffffffffffda RBX: 00007efc2aa25fa0 RCX: 00007efc2a79e159 [ 363.697982][ T7897] RDX: 000000000000001e RSI: 0000200000000900 RDI: 0000000000000004 [ 363.706040][ T7897] RBP: 00007efc2a83506b R08: 0000000000000000 R09: 0000000000000000 [ 363.714209][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.722285][ T7897] R13: 00007efc2aa26038 R14: 00007efc2aa25fa0 R15: 00007ffda72ef7d8 [ 363.730314][ T7897] [ 363.733482][ T7897] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 363.740785][ T7897] CPU: 0 UID: 0 PID: 7897 Comm: syz.5.435 Not tainted syzkaller #0 PREEMPT(full) [ 363.750021][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 363.760192][ T7897] Call Trace: [ 363.763498][ T7897] [ 363.766446][ T7897] dump_stack_lvl+0x100/0x190 [ 363.771177][ T7897] vpanic+0x553/0x970 [ 363.775199][ T7897] ? __pfx_vpanic+0x10/0x10 [ 363.779761][ T7897] panic+0xd1/0xe0 [ 363.783521][ T7897] ? __pfx_panic+0x10/0x10 [ 363.788001][ T7897] check_panic_on_warn.cold+0x19/0x34 [ 363.793417][ T7897] ? cleanup_srcu_struct+0x6e4/0xb30 [ 363.798745][ T7897] __warn.cold+0x191/0x318 [ 363.803188][ T7897] __report_bug+0x30f/0x440 [ 363.807704][ T7897] ? cleanup_srcu_struct+0x6e4/0xb30 [ 363.813005][ T7897] ? __pfx___report_bug+0x10/0x10 [ 363.818048][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.823702][ T7897] ? debug_object_deactivate+0x2e4/0x3b0 [ 363.829375][ T7897] ? __pfx_debug_object_deactivate+0x10/0x10 [ 363.835386][ T7897] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 363.840818][ T7897] ? _raw_spin_lock_irqsave+0x52/0x60 [ 363.846234][ T7897] ? cleanup_srcu_struct+0x6e4/0xb30 [ 363.851577][ T7897] report_bug+0xb3/0x220 [ 363.855866][ T7897] ? cleanup_srcu_struct+0x6e4/0xb30 [ 363.861168][ T7897] handle_bug+0x16a/0x2a0 [ 363.865524][ T7897] exc_invalid_op+0x17/0x50 [ 363.870072][ T7897] asm_exc_invalid_op+0x1a/0x20 [ 363.874953][ T7897] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 363.880865][ T7897] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 363.900485][ T7897] RSP: 0018:ffffc9000628f9c8 EFLAGS: 00010202 [ 363.906561][ T7897] RAX: 0000000000000001 RBX: ffffe8ffffccbbc0 RCX: ffffc9000e801000 [ 363.914539][ T7897] RDX: ffffe8ffffccbd40 RSI: ffffffff81f6e43f RDI: ffff88802f041f40 [ 363.922513][ T7897] RBP: ffff888050f9b800 R08: 0000000000000005 R09: 00000000ffffffff [ 363.930486][ T7897] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804966c310 [ 363.938462][ T7897] R13: 0000000000000000 R14: ffffffff8e6600b0 R15: ffff88804966c350 [ 363.946486][ T7897] ? __timer_delete_sync+0x10f/0x1c0 [ 363.951795][ T7897] ? cleanup_srcu_struct+0x36f/0xb30 [ 363.957138][ T7897] blk_mq_alloc_tag_set+0xdd8/0x1330 [ 363.962448][ T7897] nvme_alloc_io_tag_set+0x3bc/0x750 [ 363.967753][ T7897] ? __pfx_nvme_alloc_io_tag_set+0x10/0x10 [ 363.973569][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.979233][ T7897] ? nvmet_sq_init+0x250/0x320 [ 363.984026][ T7897] ? __pfx_nvmet_sq_init+0x10/0x10 [ 363.989157][ T7897] ? __pfx_nvmf_connect_admin_queue+0x10/0x10 [ 363.995236][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.000885][ T7897] ? nvme_loop_init_io_queues+0x12a/0x190 [ 364.006631][ T7897] ? __pfx_nvme_loop_init_io_queues+0x10/0x10 [ 364.012728][ T7897] nvme_loop_create_ctrl+0x6bc/0xee0 [ 364.018053][ T7897] nvmf_dev_write+0x4ee/0xb60 [ 364.022745][ T7897] vfs_write+0x2aa/0x1050 [ 364.027098][ T7897] ? __pfx_nvmf_dev_write+0x10/0x10 [ 364.032298][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.037943][ T7897] ? lock_acquire+0x1d1/0x380 [ 364.042628][ T7897] ? __fget_files+0x34/0x3d0 [ 364.047230][ T7897] ? __pfx_vfs_write+0x10/0x10 [ 364.052016][ T7897] ? find_held_lock+0x2b/0x80 [ 364.056750][ T7897] ? __fget_files+0x215/0x3d0 [ 364.061440][ T7897] ? __fget_files+0x215/0x3d0 [ 364.066145][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.071818][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.077460][ T7897] ? __fget_files+0x21f/0x3d0 [ 364.082155][ T7897] ksys_write+0x12a/0x250 [ 364.086509][ T7897] ? __pfx_ksys_write+0x10/0x10 [ 364.091392][ T7897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.097056][ T7897] do_syscall_64+0x123/0x790 [ 364.101674][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.107620][ T7897] RIP: 0033:0x7efc2a79e159 [ 364.112047][ T7897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.131677][ T7897] RSP: 002b:00007efc2b71c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.140101][ T7897] RAX: ffffffffffffffda RBX: 00007efc2aa25fa0 RCX: 00007efc2a79e159 [ 364.148077][ T7897] RDX: 000000000000001e RSI: 0000200000000900 RDI: 0000000000000004 [ 364.156088][ T7897] RBP: 00007efc2a83506b R08: 0000000000000000 R09: 0000000000000000 [ 364.164066][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.172045][ T7897] R13: 00007efc2aa26038 R14: 00007efc2aa25fa0 R15: 00007ffda72ef7d8 [ 364.180071][ T7897] [ 364.183342][ T7897] Kernel Offset: disabled [ 364.187686][ T7897] Rebooting in 86400 seconds..