last executing test programs: 2m24.474444282s ago: executing program 3 (id=13): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 2m23.549114106s ago: executing program 3 (id=16): r0 = socket(0x1, 0x5, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80002017}) 2m23.23325613s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000200)='./file0/file0/../file0\x00', 0x0) 2m23.02609098s ago: executing program 3 (id=20): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x76800) fsync(r0) 2m22.426948429s ago: executing program 3 (id=28): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeea, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x41, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) 2m21.213295516s ago: executing program 3 (id=36): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800) 2m21.13511102s ago: executing program 32 (id=36): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800) 2m9.829641544s ago: executing program 0 (id=90): r0 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2m9.581727465s ago: executing program 0 (id=92): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x4042832, 0xffffffffffffffff, 0x180000000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') syz_usb_connect(0x0, 0x50, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000ec667d40dd0432900bfd000000010902"], 0x0) syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xd, "aa"}], 0x30}, 0x0) 2m7.464146996s ago: executing program 0 (id=108): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x441, 0x40000030, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xd) fcntl$notify(r2, 0x402, 0x1a) renameat2(r2, &(0x7f0000000480)='./file1\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x1) 2m7.288260434s ago: executing program 0 (id=109): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x12140c5, &(0x7f0000000100)={[{@fat=@quiet}, {@shortname_mixed}, {@fat=@nfs}, {@utf8no}, {@fat=@nfs}, {@utf8}, {@shortname_win95}, {@utf8}, {}, {@utf8}, {@numtail}, {@numtail}, {@numtail}]}, 0x0, 0x2c4, &(0x7f0000002880)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 2m6.862854634s ago: executing program 0 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x4, 0x0, 0x0, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xfb, 0x6, 0x9e, 0x8, 0x3}, 0x0, 0x0}) syz_usb_ep_write(r3, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") 2m6.284664871s ago: executing program 0 (id=115): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000240)={{}, "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"}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x8, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc0df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e8cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m5.970409376s ago: executing program 33 (id=115): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000240)={{}, "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"}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x8, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m55.534785249s ago: executing program 4 (id=182): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 1m54.289209528s ago: executing program 4 (id=188): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000007a40)=ANY=[@ANYBLOB="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"], 0xfd, 0x5528, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x65) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x184a4fc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m51.180865515s ago: executing program 4 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000800450000280000400040113cc37f0000017f00000112344e200014"], 0x36) 1m49.404205899s ago: executing program 4 (id=210): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$eJzs3T9sFNkdAOA3YyfYBIhNKIgUKSsFJVESWTYViZFijMHY4BCRQJFmWdsLOFl7kb2OUlA4SoOUKlKKKAW6k65zhdxdxTUnXXnNlVyNdFdcc9JJiD3t7qy9M+vFe9wuPtD3SXh23n/8m3n7phi/OFG5t7KRW9nIFdZy5aU7G2dzfy+XNleLIc76sC2lJ7run0PVjziJ/eG5fvHyn26dDeGD5U+eVavVaqgZDPuaaPn85RcPllqPTXHryb8a7e7fWq/8JYRwqm1cNQMhhKHk84XkOJ0ch0MIJ0IIUQjh1oN/3871aDSPnxbP558vPNyZPDO//Win8/89CuH/pR//5u7qZz8bmPz0Vz3qHgAAAAAAAAAAAAAAAACAN9zsjes3/zg+EZ5EYXA7an9fdzY5dno/ttozP+04xl69mwsAAAAAAAAAAAAAAAAAAADfVXvv/+eik/u8/z+THKc61K/+vrt+fv4tx0l/zP3h+syl8Ylk//eoLf9ckvT5hYEw2txf/aPO+79fyNTff//39n5eVXN8zX5HQhSPpc7jeGwshHeTjd9PR0fjUnmj8us75c215Z4N442Vjn9j9/5UdJIN/VPxf8n+/9OZ9vu///+P2q6m2vnt3l1ib7V0/Ac6lnvvn9FL4v/93XIXM/VeR/x5den4D9bThlsLTDUmgFr8/zN48P0/k2m/X/E/EULIRbWx5lIzQG0NU0vvtF4hLR3/79XTUlNn8ovsdP9/lYn/pUz7hzX/b2W/iNhXOv6NeXwoVWLv/h+ND77/L2faP4z418a/5fu/K+n4H2kkDqaK1H+T3c7/s5n2s/F/Ua1WezHum3EyzhNR6grYjhrp/mZcd9LxH2rL33v+i7ta/1/J1H9dz3/NfpvPf83p/5dR4/mP/e3Gfyc8q1aHO5br9v6fy9Tr9/w/VV//tTl3qp+dvkXS9//Relp67TxS/9kp/tVM/Ocz7b9C/N/v/BS6p74qGWrGf28+eXGkkf6O9V9X0vH/QSMxbi2xVf9ZX/9FB6//r2baP4z1X238W3F/e31bpON/rGO5Wvw/7uL7/1qmXv/jH8J48wJoX75wgHT8j3csV7//hw6O/0KmXr/j/4t+Ng4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwBphOjiMhisdS53E8NhbCxeT8dDgaLRaW84ul8tLfNkKYSdJz4WR0t1ReLJTyK2vl5WK+UCqVl0K4lOSfCkPRRqlcya8W7l/ebWs4ulcsrFcWi4VKCGE2Sf9JON5sa3Glslq4H0K4spv3w7i8fv9eYS2/vLL+u/Hx8fEwtzuG0aj4j0pxrdLovZEbwvxu3ZGoZXD17Ku7YzkW/bW8ub5WKNXTr7XUKZWXCqWWOgtJ3n/DaFRZ31xbKlSK+VL5brO/wzSVHGfmbvz5xrWJtvzbUeM4/XqHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA39GTyt/8LIQw2zuIQQi5KPkTJv5THT4vn888XHu5MnpnffrTzbL8yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXTpGiRiIwgD8ZlJo6TGsQtLZRhTRwojgCfQYHkaP4iW8g4WFrcWysDuBkGwgzW71fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsN7dc//y1LQRKc43ZxFfb98/4/yh1I/rw/erE8zI8dw/9je3TVv+Pc3yq3L02+Vd+v/3/lqVGqM6+JzsyXSf9uZ9ppb2bWm+oe9FpFxHRFfyy5RzXa97CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC07cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8CAAD//4VrJTc=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x104) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x81fd) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 1m46.934546106s ago: executing program 4 (id=220): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m45.979064701s ago: executing program 4 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='udp 20000\n\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/pool_threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) 1m30.936126612s ago: executing program 34 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='udp 20000\n\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/pool_threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) 1m7.614503264s ago: executing program 5 (id=367): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0x200c17a) r1 = userfaultfd(0x80001) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}], 0x1, 0x10001, 0x7f) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) 1m7.410809134s ago: executing program 5 (id=370): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1m7.114576658s ago: executing program 5 (id=376): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x5, 0x80000) write(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x13, 0x0) 1m6.977479784s ago: executing program 5 (id=377): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 1m6.590403243s ago: executing program 5 (id=379): syz_open_procfs$namespace(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m1.807655058s ago: executing program 5 (id=398): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001e00)={r3, 0x6}, &(0x7f0000001e40)=0x8) 1m1.468560904s ago: executing program 35 (id=398): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001e00)={r3, 0x6}, &(0x7f0000001e40)=0x8) 12.016205141s ago: executing program 8 (id=569): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002380)={0x10, 0x0, r1}, 0x10) fanotify_init(0x0, 0x101000) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) umount2(0x0, 0x1) 9.570982597s ago: executing program 8 (id=569): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002380)={0x10, 0x0, r1}, 0x10) fanotify_init(0x0, 0x101000) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) umount2(0x0, 0x1) 7.588142421s ago: executing program 2 (id=685): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 7.363621461s ago: executing program 2 (id=687): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000140)=0xf, 0x4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.218526848s ago: executing program 8 (id=569): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002380)={0x10, 0x0, r1}, 0x10) fanotify_init(0x0, 0x101000) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) umount2(0x0, 0x1) 5.301027599s ago: executing program 6 (id=689): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0xfffe}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="5c8c56b4ef4b478bf9b431ece6b2d8bdf4abffaee5e1138ba457a84eec31c9fdec2e274f512ea28c50a9c25214a70c6582928702c1116955bbeb327a89cc181a2bba5a572cf813a2619731ddffd8564bcf36d365cf5292989d9e186920c1229e12c006db1d590be12125bea3b9f0484e445b75da02486b2258c270fc864e6cca131ebb987f1a1c94b00228f9674d8a3af8920957bb79b18a43d7845d07da9cbd606cfadeefaf79873f32a0f0b25f55b71c62992ae0a3c2b8971184735d18d37f600de6bc84cbe7b097df1d8532c8e1e111323f61c542d743b0dd583d9e24f06472bc958931dd1ff3008825260385bfcd5250de2546a6ff22e4fab1ab39e0e2ccb19c506aae9ff404c5054b930aafcd6a35ae51c499fc2e535d719dcb5b465a7e25b245aabca1cc62bfa0fded3d066ef4fdaddfe30bc8de62a3d3c41838e6969f1f8a965e0712b4a62e16d2162b576ce12c0135a94b84199e55d1acc00684f0027aa3d91ad483c00100535cb08f7ec2ef9ccc67b85da92968a8bfd90926f3fbfda59093c4181058c6e24149ef74ad8d3b3b75c4b82fe212ac4605a3b75c6d9c7e526892d59c8762b10d8d6eb1b7f05f896abc89d89e6a0456e164fb2a9054cb60ca35ec3a46986b71b32b2e7d2a66049d508d01ce88d082375179d4be44123778067b08bc1b53372f805f60bbf79a38508fb1215527a67e8b2f06e2bf684c894d2a42724037ef20a91ec4c315ad86d2d496b914a02424a74fce888d601ab281f7a5e8e67ca119055c1b99b3f243e75cad3f210304467f9b9053914ec48801b48dd0d0aa572a36687db0864b07caa6f85948df49c850046ce02f3293607dd09dc86d83b624f4920f125387bd9273de41e4ad7a51befce70e6559a9a248e1587baf1dc41cb9e7003679116a11eeb132587e8f2d9254d5816613b115bcd2bc8cc7b9f595cdf0b04284744377e3a290b3b86bb526cd62282e1f004f25f68f73d98f72497098a631aa4b257c9f07b41ad9a20fbb400fef83b1bac3332428b4cc973118bc0b2580e9a464323979733b0cce4c300a10d2c435ccdd7a0605bd6795935799bd8a901104a02ebebecff6951ebe04a5b0c46d52e3faa7b7bba337212e810632e27d76986c0cd53f2eec0ec029fb94932ae44aacbf795cb53a74d65117334bcf69d5ab34e165729c1879b7524947cf06ddaff6f1fd2a584c78613184e7ac73a9f5984af867450832e67bc59e104a3bd277be484f2122e56c84f05218d9cd5d6697f2240d60c849cd055697df4e4f4d795dfca72782c562d94dd5824ad548d27808258b99678a27952a832be729286ef4ba2a3e1874c9e1da45ef38e92680b5320e8e40a1e5e9301f53acd6850d36c82b3eb128f5505a12f4e555a92ea716d6489f4e042700db779d057c139c6259d26c8d80c45563fb50aa38dd31cfa8a84d9e989de66f4b987dea0775b77557f51cc15546622e7b09f60f22b9f987e9e91ecedb9cfeb3eb4f6b5be2e9206187331e56bfe34bfe69ee4326b802ab52d261749a0e32a165fff6a8dd159a2fcdeb4f84db808b2ad2db60f0a2a2fa38209fd395f9484fef2ee01ed377103b77df0bb981096309396e1d0f94d6bb74dbdf519142e1bb5d3bea69267f000537e396ff357b9d889af66a8dfb589d5f541b1fe003dd1d4a0853d25dea43135f98dd4df1cda11b5751eddc9dd46a57c7bde4a8b8c6f1dc77704f33aa84dc35610282abc8686563ac604d3c89f44e89c9f5f5b8de89e6e6ef5b6a0ff586d4235ff7445b610094657532a3daa966ee28b3c14ed0282913c7015b717497e77094221b7fc183611402c566000e9e6b98cd10fd042a4fe6676532eeed94d8c72e73af2a6e14618bf9da0fea8c8264a6139f800a9eedf8b84bda62e56434a3cd207da02c3eb7211f917fabe1f7d632dc71afe2d201c46143e84165119c2f73091eaf72998f56dfa37946bdb6a2d22988d58e1a485ca56011eb6386d9a2a57bf24fc3c3c93405dbe5246cc6050afb63c5dcba74dc89fac94b04e47233ced8cf0098711617a66567af09bbcc40f951fcb637bc74911dc4fa647696b3", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) 5.299733539s ago: executing program 1 (id=690): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x600200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x80, 0x5, 0x4005, 0xb, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xc], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.28368527s ago: executing program 2 (id=691): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x4000, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 5.28340338s ago: executing program 7 (id=692): mount$9p_fd(0x0, 0x0, 0x0, 0x818, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fowner_gt}]}}) openat(0xffffffffffffff9c, 0x0, 0x20001, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 5.180155155s ago: executing program 6 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5.179881635s ago: executing program 7 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5.167410065s ago: executing program 2 (id=695): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x20, 0x3, 0x2, "8466"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x14, 0x2, "1f37"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x0, 0x10, 0x5, "8f3bb3a55d"}, 0x0, 0x0}) 5.086555819s ago: executing program 1 (id=696): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x49c, 0x2c, 0xc3f, 0x30bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x470, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x80000001}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe4, 0xc}}, @TCA_FW_ACT={0x45c, 0x4, [@m_police={0x458, 0x16, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffeffffff1427}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa759}, @TCA_POLICE_RATE={0x404, 0x2, [0x23000, 0xffffffff, 0x10, 0x1, 0x8, 0x3ff, 0x0, 0x0, 0xf, 0xa, 0x100, 0x2, 0x75, 0x9, 0x0, 0x9, 0xffffffba, 0xa, 0x4, 0x59, 0x4, 0x3, 0x7, 0x3, 0xffffffff, 0x1, 0x3, 0x0, 0x5, 0xb254, 0x9, 0x6, 0x80, 0xb, 0x5, 0x2, 0x3, 0x3, 0x2, 0x6, 0xb63e, 0x1, 0xb, 0x8, 0x7238, 0x8, 0xf, 0x4, 0x8001, 0xffff, 0x7f, 0x3, 0xd, 0x7, 0x100, 0x8, 0xe701, 0x3, 0x2, 0x5ff1a96a, 0x1, 0xff, 0x4, 0x401, 0x0, 0x7, 0x3c84, 0x200, 0x5650a7a5, 0xca, 0x3, 0x8, 0x4, 0x10000, 0x6, 0xb843, 0xdd, 0x21a, 0x59a4, 0x40, 0x2, 0x8, 0x4, 0x1000, 0x6, 0x1000000, 0x9, 0x9, 0x2, 0x1ff, 0x24b368a2, 0x0, 0x8, 0x94b, 0xfffffff8, 0x7fff, 0xb3, 0xfffffff9, 0xb, 0xb8, 0x8000, 0x4, 0xe7a, 0x1, 0xa, 0x2, 0x8, 0x7, 0x7, 0x7, 0x9, 0x400000, 0x1, 0x5, 0x7ff, 0x3, 0x8, 0x1, 0x0, 0x8000, 0xffffffff, 0xe, 0x6, 0x5, 0x10001, 0x2, 0x7, 0x80, 0x8, 0x18e5, 0x6, 0x3, 0x6, 0x9, 0x7ff, 0x7, 0x7fff, 0xeb, 0x0, 0x9, 0x6322dc7b, 0x10, 0x78000000, 0xfff, 0xc000000, 0xc15, 0x9, 0x20, 0x400, 0x9b, 0x6e4, 0x7, 0x81, 0x0, 0x4, 0x0, 0xfffffffd, 0x1, 0x9, 0x7, 0x8, 0x2, 0x8000, 0xb2, 0x2, 0xd, 0x80000000, 0x40, 0x38e6, 0x400, 0x0, 0x0, 0x7b9, 0x9, 0x1000, 0x5, 0x3, 0xaa6, 0x6d, 0x2, 0x101, 0x7, 0x4b0, 0x2, 0x3, 0x8, 0x6, 0xffffffff, 0x0, 0x0, 0xffffff8c, 0x9, 0x1000, 0x9, 0x3, 0x8, 0x9, 0x4, 0xd851, 0x0, 0x7fffffff, 0x8, 0x8, 0xb, 0x9, 0x8000, 0x4, 0x9bcc, 0x7, 0x4, 0xb5, 0xea, 0x8000, 0x7f, 0x1, 0x1, 0x1, 0x7, 0x4, 0x4, 0xc8f, 0x1, 0x4, 0x0, 0x6, 0xfffffffb, 0x9f84, 0x1ff, 0xffffffff, 0x2, 0x8, 0x4, 0x1, 0x0, 0x2, 0x8, 0x3, 0x5, 0xb, 0x4, 0x80, 0x5, 0x3d110ccc, 0x7, 0x1, 0x0, 0x0, 0xe, 0x7ff, 0x3, 0x2, 0x0, 0x2, 0x7, 0x7, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x49c}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003d00)=ANY=[@ANYBLOB="080000f506"], 0xfcf) 5.028891502s ago: executing program 7 (id=697): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x800, 0x80000001, 0xe}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 4.930115437s ago: executing program 8 (id=569): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002380)={0x10, 0x0, r1}, 0x10) fanotify_init(0x0, 0x101000) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) umount2(0x0, 0x1) 2.859749985s ago: executing program 6 (id=698): sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x440c0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[], 0x0) 2.856555154s ago: executing program 1 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) 2.856258845s ago: executing program 7 (id=700): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 2.778990448s ago: executing program 1 (id=701): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) lsetxattr$security_capability(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x3) 2.707405861s ago: executing program 6 (id=702): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8000) 2.621428625s ago: executing program 6 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000280)='./bus\x00', 0x8000, 0x52) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents64(r0, &(0x7f0000000240)=""/29, 0x1d) 2.557756188s ago: executing program 1 (id=704): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[], 0x1c}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0xfe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.53907212s ago: executing program 8 (id=569): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002380)={0x10, 0x0, r1}, 0x10) fanotify_init(0x0, 0x101000) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) umount2(0x0, 0x1) 290.071215ms ago: executing program 6 (id=705): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f0009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003d00), 0x82882, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 289.655056ms ago: executing program 1 (id=706): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x2000000, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1d"}, @sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0xfc, 0xc0000001}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x60}, 0x1, 0x7}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xd4, &(0x7f0000000180)=ANY=[@ANYBLOB="d403bb2f07bc14c38d1f12d845d92d7aaa544531e2af52d1dedb640585da533956fd60753d8b2b360ca08fdb8b635f108dbde00e79e71f74e8ca82937fc9a1eb51fe331bc322ff160a99fb03a17ab92ac6cb29f391165ddcac7441f41ab567a7c62c3bf47548d530b2d8928e17fc9ec13e71aecbface73dc47b9233b9089e4c226a5c951e6ed43345ea6913c395129f7c9a917007db57782b12b1f9d6f58253b59d559caf2899d5e34c314a2bb9455728a55e85fa1deca3db72749b5b1824b06fd1fdc"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffed9, &(0x7f0000000240)=ANY=[]) write(0xffffffffffffffff, 0x0, 0x0) 255.437328ms ago: executing program 2 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r4) 241.629228ms ago: executing program 7 (id=708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xf000, 0x3, 0x6, 0x8000000, 0x0, [{0x4b, 0x6d, 0x6, '\x00', 0x80}, {0x7, 0x5, 0x1, '\x00', 0xf8}, {0x80, 0x9, 0xaa, '\x00', 0x5}, {0x9, 0x40, 0x5, '\x00', 0x5}, {0x39, 0xfc, 0x6, '\x00', 0xe}, {0x8, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x4, 0xc6, '\x00', 0xb}, {0xa, 0x2, 0xa, '\x00', 0x56}, {0x5, 0x1, 0x9}, {0x6, 0x5, 0x3, '\x00', 0xd}, {0x4, 0xe, 0x4, '\x00', 0x72}, {0x9, 0x4, 0x4, '\x00', 0xf3}, {0xb, 0xfd, 0x5, '\x00', 0x4}, {0xff, 0x2, 0x0, '\x00', 0x8}, {0x2, 0x5, 0x39, '\x00', 0xa}, {0x10, 0x9, 0x81}, {0x3, 0xf8, 0x1a}, {0x9, 0x9, 0x4, '\x00', 0x3}, {0x8, 0x2, 0x0, '\x00', 0x15}, {0x3, 0x1, 0x7, '\x00', 0x3}, {0xf, 0x3, 0x70, '\x00', 0x7}, {0xaa, 0x7, 0x4, '\x00', 0x30}, {0x9, 0x4f, 0x5, '\x00', 0xf9}, {0x2, 0x9, 0x1, '\x00', 0x4}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x5, 0x0, 0x7ff9], 0x1, 0x1c5215}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 86.338175ms ago: executing program 7 (id=709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 175.53µs ago: executing program 2 (id=710): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, &(0x7f0000000040)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9}) 0s ago: executing program 8 (id=569): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002380)={0x10, 0x0, r1}, 0x10) fanotify_init(0x0, 0x101000) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) umount2(0x0, 0x1) kernel console output (not intermixed with test programs): ANGE): veth0_vlan: link becomes ready [ 96.350463][ T4776] device veth0_vlan entered promiscuous mode [ 96.385459][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.434151][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.620296][ T4575] device hsr_slave_0 left promiscuous mode [ 96.629149][ T4956] loop2: detected capacity change from 0 to 16 [ 96.637901][ T4575] device hsr_slave_1 left promiscuous mode [ 96.708041][ T4956] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.736664][ T4956] attempt to access beyond end of device [ 96.736664][ T4956] loop2: rw=524288, want=12304, limit=16 [ 96.748798][ T4956] attempt to access beyond end of device [ 96.748798][ T4956] loop2: rw=524288, want=1072, limit=16 [ 96.760360][ T4956] attempt to access beyond end of device [ 96.760360][ T4956] loop2: rw=0, want=12304, limit=16 [ 96.772028][ T26] audit: type=1800 audit(1789728194.172:5): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.167" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 96.793274][ T4575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.800743][ T4575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.824532][ T4956] erofs: (device loop2): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 2626 of nid 89 [ 96.888337][ T4575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.913936][ T4575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.942916][ T4575] device bridge_slave_1 left promiscuous mode [ 96.959465][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.059837][ T4575] device bridge_slave_0 left promiscuous mode [ 97.076554][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.220975][ T4575] device veth1_macvtap left promiscuous mode [ 97.232732][ T4575] device veth0_macvtap left promiscuous mode [ 97.259510][ T4575] device veth1_vlan left promiscuous mode [ 97.269799][ T4575] device veth0_vlan left promiscuous mode [ 97.875176][ T4986] loop5: detected capacity change from 0 to 512 [ 97.966624][ T4986] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 97.990700][ T4986] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.192275][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 98.448587][ T4996] loop4: detected capacity change from 0 to 1024 [ 98.485116][ T4996] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 98.511733][ T4996] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 98.524928][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 98.696881][ T4575] team0 (unregistering): Port device team_slave_1 removed [ 98.748316][ T4575] team0 (unregistering): Port device team_slave_0 removed [ 98.812995][ T4575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.855633][ T4575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.968712][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022fe7000: rx timeout, send abort [ 99.080954][ T4575] bond0 (unregistering): Released all slaves [ 99.193822][ T4776] device veth1_vlan entered promiscuous mode [ 99.206099][ T4969] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 99.229672][ T4969] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 99.248968][ T4969] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.170'. [ 99.269165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.283751][ T4972] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 99.302227][ T4972] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 99.312436][ T4972] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.170'. [ 99.323812][ T4971] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.351050][ T5000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 99.544241][ T5007] loop2: detected capacity change from 0 to 512 [ 99.624017][ T5007] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.638687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.695919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.767352][ T4776] device veth0_macvtap entered promiscuous mode [ 99.935932][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.021543][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.048853][ T26] audit: type=1800 audit(1789728197.442:6): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="file1" dev="loop2" ino=1048608 res=0 errno=0 [ 100.168112][ T5026] FAULT_INJECTION: forcing a failure. [ 100.168112][ T5026] name failslab, interval 1, probability 0, space 0, times 0 [ 100.265555][ T5026] CPU: 0 PID: 5026 Comm: syz.1.185 Not tainted syzkaller #0 [ 100.272902][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.282968][ T5026] Call Trace: [ 100.283009][ T5026] [ 100.283019][ T5026] dump_stack_lvl+0x188/0x250 [ 100.283048][ T5026] ? show_regs_print_info+0x20/0x20 [ 100.283066][ T5026] ? load_image+0x410/0x410 [ 100.283087][ T5026] ? __might_sleep+0xf0/0xf0 [ 100.289632][ T5026] ? __lock_acquire+0x7b50/0x7b50 [ 100.289663][ T5026] should_fail+0x383/0x4b0 [ 100.299535][ T5026] should_failslab+0x5/0x20 [ 100.308601][ T5026] slab_pre_alloc_hook+0x51/0xc0 [ 100.308627][ T5026] ? __d_alloc+0x27/0x6d0 [ 100.308649][ T5026] kmem_cache_alloc+0x3d/0x280 [ 100.308672][ T5026] __d_alloc+0x27/0x6d0 [ 100.318449][ T5026] d_alloc_parallel+0x7b/0x1320 [ 100.327867][ T5026] ? __d_lookup+0x6a4/0x760 [ 100.336945][ T5026] ? d_lookup+0x60/0x60 [ 100.345927][ T5026] ? format_decode+0xb67/0x1330 [ 100.345961][ T5026] ? __init_waitqueue_head+0xa4/0x140 [ 100.354594][ T5026] proc_fill_cache+0x158/0x460 [ 100.354623][ T5026] ? proc_map_files_lookup+0x750/0x750 [ 100.364830][ T5026] ? pid_revalidate+0x1a0/0x1a0 [ 100.364853][ T5026] ? snprintf+0xe5/0x140 [ 100.375069][ T5026] ? __genradix_ptr+0x1ae/0x1d0 [ 100.375095][ T5026] proc_map_files_readdir+0x7d0/0x9f0 [ 100.384184][ T5026] ? map_files_d_revalidate+0x6f0/0x6f0 [ 100.394392][ T5026] ? mutex_lock_io_nested+0x60/0x60 [ 100.394424][ T5026] ? iterate_dir+0x10d/0x550 [ 100.405147][ T5026] ? down_read_killable+0x1ce/0x340 [ 100.405168][ T5026] ? fsnotify_perm+0x254/0x560 [ 100.405194][ T5026] iterate_dir+0x213/0x550 [ 100.414971][ T5026] ? map_files_d_revalidate+0x6f0/0x6f0 [ 100.415001][ T5026] __se_sys_getdents+0xf2/0x260 [ 100.415023][ T5026] ? __x64_sys_getdents+0x80/0x80 [ 100.415038][ T5026] ? fillonedir+0x4c0/0x4c0 [ 100.424540][ T5026] ? lockdep_hardirqs_on+0x94/0x140 [ 100.424567][ T5026] do_syscall_64+0x4c/0xa0 [ 100.424585][ T5026] ? clear_bhb_loop+0x30/0x80 [ 100.424606][ T5026] ? clear_bhb_loop+0x30/0x80 [ 100.435290][ T5026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.435313][ T5026] RIP: 0033:0x7fd390f87159 [ 100.444825][ T5026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.444844][ T5026] RSP: 002b:00007fd38f1df028 EFLAGS: 00000246 [ 100.454467][ T5026] ORIG_RAX: 000000000000004e [ 100.454479][ T5026] RAX: ffffffffffffffda RBX: 00007fd39120efa0 RCX: 00007fd390f87159 [ 100.454495][ T5026] RDX: 00000000000000f3 RSI: 0000200000000f40 RDI: 0000000000000004 [ 100.463820][ T5026] RBP: 00007fd39101e06b R08: 0000000000000000 R09: 0000000000000000 [ 100.463836][ T5026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.463849][ T5026] R13: 00007fd39120f038 R14: 00007fd39120efa0 R15: 00007fff31445198 [ 100.474160][ T5026] [ 100.561247][ T4776] device veth1_macvtap entered promiscuous mode [ 100.592934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.622959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.685527][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.772134][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.782024][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.782043][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.819174][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.863578][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.912495][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.942968][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.026587][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.062628][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.100275][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.137017][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.164850][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.195317][ T4378] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 101.204411][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.238546][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.270065][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.283144][ T4378] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.321333][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.369895][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.414354][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.483761][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.495135][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.533412][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.602804][ T4776] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.621815][ T4776] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.642547][ T4776] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.651307][ T4776] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.028493][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.049248][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.096641][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.186131][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.209352][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.245048][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.682118][ C1] net_ratelimit: 76 callbacks suppressed [ 102.801135][ T5042] loop4: detected capacity change from 0 to 40427 [ 102.895990][ T5042] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 102.947563][ T5042] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 102.992462][ T5042] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 103.065981][ T5042] F2FS-fs (loop4): invalid crc value [ 103.099065][ T5042] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 103.116179][ T5091] bridge0: port 3(erspan0) entered blocking state [ 103.221426][ T5091] bridge0: port 3(erspan0) entered disabled state [ 103.299018][ T5091] device erspan0 entered promiscuous mode [ 103.339739][ T5091] bridge0: port 3(erspan0) entered blocking state [ 103.346926][ T5091] bridge0: port 3(erspan0) entered forwarding state [ 103.410474][ T5042] F2FS-fs (loop4): Start checkpoint disabled! [ 103.418146][ T5097] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 103.478838][ T5042] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 103.503930][ T5042] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 103.690348][ T5097] team0: Device veth1_vlan failed to register rx_handler [ 103.827679][ T5094] device erspan0 left promiscuous mode [ 103.832903][ T148] attempt to access beyond end of device [ 103.832903][ T148] loop4: rw=2049, want=45104, limit=40427 [ 103.852826][ T5094] bridge0: port 3(erspan0) entered disabled state [ 104.792983][ T5121] loop2: detected capacity change from 0 to 32768 [ 104.885847][ T5121] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.204 (5121) [ 104.907136][ T5121] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 104.916382][ T5121] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.926169][ T5121] BTRFS info (device loop2): use zstd compression, level 3 [ 104.933422][ T5121] BTRFS info (device loop2): force clearing of disk cache [ 104.933449][ T5121] BTRFS info (device loop2): enabling disk space caching [ 104.933466][ T5121] BTRFS info (device loop2): disk space caching is enabled [ 104.933480][ T5121] BTRFS info (device loop2): has skinny extents [ 105.182598][ T5121] BTRFS info (device loop2): enabling ssd optimizations [ 105.192526][ T5121] BTRFS info (device loop2): clearing free space tree [ 105.199405][ T5121] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.209723][ T5121] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.514746][ T5140] loop5: detected capacity change from 0 to 1024 [ 105.575265][ T5140] EXT4-fs (loop5): barriers disabled [ 105.620522][ T5140] JBD2: no valid journal superblock found [ 105.651313][ T5140] EXT4-fs (loop5): error loading journal [ 106.580839][ T5178] syz.5.213 uses obsolete (PF_INET,SOCK_PACKET) [ 107.142449][ T4597] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 107.387759][ T5168] loop4: detected capacity change from 0 to 32768 [ 107.461190][ T5168] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 107.491327][ T5168] JBD2: Ignoring recovery information on journal [ 107.502498][ T4597] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.525201][ T4597] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 107.543509][ T4597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.560785][ T4597] usb 7-1: config 0 descriptor?? [ 107.587599][ T5198] loop1: detected capacity change from 0 to 4096 [ 107.605652][ T4597] pwc: Askey VC010 type 2 USB webcam detected. [ 107.681023][ T5198] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.695212][ T5168] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 107.813763][ T4597] pwc: send_video_command error -71 [ 107.819526][ T4597] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 107.857910][ T5198] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 107.869573][ T4597] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 107.877057][ C0] net_ratelimit: 51 callbacks suppressed [ 107.899665][ T5198] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 107.926624][ T4597] usb 7-1: USB disconnect, device number 2 [ 107.938949][ T5198] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.217: Failed to acquire dquot type 1 [ 108.066139][ T5198] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 108.319466][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 108.482313][ T4597] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 108.842324][ T4597] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.870652][ T4597] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 108.929468][ T4597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.981445][ T4597] usb 7-1: config 0 descriptor?? [ 109.005905][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.045640][ T4597] pwc: Askey VC010 type 2 USB webcam detected. [ 109.107828][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.226609][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.332736][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.482341][ T4597] pwc: recv_control_msg error -32 req 02 val 2b00 [ 109.522449][ T4597] pwc: recv_control_msg error -32 req 02 val 2700 [ 109.572532][ T4597] pwc: recv_control_msg error -32 req 02 val 2c00 [ 109.842392][ T4597] pwc: recv_control_msg error -71 req 04 val 1300 [ 109.862320][ T4597] pwc: recv_control_msg error -71 req 04 val 1400 [ 109.922384][ T4597] pwc: recv_control_msg error -71 req 02 val 2000 [ 109.952503][ T4597] pwc: recv_control_msg error -71 req 02 val 2100 [ 109.972412][ T4597] pwc: recv_control_msg error -71 req 04 val 1500 [ 109.992407][ T4597] pwc: recv_control_msg error -71 req 02 val 2500 [ 110.013139][ T4597] pwc: recv_control_msg error -71 req 02 val 2400 [ 110.062386][ T4597] pwc: recv_control_msg error -71 req 02 val 2600 [ 110.082456][ T4597] pwc: recv_control_msg error -71 req 02 val 2900 [ 110.102420][ T4597] pwc: recv_control_msg error -71 req 02 val 2800 [ 110.142460][ T4597] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.162295][ T4597] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.205616][ T4597] pwc: Registered as video103. [ 110.224632][ T4597] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 110.327117][ T4597] usb 7-1: USB disconnect, device number 3 [ 110.674669][ T5274] tipc: Started in network mode [ 110.689975][ T5274] tipc: Node identity ac14140f, cluster identity 4711 [ 110.725621][ T5274] tipc: Enabled bearer , priority 10 [ 110.740322][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 110.796963][ T26] audit: type=1326 audit(1789728208.192:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb0cf1159 code=0x7fc00000 [ 110.894489][ T26] audit: type=1326 audit(1789728208.192:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2cb0cf1159 code=0x7fc00000 [ 111.052967][ T26] audit: type=1326 audit(1789728208.222:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb0cf1159 code=0x7fc00000 [ 111.076808][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.092221][ T26] audit: type=1326 audit(1789728208.222:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb0cf1159 code=0x7fc00000 [ 111.116361][ T26] audit: type=1326 audit(1789728208.222:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb0cf1159 code=0x7fc00000 [ 111.140257][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.176218][ T26] audit: type=1326 audit(1789728208.222:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb0cf1159 code=0x7fc00000 [ 111.238398][ T5291] loop6: detected capacity change from 0 to 512 [ 111.248758][ T26] audit: type=1326 audit(1789728208.222:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb0cf1159 code=0x7fc00000 [ 111.272730][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.295533][ T26] audit: type=1326 audit(1789728208.222:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.6.225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb0cf1159 code=0x7fc00000 [ 111.504409][ T5291] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.232: iget: bogus i_mode (4) [ 111.589573][ T5291] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.232: couldn't read orphan inode 15 (err -117) [ 111.642444][ T4371] Bluetooth: hci1: command 0x0409 tx timeout [ 111.739910][ T5291] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,stripe=0x0000000000000fff,norecovery,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,noinit_itable,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 111.779807][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.822599][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.875180][ T5244] device bridge_slave_0 entered promiscuous mode [ 111.905229][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.954202][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.989624][ T5244] device bridge_slave_1 entered promiscuous mode [ 112.022434][ T5291] EXT4-fs error (device loop6): ext4_free_branches:1043: inode #13: block 234881024: comm syz.6.232: Read failure [ 112.048040][ T4597] tipc: Node number set to 2886997007 [ 112.305945][ T144] device hsr_slave_0 left promiscuous mode [ 112.330552][ T144] device hsr_slave_1 left promiscuous mode [ 112.428358][ T4597] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 112.452562][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.460237][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.487867][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.532642][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.561857][ T144] device bridge_slave_1 left promiscuous mode [ 112.590590][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.619871][ T144] device bridge_slave_0 left promiscuous mode [ 112.640029][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.692217][ T4597] usb 6-1: Using ep0 maxpacket: 32 [ 112.699490][ T144] device veth1_macvtap left promiscuous mode [ 112.708631][ T144] device veth0_macvtap left promiscuous mode [ 112.724590][ T144] device veth1_vlan left promiscuous mode [ 112.739439][ T144] device veth0_vlan left promiscuous mode [ 112.828214][ T4597] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.852219][ T4597] usb 6-1: config 0 has no interface number 0 [ 112.858393][ T4597] usb 6-1: config 0 interface 184 has no altsetting 0 [ 112.992993][ T4284] net_ratelimit: 57 callbacks suppressed [ 113.043077][ T4597] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.062117][ T4597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.070146][ T4597] usb 6-1: Product: syz [ 113.083307][ T4597] usb 6-1: Manufacturer: syz [ 113.087980][ T4597] usb 6-1: SerialNumber: syz [ 113.142143][ T4597] usb 6-1: config 0 descriptor?? [ 113.183975][ T4597] smsc75xx v1.0.0 [ 113.327113][ T5314] loop2: detected capacity change from 0 to 32768 [ 113.384374][ T5314] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.235 (5314) [ 113.465891][ T5314] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 113.482119][ T5314] BTRFS info (device loop2): force zlib compression, level 3 [ 113.499939][ T5314] BTRFS info (device loop2): doing ref verification [ 113.499964][ T5314] BTRFS info (device loop2): setting nodatasum [ 113.522358][ T5314] BTRFS info (device loop2): disabling tree log [ 113.542219][ T5314] BTRFS info (device loop2): enabling disk space caching [ 113.565388][ T5314] BTRFS error (device loop2): cannot disable free space tree [ 113.608397][ T5314] BTRFS error (device loop2): open_ctree failed: -22 [ 113.712344][ T4371] Bluetooth: hci1: command 0x041b tx timeout [ 113.795463][ T144] team0 (unregistering): Port device team_slave_1 removed [ 113.862382][ T4597] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 113.890017][ T4597] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 113.900054][ T144] team0 (unregistering): Port device team_slave_0 removed [ 113.958793][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.008479][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.376790][ T144] bond0 (unregistering): Released all slaves [ 114.613532][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.639159][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.796472][ T5244] team0: Port device team_slave_0 added [ 114.833561][ T5244] team0: Port device team_slave_1 added [ 114.842456][ T4597] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 114.873372][ T4597] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 114.944888][ T4597] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 115.007320][ T4597] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 115.056282][ T4597] usb 6-1: USB disconnect, device number 3 [ 115.081775][ T5328] netlink: 24 bytes leftover after parsing attributes in process `syz.6.238'. [ 115.143999][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.150984][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.211759][ T5332] loop2: detected capacity change from 0 to 2048 [ 115.278730][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.312420][ T5332] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.331147][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.411522][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.532273][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.666331][ T5332] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 115.787898][ T5244] device hsr_slave_0 entered promiscuous mode [ 115.796578][ T4371] Bluetooth: hci1: command 0x040f tx timeout [ 115.843653][ T5244] device hsr_slave_1 entered promiscuous mode [ 116.672324][ T4373] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 116.918193][ T4373] usb 6-1: Using ep0 maxpacket: 8 [ 117.048542][ T4373] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 117.063561][ T4373] usb 6-1: config 0 has no interface number 0 [ 117.099380][ T4373] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 117.140253][ T4373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.220536][ T4373] usb 6-1: config 0 descriptor?? [ 117.428980][ T4373] viperboard 6-1:0.143: version 0.00 found at bus 006 address 004 [ 117.512187][ T4373] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 117.562001][ T4373] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 117.646195][ T4373] usb 6-1: USB disconnect, device number 4 [ 117.819720][ T5244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.882327][ T4370] Bluetooth: hci1: command 0x0419 tx timeout [ 117.909010][ T5244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.002925][ T5244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.057796][ T5244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.442132][ C1] net_ratelimit: 43 callbacks suppressed [ 118.490310][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.573168][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.581189][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.644130][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.687881][ T5388] loop5: detected capacity change from 0 to 512 [ 118.694899][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.708848][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.746120][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.753267][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.810857][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.852762][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.872727][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.912954][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.920082][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.013504][ T5388] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.245: missing EA_INODE flag [ 119.074230][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.088966][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.106487][ T5388] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.245: error while reading EA inode 2 err=-117 [ 119.153775][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.175232][ T5388] EXT4-fs (loop5): 1 orphan inode deleted [ 119.191867][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.222350][ T5388] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nogrpid,,errors=continue. Quota mode: writeback. [ 119.235854][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.297692][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.320355][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.382769][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.422976][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.477774][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.585547][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.654658][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.204219][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 120.346876][ T5416] device syz_tun entered promiscuous mode [ 120.514856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.533671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.562757][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.656152][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.673628][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.753078][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.792727][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.840531][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.881888][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.924703][ T5244] device veth0_vlan entered promiscuous mode [ 120.989877][ T5244] device veth1_vlan entered promiscuous mode [ 121.028854][ T5441] loop6: detected capacity change from 0 to 128 [ 121.048334][ T5404] loop5: detected capacity change from 0 to 32768 [ 121.079905][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.099175][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.124730][ T5244] device veth0_macvtap entered promiscuous mode [ 121.155551][ T5244] device veth1_macvtap entered promiscuous mode [ 121.246846][ T5441] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.286986][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.299242][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.318709][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.342897][ T5441] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.403689][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.443308][ T5441] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.251: Invalid block bitmap block 164 in block_group 0 [ 121.454048][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.514181][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.567973][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.623868][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.663969][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.690650][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.716149][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.725219][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.750013][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.780174][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.852157][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.884528][ T5456] loop6: detected capacity change from 0 to 512 [ 121.893266][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.914656][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.945053][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.972163][ T4597] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 121.995624][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.006417][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.022229][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.050247][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.069522][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.089828][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.154401][ T5244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.187060][ T5244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.218640][ T5456] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.263556][ T5244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.275322][ T5244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.281529][ T5456] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.513959][ T5456] EXT4-fs warning (device loop6): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 164 [ 122.543569][ T4575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.566627][ T4575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.593107][ T4597] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 122.611434][ T5456] EXT4-fs warning (device loop6): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 164 [ 122.620773][ T4597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.642416][ T4597] usb 3-1: Product: syz [ 122.652488][ T4597] usb 3-1: Manufacturer: syz [ 122.667760][ T4597] usb 3-1: SerialNumber: syz [ 122.672977][ T5456] __quota_error: 55 callbacks suppressed [ 122.672992][ T5456] Quota error (device loop6): write_blk: dquota write failed [ 122.698510][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.716293][ T5456] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 122.742372][ T4597] usb 3-1: config 0 descriptor?? [ 122.804869][ T4597] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 122.822552][ T5456] Quota error (device loop6): qtree_write_dquot: Error -12 occurred while creating quota [ 122.857980][ T5456] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.254: Failed to acquire dquot type 1 [ 122.858044][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.946844][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.996083][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.231729][ T5473] using random self ethernet address [ 123.262926][ T5473] using random host ethernet address [ 123.367722][ T26] audit: type=1800 audit(1789728220.762:70): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.231" name="host_addr" dev="configfs" ino=39477 res=0 errno=0 [ 123.632177][ C1] net_ratelimit: 79 callbacks suppressed [ 123.825044][ T5494] kvm_msr_ignored_check: 559 callbacks suppressed [ 123.907013][ T5493] device wlan0 entered promiscuous mode [ 124.130575][ T5503] loop6: detected capacity change from 0 to 256 [ 124.193143][ T5503] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 124.275240][ T5505] netlink: 'syz.5.265': attribute type 4 has an invalid length. [ 124.303380][ T5503] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 124.378402][ T5503] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 124.402655][ T5507] netlink: 'syz.5.265': attribute type 4 has an invalid length. [ 124.420849][ T5503] UDF-fs: Scanning with blocksize 512 failed [ 124.494638][ T5503] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 124.532192][ T5503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.622413][ T4597] gspca_stk1135: reg_w 0x200 err -71 [ 124.633217][ T4597] gspca_stk1135: serial bus timeout: status=0x00 [ 124.639594][ T4597] gspca_stk1135: Sensor write failed [ 124.715005][ T4597] gspca_stk1135: serial bus timeout: status=0x00 [ 124.726018][ T5503] capability: warning: `syz.6.264' uses deprecated v2 capabilities in a way that may be insecure [ 124.744874][ T4597] gspca_stk1135: Sensor write failed [ 124.750223][ T4597] gspca_stk1135: serial bus timeout: status=0x00 [ 124.798303][ T4597] gspca_stk1135: Sensor read failed [ 124.805976][ T4597] gspca_stk1135: serial bus timeout: status=0x00 [ 124.856563][ T4597] gspca_stk1135: Sensor read failed [ 124.861823][ T4597] gspca_stk1135: Detected sensor type unknown (0x0) [ 124.931470][ T4597] gspca_stk1135: serial bus timeout: status=0x00 [ 125.005924][ T4597] gspca_stk1135: Sensor read failed [ 125.039646][ T4597] gspca_stk1135: serial bus timeout: status=0x00 [ 125.072706][ T4371] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.091587][ T4597] gspca_stk1135: Sensor read failed [ 125.154943][ T4597] gspca_stk1135: serial bus timeout: status=0x00 [ 125.161331][ T4597] gspca_stk1135: Sensor write failed [ 125.161358][ T4597] gspca_stk1135: serial bus timeout: status=0x00 [ 125.264478][ T4597] gspca_stk1135: Sensor write failed [ 125.271896][ T4597] stk1135: probe of 3-1:0.0 failed with error -71 [ 125.322747][ T4597] usb 3-1: USB disconnect, device number 3 [ 125.342206][ T4371] usb 2-1: Using ep0 maxpacket: 8 [ 125.502498][ T4371] usb 2-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 125.526231][ T4371] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.746034][ T4371] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 125.769258][ T4371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.793299][ T1108] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 125.793393][ T5535] loop6: detected capacity change from 0 to 4096 [ 125.822115][ T4371] usb 2-1: Product: syz [ 125.842096][ T4371] usb 2-1: Manufacturer: syz [ 125.842117][ T4371] usb 2-1: SerialNumber: syz [ 125.952756][ T5535] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 126.032247][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 126.148819][ T5516] chnl_net:caif_netlink_parms(): no params data found [ 126.156019][ T1108] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 126.165032][ T1108] usb 6-1: config 0 has no interface number 0 [ 126.171909][ T1108] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 126.218989][ T1108] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 126.444146][ T1108] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 126.473087][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.481130][ T1108] usb 6-1: Product: syz [ 126.481149][ T1108] usb 6-1: Manufacturer: syz [ 126.481163][ T1108] usb 6-1: SerialNumber: syz [ 126.551767][ T4371] usb 2-1: USB disconnect, device number 2 [ 126.636528][ T5550] Illegal XDP return value 4294967282, expect packet loss! [ 126.656221][ T1108] usb 6-1: config 0 descriptor?? [ 126.675080][ T5514] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.683018][ T5514] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.803559][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.919708][ T5514] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.973925][ T5514] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.002401][ T4371] Bluetooth: hci3: command 0x0409 tx timeout [ 127.027443][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.065086][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.107043][ T5516] device bridge_slave_0 entered promiscuous mode [ 127.171789][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.213601][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.232350][ T5516] device bridge_slave_1 entered promiscuous mode [ 127.252532][ T1108] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 127.435652][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.504817][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.730248][ T5516] team0: Port device team_slave_0 added [ 127.777273][ T5516] team0: Port device team_slave_1 added [ 128.053901][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.080168][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.143348][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.180669][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.205722][ T1324] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 128.220626][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.267287][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.492149][ T1324] usb 7-1: Using ep0 maxpacket: 32 [ 128.511546][ T5516] device hsr_slave_0 entered promiscuous mode [ 128.552499][ T1108] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 128.582312][ T1108] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 128.612582][ T1324] usb 7-1: config 0 has no interfaces? [ 128.619770][ T1108] asix: probe of 6-1:0.34 failed with error -71 [ 128.651828][ T1108] usb 6-1: USB disconnect, device number 5 [ 128.716321][ C1] net_ratelimit: 66 callbacks suppressed [ 128.734607][ T5516] device hsr_slave_1 entered promiscuous mode [ 128.772394][ T1324] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 128.782338][ T5516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.789919][ T5516] Cannot create hsr debugfs directory [ 128.803397][ T1324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.833292][ T1324] usb 7-1: Product: syz [ 128.837506][ T1324] usb 7-1: Manufacturer: syz [ 128.872291][ T1324] usb 7-1: SerialNumber: syz [ 128.898237][ T1324] usb 7-1: config 0 descriptor?? [ 129.082245][ T4371] Bluetooth: hci3: command 0x041b tx timeout [ 129.241857][ T1108] usb 7-1: USB disconnect, device number 4 [ 129.588540][ T5516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 129.660522][ T5516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 129.731564][ T5516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 129.800561][ T5516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 130.309471][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.383377][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.408579][ T5609] loop6: detected capacity change from 0 to 128 [ 130.415552][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.456097][ T5516] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.533761][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.557274][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.606037][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.613182][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.670088][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.693085][ T5609] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 130.740228][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.780252][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.787407][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.894990][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.956186][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.979043][ T26] audit: type=1800 audit(1789728228.372:71): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.287" name="file1" dev="loop6" ino=119 res=0 errno=0 [ 131.032707][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.043486][ T5609] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 131.060424][ T5615] jffs2: notice: (5615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.108963][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.152421][ T4373] Bluetooth: hci3: command 0x040f tx timeout [ 131.178157][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.236417][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.304336][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.334089][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.396409][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.416431][ T5621] loop6: detected capacity change from 0 to 1024 [ 131.443779][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.480142][ T5621] EXT4-fs (loop6): Ignoring removed oldalloc option [ 131.510262][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.556460][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.584776][ T5621] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,min_batch_time=0x000000000000c555,oldalloc,,errors=continue. Quota mode: none. [ 131.628278][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.703464][ T26] audit: type=1804 audit(1789728229.092:72): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.290" name="/newroot/28/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 131.798441][ T5634] EXT4-fs (loop6): shut down requested (0) [ 132.317168][ T5648] loop5: detected capacity change from 0 to 128 [ 132.356718][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.369201][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.417597][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.503350][ T5648] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.571488][ T5648] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.797707][ T5648] EXT4-fs (loop5): shut down requested (2) [ 132.834910][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.166066][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.219192][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.242491][ T4373] Bluetooth: hci3: command 0x0419 tx timeout [ 133.348504][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.510531][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.608526][ T5516] device veth0_vlan entered promiscuous mode [ 133.614751][ T5685] loop6: detected capacity change from 0 to 32768 [ 133.696783][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.730281][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.781737][ T5685] XFS (loop6): Mounting V5 Filesystem [ 133.792127][ C0] net_ratelimit: 59 callbacks suppressed [ 133.814867][ T5516] device veth1_vlan entered promiscuous mode [ 133.837713][ T5691] block device autoloading is deprecated and will be removed. [ 133.851199][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.890796][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.904349][ T5516] device veth0_macvtap entered promiscuous mode [ 134.046219][ T5685] XFS (loop6): Ending clean mount [ 134.094912][ T5516] device veth1_macvtap entered promiscuous mode [ 134.315229][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.400246][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.418466][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.439296][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.479822][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.532507][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.719907][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.814499][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.903460][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.988709][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.074702][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.180103][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.275074][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.353870][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.437804][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.527510][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.617043][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.646593][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.657128][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.667555][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.678056][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.689493][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.725431][ T5713] loop5: detected capacity change from 0 to 1024 [ 136.189214][ T5707] loop2: detected capacity change from 0 to 131072 [ 136.198738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.210687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.272588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.292926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.326435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.351540][ T5707] F2FS-fs (loop2): invalid crc value [ 136.360326][ T4575] hfsplus: b-tree write err: -5, ino 8 [ 136.368774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.396989][ T5516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.412448][ T5707] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.458954][ T5516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.468525][ T5707] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 136.487116][ T5707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 136.495630][ T5516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.516146][ T5516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.829981][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.885382][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.985868][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.057857][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.121420][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.133219][ T4776] XFS (loop6): Unmounting Filesystem [ 137.165787][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.842189][ T1324] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 138.202476][ T1324] usb 2-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 138.234534][ T1324] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 138.276571][ T1324] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.492489][ T1324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.529296][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.568081][ T1324] usb 2-1: Product: syz [ 138.588229][ T1324] usb 2-1: Manufacturer: syz [ 138.608438][ T1324] usb 2-1: SerialNumber: syz [ 138.633344][ T5733] overlayfs: statfs failed on './file0' [ 139.072530][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 139.196928][ T1324] usb 2-1: USB disconnect, device number 3 [ 139.233658][ C0] net_ratelimit: 87 callbacks suppressed [ 139.323715][ T1108] usb 8-1: Using ep0 maxpacket: 8 [ 139.442448][ T1108] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.457938][ T1108] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.489515][ T1108] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 139.529291][ T1108] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 139.529362][ T1108] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 139.529384][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.662905][ T5543] syz.2.272 (5543) used greatest stack depth: 19760 bytes left [ 139.674152][ T1108] hub 8-1:1.0: bad descriptor, ignoring hub [ 139.680093][ T1108] hub: probe of 8-1:1.0 failed with error -5 [ 139.718660][ T1108] cdc_wdm 8-1:1.0: skipping garbage [ 139.738995][ T1108] cdc_wdm 8-1:1.0: skipping garbage [ 139.837577][ T1108] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 139.914863][ T1108] cdc_wdm 8-1:1.0: Unknown control protocol [ 140.322903][ T5774] capability: warning: `syz.1.319' uses 32-bit capabilities (legacy support in use) [ 141.232546][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.412732][ T5806] tipc: Started in network mode [ 141.426777][ T5806] tipc: Node identity 2000004, cluster identity 4711 [ 141.445311][ T5806] tipc: Node number set to 33554436 [ 141.472425][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 141.592561][ T1108] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 141.782599][ T1108] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.834626][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.863383][ T1108] usb 2-1: Product: syz [ 141.894806][ T1108] usb 2-1: Manufacturer: syz [ 141.894827][ T1108] usb 2-1: SerialNumber: syz [ 141.936886][ T1108] usb 2-1: config 0 descriptor?? [ 141.953693][ T5796] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.020274][ T1108] hub 2-1:0.0: bad descriptor, ignoring hub [ 142.042212][ T1108] hub: probe of 2-1:0.0 failed with error -5 [ 142.218439][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.334'. [ 142.354686][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060413400: rx timeout, send abort [ 142.649907][ T5849] loop6: detected capacity change from 0 to 512 [ 142.687169][ T5849] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.742279][ T5849] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 142.839615][ T5849] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 142.924937][ T5849] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e02c, mo2=0006] [ 143.003564][ T5849] System zones: 0-2, 18-18, 34-35 [ 143.034797][ T5849] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 144.252246][ C0] net_ratelimit: 96 callbacks suppressed [ 144.478868][ T5888] device ip6gre1 entered promiscuous mode [ 144.888018][ T5748] cdc_wdm 8-1:1.0: Error autopm - -16 [ 144.901645][ T4230] usb 8-1: USB disconnect, device number 2 [ 144.940676][ T5796] cdc_wdm 8-1:1.0: Error autopm - -16 [ 145.169217][ T1108] usb 2-1: USB disconnect, device number 4 [ 145.182275][ T5906] hwrng: no data available [ 145.251778][ T5910] loop7: detected capacity change from 0 to 2048 [ 145.341938][ T5910] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 145.912178][ T1324] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 146.074979][ T5939] loop5: detected capacity change from 0 to 128 [ 146.126525][ T5910] EXT4-fs (loop7): shut down requested (1) [ 146.208508][ T5939] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.222283][ T5939] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.292437][ T1324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.347288][ T1324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.428610][ T1324] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 146.483020][ T1324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.610427][ T5952] loop7: detected capacity change from 0 to 512 [ 146.741474][ T5952] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 146.802534][ T5952] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 146.837349][ T5952] EXT4-fs (loop7): orphan cleanup on readonly fs [ 146.854499][ T5952] EXT4-fs (loop7): 1 truncate cleaned up [ 146.879105][ T5952] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.012732][ T5960] loop2: detected capacity change from 0 to 1024 [ 147.026279][ T5928] udc-core: couldn't find an available UDC or it's busy [ 147.045545][ T5928] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.091346][ T5960] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 147.103548][ T1324] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x6 [ 147.110983][ T1324] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 147.121791][ T1324] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 147.176761][ T5960] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.222264][ T1324] hid-picolcd 0003:04D8:C002.0004: unsupported KEY_STATE report [ 147.268454][ T1324] hid-picolcd: probe of 0003:04D8:C002.0004 failed with error -22 [ 147.277604][ T5960] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 147.314272][ T5960] System zones: 0-1, 3-36 [ 147.343036][ T5960] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 147.476589][ T4230] usb 7-1: USB disconnect, device number 5 [ 148.300013][ T5998] loop5: detected capacity change from 0 to 512 [ 148.404652][ T5998] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.472377][ T4372] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 148.492537][ T5998] EXT4-fs (loop5): 1 truncate cleaned up [ 148.512943][ T5998] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback. [ 148.634209][ T4404] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 148.692362][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 148.706141][ T4404] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /77/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 148.732268][ T4372] usb 7-1: Using ep0 maxpacket: 32 [ 148.841429][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 148.885149][ T4404] EXT4-fs error (device loop5): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 149.006101][ T4372] usb 7-1: unable to get BOS descriptor or descriptor too short [ 149.008052][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 149.051054][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 149.092508][ T4372] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 149.106856][ T4404] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /77/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 149.110335][ T4372] usb 7-1: can't read configurations, error -71 [ 149.226538][ T6000] loop2: detected capacity change from 0 to 40427 [ 149.260992][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 149.297243][ T4404] EXT4-fs error (device loop5): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 149.318115][ C0] net_ratelimit: 66 callbacks suppressed [ 149.430532][ T6005] xt_hashlimit: size too large, truncated to 1048576 [ 149.474234][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 149.480787][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 149.640987][ T6009] FAULT_INJECTION: forcing a failure. [ 149.640987][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 149.682669][ T4404] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /77/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 149.698249][ T6009] CPU: 1 PID: 6009 Comm: syz.6.381 Not tainted syzkaller #0 [ 149.712358][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.722441][ T6009] Call Trace: [ 149.725741][ T6009] [ 149.728690][ T6009] dump_stack_lvl+0x188/0x250 [ 149.733408][ T6009] ? show_regs_print_info+0x20/0x20 [ 149.738628][ T6009] ? load_image+0x410/0x410 [ 149.743168][ T6009] ? __lock_acquire+0x7b50/0x7b50 [ 149.748237][ T6009] should_fail+0x383/0x4b0 [ 149.752685][ T6009] should_failslab+0x5/0x20 [ 149.757231][ T6009] slab_pre_alloc_hook+0x51/0xc0 [ 149.762197][ T6009] __kmalloc_node+0x6d/0x3a0 [ 149.766816][ T6009] ? crypto_create_tfm_node+0x72/0x340 [ 149.772310][ T6009] crypto_create_tfm_node+0x72/0x340 [ 149.777648][ T6009] crypto_spawn_tfm2+0x58/0x90 [ 149.782447][ T6009] pkcs1pad_init_tfm+0x44/0x120 [ 149.787344][ T6009] crypto_create_tfm_node+0xfa/0x340 [ 149.792664][ T6009] crypto_alloc_tfm_node+0x177/0x360 [ 149.797995][ T6009] public_key_verify_signature+0x27b/0xd40 [ 149.803933][ T6009] ? __kasan_kmalloc+0xaf/0xe0 [ 149.808723][ T6009] ? asymmetric_key_generate_id+0x52/0xd0 [ 149.814470][ T6009] ? x509_cert_parse+0x53a/0x7a0 [ 149.819431][ T6009] ? x509_key_preparse+0x60/0x5d0 [ 149.824516][ T6009] ? asymmetric_key_preparse+0xa5/0x140 [ 149.830085][ T6009] ? key_create_or_update+0x432/0xa40 [ 149.835484][ T6009] ? __se_sys_add_key+0x34b/0x410 [ 149.840533][ T6009] ? do_syscall_64+0x4c/0xa0 [ 149.845156][ T6009] ? public_key_free+0x80/0x80 [ 149.849983][ T6009] ? asymmetric_key_id_same+0x63/0xe0 [ 149.855390][ T6009] x509_check_for_self_signed+0x317/0x420 [ 149.861153][ T6009] x509_cert_parse+0x59c/0x7a0 [ 149.865949][ T6009] x509_key_preparse+0x60/0x5d0 [ 149.870821][ T6009] ? down_read+0x1aa/0x2e0 [ 149.875263][ T6009] asymmetric_key_preparse+0xa5/0x140 [ 149.875293][ T6009] key_create_or_update+0x432/0xa40 [ 149.875313][ T6009] ? security_key_permission+0x7c/0xa0 [ 149.875342][ T6009] ? key_type_put+0x20/0x20 [ 149.875364][ T6009] ? lookup_user_key_possessed+0x40/0x40 [ 149.895911][ T6009] ? __might_fault+0xb3/0x110 [ 149.895941][ T6009] __se_sys_add_key+0x34b/0x410 [ 149.911456][ T6009] ? __x64_sys_add_key+0xc0/0xc0 [ 149.916419][ T6009] ? lockdep_hardirqs_on+0x94/0x140 [ 149.916444][ T6009] ? __x64_sys_add_key+0x1c/0xc0 [ 149.916468][ T6009] do_syscall_64+0x4c/0xa0 [ 149.916486][ T6009] ? clear_bhb_loop+0x30/0x80 [ 149.916507][ T6009] ? clear_bhb_loop+0x30/0x80 [ 149.916526][ T6009] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.927014][ T6009] RIP: 0033:0x7f2cb0cf1159 [ 149.946664][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.946688][ T6009] RSP: 002b:00007f2caef49028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 149.979150][ T6009] RAX: ffffffffffffffda RBX: 00007f2cb0f78fa0 RCX: 00007f2cb0cf1159 [ 149.987146][ T6009] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 149.995128][ T6009] RBP: 00007f2cb0d8806b R08: ffffffffffffffff R09: 0000000000000000 [ 149.995147][ T6009] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 149.995160][ T6009] R13: 00007f2cb0f79038 R14: 00007f2cb0f78fa0 R15: 00007ffd09525138 [ 149.995192][ T6009] [ 150.045415][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 150.127909][ T4404] EXT4-fs error (device loop5): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 150.159398][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 150.181867][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 150.277789][ T4404] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /77/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 150.439922][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 150.472436][ T4404] EXT4-fs error (device loop5): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 150.621312][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 150.680576][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 150.767552][ T4404] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /77/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 150.870289][ T4404] EXT4-fs (loop5): Remounting filesystem read-only [ 150.894418][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 150.915623][ T6024] loop7: detected capacity change from 0 to 1024 [ 150.946701][ T6024] EXT4-fs (loop7): Ignoring removed oldalloc option [ 150.973921][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 150.998622][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 151.031984][ T6024] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,min_batch_time=0x000000000000c555,oldalloc,,errors=continue. Quota mode: none. [ 151.182810][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 151.237331][ T26] audit: type=1804 audit(1789728248.632:73): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.385" name="/newroot/9/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 151.258205][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 151.328062][ T6032] EXT4-fs (loop7): shut down requested (0) [ 151.338648][ T4404] EXT4-fs warning (device loop5): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 152.654042][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.919466][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.071006][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.194077][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.385547][ T6056] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 153.643367][ T144] tipc: Left network mode [ 153.854164][ T6066] loop7: detected capacity change from 0 to 128 [ 154.172266][ T6066] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 154.313824][ T6066] hpfs: filesystem error: improperly stopped [ 154.352122][ C0] net_ratelimit: 67 callbacks suppressed [ 154.400146][ T6066] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 154.482153][ T6066] hpfs: You really don't want any checks? You are crazy... [ 154.670032][ T6066] hpfs: hpfs_map_sector(): read error [ 154.728591][ T6066] hpfs: code page support is disabled [ 154.829316][ T6066] hpfs: hpfs_map_4sectors(): unaligned read [ 154.843704][ T6086] loop6: detected capacity change from 0 to 4096 [ 154.871989][ T6066] hpfs: hpfs_map_4sectors(): unaligned read [ 154.912138][ T6086] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 154.944800][ T6066] hpfs: filesystem error: unable to find root dir [ 155.085283][ T6086] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 155.095800][ T6066] hpfs: hpfs_map_4sectors(): unaligned read [ 155.177962][ T6086] ntfs3: loop6: Failed to load $Extend. [ 155.200185][ T6066] hpfs: hpfs_map_sector(): read error [ 155.318045][ T6093] hpfs: hpfs_map_4sectors(): unaligned read [ 155.425439][ T6093] hpfs: hpfs_map_sector(): read error [ 155.463716][ T6086] ntfs3: loop6: MftZone: unavailable [ 155.555324][ T6086] ntfs3: loop6: MftZone: unavailable [ 155.560662][ T6086] ntfs3: loop6: no free space to extend mft [ 155.601615][ T6086] ntfs3: loop6: MftZone: unavailable [ 155.643511][ T6086] ntfs3: loop6: no free space to extend mft [ 155.700105][ T6086] ntfs3: loop6: MftZone: unavailable [ 155.762200][ T6086] ntfs3: loop6: no free space to extend mft [ 156.171540][ T144] device hsr_slave_0 left promiscuous mode [ 156.260258][ T144] device hsr_slave_1 left promiscuous mode [ 156.364919][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 156.402302][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.409764][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.454956][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.514276][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.557319][ T144] device bridge_slave_1 left promiscuous mode [ 156.592881][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.612779][ T144] device bridge_slave_0 left promiscuous mode [ 156.640576][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.709068][ T144] device veth1_macvtap left promiscuous mode [ 156.733655][ T144] device veth0_macvtap left promiscuous mode [ 156.783370][ T144] device veth1_vlan left promiscuous mode [ 156.792672][ T144] device veth0_vlan left promiscuous mode [ 156.850213][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880617cec00: rx timeout, send abort [ 157.280981][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060425c00: rx timeout, send abort [ 157.350391][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880617cd400: rx timeout, send abort [ 157.360110][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880617cec00: abort rx timeout. Force session deactivation [ 157.411613][ T6132] netlink: 'syz.7.413': attribute type 3 has an invalid length. [ 157.429988][ T6132] netlink: 'syz.7.413': attribute type 1 has an invalid length. [ 157.453491][ T6132] netlink: 194788 bytes leftover after parsing attributes in process `syz.7.413'. [ 157.781150][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060424c00: rx timeout, send abort [ 157.789599][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060425c00: abort rx timeout. Force session deactivation [ 157.858943][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880617cd400: abort rx timeout. Force session deactivation [ 157.924336][ T144] team0 (unregistering): Port device team_slave_1 removed [ 157.966348][ T144] team0 (unregistering): Port device team_slave_0 removed [ 158.027408][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.090362][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.289460][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060424c00: abort rx timeout. Force session deactivation [ 158.363986][ T144] bond0 (unregistering): Released all slaves [ 158.432996][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 158.456576][ T6073] chnl_net:caif_netlink_parms(): no params data found [ 158.481911][ T6119] netlink: 'syz.2.409': attribute type 4 has an invalid length. [ 158.520652][ T6123] netlink: 'syz.2.409': attribute type 4 has an invalid length. [ 158.540022][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.410'. [ 158.619295][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 159.070934][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.417'. [ 159.117501][ T6152] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.127085][ T6152] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.135857][ T6152] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.144587][ T6152] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.280779][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.417'. [ 159.347038][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.354382][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.384050][ T6073] device bridge_slave_0 entered promiscuous mode [ 159.392092][ C0] net_ratelimit: 65 callbacks suppressed [ 159.437464][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.452014][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.518626][ T6073] device bridge_slave_1 entered promiscuous mode [ 159.705123][ T6175] CIFS: Attempting to mount \\127.0.0.1\share [ 159.724600][ T6178] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.852981][ T6179] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=5632 len=0) [ 159.877251][ T6179] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 159.961457][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.034841][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.124844][ T4230] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 160.405056][ T6073] team0: Port device team_slave_0 added [ 160.422372][ T4230] usb 7-1: Using ep0 maxpacket: 16 [ 160.458401][ T6073] team0: Port device team_slave_1 added [ 160.512209][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 160.537536][ T6175] CIFS: VFS: cifs_mount failed w/return code = -512 [ 160.582553][ T4230] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.610404][ T4230] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.733783][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.752686][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.844429][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.858698][ T4230] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.913076][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.913249][ T4230] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.941656][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.958602][ T4230] usb 7-1: Product: syz [ 161.023847][ T4230] usb 7-1: Manufacturer: syz [ 161.026654][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.028503][ T4230] usb 7-1: SerialNumber: syz [ 161.141489][ T4230] usb 7-1: config 0 descriptor?? [ 161.396956][ T6073] device hsr_slave_0 entered promiscuous mode [ 161.438971][ T6073] device hsr_slave_1 entered promiscuous mode [ 161.496234][ T6073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.523141][ T6073] Cannot create hsr debugfs directory [ 161.623779][ T6205] loop2: detected capacity change from 0 to 32768 [ 161.729641][ T6205] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.428 (6205) [ 161.838521][ T6205] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 161.883199][ T4230] usb 7-1: USB disconnect, device number 8 [ 161.903824][ T6205] BTRFS info (device loop2): using free space tree [ 161.910433][ T6205] BTRFS info (device loop2): has skinny extents [ 162.206801][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.423'. [ 162.257128][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.281907][ T6205] BTRFS info (device loop2): enabling ssd optimizations [ 162.313766][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.353096][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.425556][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.592332][ T4597] Bluetooth: hci5: command 0x0419 tx timeout [ 163.048792][ T6266] device syzkaller0 entered promiscuous mode [ 163.065552][ T6266] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 163.847799][ T6073] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 163.885814][ T6073] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 164.009779][ T6073] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 164.084601][ T6073] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 164.293899][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.329512][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.347766][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.387646][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.448899][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.489595][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.557644][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.564809][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.589794][ T6294] loop6: detected capacity change from 0 to 128 [ 164.633992][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.672113][ C0] net_ratelimit: 57 callbacks suppressed [ 164.694736][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.761119][ T6294] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 164.792613][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.846130][ T6294] hpfs: filesystem error: improperly stopped [ 164.862120][ T6294] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 164.874251][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.881396][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.928938][ T6294] hpfs: You really don't want any checks? You are crazy... [ 164.973222][ T6294] hpfs: hpfs_map_sector(): read error [ 164.980997][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.020010][ T6305] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 165.033207][ T6294] hpfs: code page support is disabled [ 165.074773][ T6294] hpfs: hpfs_map_4sectors(): unaligned read [ 165.088378][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.121644][ T6294] hpfs: hpfs_map_4sectors(): unaligned read [ 165.143496][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.182495][ T6294] hpfs: filesystem error: unable to find root dir [ 165.203637][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.257774][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.266450][ T6294] hpfs: hpfs_map_4sectors(): unaligned read [ 165.283709][ T6294] hpfs: hpfs_map_sector(): read error [ 165.320940][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.333409][ T6294] hpfs: hpfs_map_4sectors(): unaligned read [ 165.339376][ T6294] hpfs: hpfs_map_sector(): read error [ 165.409027][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.445647][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.488640][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.534594][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.571148][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.450'. [ 165.590095][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.642223][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.664826][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.873948][ T4262] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.892117][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 166.012474][ T13] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.044109][ T13] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.082374][ T13] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 166.115818][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 166.128410][ T13] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 166.142258][ T4262] usb 3-1: Using ep0 maxpacket: 8 [ 166.174123][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.218957][ T13] usb 2-1: config 0 descriptor?? [ 166.240106][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.257495][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.265623][ T4262] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 166.308064][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.442588][ T4262] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 166.457265][ T4262] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 166.500174][ T4262] usb 3-1: Product: syz [ 166.522129][ T4262] usb 3-1: Manufacturer: syz [ 166.537000][ T4262] usb 3-1: SerialNumber: syz [ 166.733393][ T13] hid (null): nested delimiters [ 166.751711][ T13] hid (null): nested delimiters [ 166.789000][ T13] hid (null): nested delimiters [ 166.812363][ T4262] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 166.822244][ T13] hid (null): invalid report_size -402254711 [ 166.841031][ T4262] usb 3-1: Handspring Visor / Palm OS: port 2, is for unknown use [ 166.874281][ T4262] usb 3-1: Handspring Visor / Palm OS: port 11, is for unknown use [ 166.902142][ T4262] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 166.988441][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.010960][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.032520][ T4262] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 167.070144][ T4262] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 167.091416][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.125780][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.152603][ T4262] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 167.171366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.187314][ T4262] usb 2-1: USB disconnect, device number 5 [ 167.206141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.265407][ T6073] device veth0_vlan entered promiscuous mode [ 167.318004][ T6318] udc-core: couldn't find an available UDC or it's busy [ 167.348880][ T6073] device veth1_vlan entered promiscuous mode [ 167.371708][ T6318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 167.431658][ T6367] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 167.485423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.503627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.530722][ T6073] device veth0_macvtap entered promiscuous mode [ 167.599294][ T6073] device veth1_macvtap entered promiscuous mode [ 167.650228][ T1108] usb 3-1: USB disconnect, device number 4 [ 167.673318][ T1108] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 167.745215][ T1108] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 167.800580][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.826092][ T1108] visor 3-1:1.0: device disconnected [ 167.846360][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.888563][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.918583][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.953446][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.995607][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.041450][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.067951][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.109260][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.122727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.139647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.173685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.194053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.220500][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.232880][ T13] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 168.254457][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.282125][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.322071][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.343237][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.382657][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.424730][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.460781][ T6376] loop6: detected capacity change from 0 to 32768 [ 168.467430][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.495375][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.545471][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.590640][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.649265][ T6073] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.659164][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.674107][ T6073] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.684008][ T6400] loop9: detected capacity change from 0 to 7 [ 168.720659][ T4179] Dev loop9: unable to read RDB block 7 [ 168.731492][ T6073] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.742594][ T13] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 168.750885][ T4179] loop9: unable to read partition table [ 168.756949][ T13] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 168.766497][ T4179] loop9: partition table beyond EOD, truncated [ 168.776330][ T13] usb 2-1: config 8 has no interface number 0 [ 168.777618][ T6073] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.809516][ T13] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 168.828671][ T6400] Dev loop9: unable to read RDB block 7 [ 168.829017][ T13] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 168.846239][ T6400] loop9: unable to read partition table [ 168.846397][ T6400] loop9: partition table beyond EOD, truncated [ 168.846431][ T6400] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.852965][ T13] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 169.122513][ T13] usb 2-1: string descriptor 0 read error: -22 [ 169.128829][ T13] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 169.146876][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.192567][ T6382] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.236702][ T13] metro_usb 2-1:8.109: Metrologic USB to Serial converter detected [ 169.275551][ T13] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 169.316283][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 169.364790][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.402478][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.429570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.529091][ T4817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.575213][ T4817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.617347][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.836065][ T6419] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 169.874762][ T6419] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 169.952611][ C1] net_ratelimit: 89 callbacks suppressed [ 170.105851][ T6430] loop6: detected capacity change from 0 to 512 [ 170.192806][ T6430] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 170.307958][ T6430] EXT4-fs (loop6): 1 truncate cleaned up [ 170.385553][ T6430] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 170.410073][ T6413] loop7: detected capacity change from 0 to 40427 [ 170.420043][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 170.447861][ T6413] F2FS-fs (loop7): Corrupted extension count (327717 + 1 > 64) [ 170.495755][ T6413] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 170.589980][ T6413] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1ffff [ 170.660789][ T6413] F2FS-fs (loop7): invalid crc value [ 170.699237][ T6430] EXT4-fs error (device loop6) in ext4_setattr:5645: Corrupt filesystem [ 170.703850][ T6413] F2FS-fs (loop7): Found nat_bits in checkpoint [ 170.735414][ T6430] EXT4-fs (loop6): Remounting filesystem read-only [ 170.918059][ T4370] usb 2-1: USB disconnect, device number 6 [ 170.956971][ T4370] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 170.992636][ T6413] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 171.014281][ T6458] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 171.027664][ T6413] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 171.066541][ T4370] metro_usb 2-1:8.109: device disconnected [ 171.099323][ T26] audit: type=1800 audit(1789728268.492:74): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.466" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 171.215123][ T6413] attempt to access beyond end of device [ 171.215123][ T6413] loop7: rw=34817, want=77952, limit=40427 [ 171.240871][ T26] audit: type=1800 audit(1789728268.522:75): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.466" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 171.301397][ T6413] attempt to access beyond end of device [ 171.301397][ T6413] loop7: rw=0, want=77840, limit=40427 [ 171.337271][ T6413] attempt to access beyond end of device [ 171.337271][ T6413] loop7: rw=0, want=77840, limit=40427 [ 171.427598][ T5516] attempt to access beyond end of device [ 171.427598][ T5516] loop7: rw=2049, want=45104, limit=40427 [ 171.879203][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 171.944768][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 171.969546][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 172.013025][ T144] bond0: (slave bond_slave_0): interface is now down [ 172.053268][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 172.073697][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 172.082193][ T144] bond0: (slave bond_slave_1): interface is now down [ 172.415977][ T9] Bluetooth: hci6: Frame reassembly failed (-84) [ 172.467879][ T6505] loop7: detected capacity change from 0 to 256 [ 172.479395][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 172.517964][ T6505] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 172.630843][ T26] audit: type=1800 audit(1789728270.022:76): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.491" name="file1" dev="loop7" ino=1048620 res=0 errno=0 [ 172.861873][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 173.044440][ T6526] "syz.1.498" (6526) uses obsolete ecb(arc4) skcipher [ 173.108675][ T6528] loop6: detected capacity change from 0 to 128 [ 173.132675][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 173.183409][ T4371] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 173.217493][ T6528] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=continue,noload,,errors=continue. Quota mode: none. [ 173.242600][ T6528] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.416315][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 173.435798][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 173.633264][ T4371] usb 9-1: unable to get BOS descriptor or descriptor too short [ 173.688149][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.6.507'. [ 173.748410][ T4371] usb 9-1: config 8 has an invalid interface number: 109 but max is 0 [ 173.768345][ T4371] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 173.794423][ T6547] netlink: 92 bytes leftover after parsing attributes in process `syz.6.507'. [ 173.802103][ T4371] usb 9-1: config 8 has no interface number 0 [ 173.811497][ T4371] usb 9-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 173.840676][ T4371] usb 9-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 173.874304][ T4371] usb 9-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 174.172665][ T4371] usb 9-1: string descriptor 0 read error: -22 [ 174.179014][ T4371] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 174.196826][ T4371] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.243424][ T6520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.264936][ T4371] metro_usb 9-1:8.109: Metrologic USB to Serial converter detected [ 174.279965][ T4371] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 174.400732][ T6551] loop6: detected capacity change from 0 to 32768 [ 174.432519][ T4597] Bluetooth: hci6: command 0x1003 tx timeout [ 174.438782][ T4189] Bluetooth: hci6: sending frame failed (-49) [ 174.471562][ T6551] XFS (loop6): Mounting V5 Filesystem [ 174.581256][ T6551] XFS (loop6): Ending clean mount [ 174.635919][ T6551] XFS (loop6): Quotacheck needed: Please wait. [ 174.745556][ T6551] XFS (loop6): Quotacheck: Done. [ 174.873285][ T4776] XFS (loop6): Unmounting Filesystem [ 175.072133][ C0] net_ratelimit: 71 callbacks suppressed [ 175.092131][ T1324] usb 9-1: USB disconnect, device number 2 [ 175.120289][ T1324] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 175.158890][ T1324] metro_usb 9-1:8.109: device disconnected [ 175.667942][ T6598] netlink: 'syz.7.524': attribute type 4 has an invalid length. [ 175.707223][ T6598] netlink: 17 bytes leftover after parsing attributes in process `syz.7.524'. [ 175.841643][ T6592] loop6: detected capacity change from 0 to 512 [ 175.921469][ T6592] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 175.942855][ T6592] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 175.977671][ T6592] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 176.011560][ T6592] EXT4-fs (loop6): DAX unsupported by block device. [ 176.115658][ T6610] netlink: 'syz.7.527': attribute type 5 has an invalid length. [ 176.461105][ T6623] device-mapper: dirty region log: invalid region size 1024 [ 176.469869][ T6623] device-mapper: table: 248:2: mirror: Error creating mirror dirty log [ 176.478504][ T6623] device-mapper: ioctl: error adding target to table [ 176.512152][ T4597] Bluetooth: hci6: command 0x1001 tx timeout [ 176.518924][ T4189] Bluetooth: hci6: sending frame failed (-49) [ 176.735890][ T6634] loop2: detected capacity change from 0 to 7 [ 176.768505][ T6634] loop2: [ 176.778435][ T6634] loop2: partition table partially beyond EOD, truncated [ 176.931791][ T6639] loop8: detected capacity change from 0 to 64 [ 176.943443][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 177.026574][ T6641] device-mapper: ioctl: unable to find target [ 177.155442][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 177.210564][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 177.571082][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.8.546'. [ 177.749587][ T6667] loop6: detected capacity change from 0 to 256 [ 177.765839][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 177.833494][ T6667] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 177.921995][ T26] audit: type=1800 audit(1789728275.312:77): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.548" name="file1" dev="loop6" ino=1048622 res=0 errno=0 [ 178.189920][ T6679] kvm: MWAIT instruction emulated as NOP! [ 178.522320][ T4597] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 178.542925][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 178.572333][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 178.583668][ T6692] loop6: detected capacity change from 0 to 128 [ 178.593133][ T13] Bluetooth: hci6: command 0x1009 tx timeout [ 178.607507][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 178.647984][ T6692] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 178.669261][ T6692] hpfs: filesystem error: improperly stopped [ 178.676879][ T6692] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 178.689734][ T6692] hpfs: You really don't want any checks? You are crazy... [ 178.698234][ T6692] hpfs: Code page index out of array [ 178.708302][ T6692] hpfs: code page support is disabled [ 178.716498][ T6692] hpfs: hpfs_map_4sectors(): unaligned read [ 178.727240][ T6692] hpfs: hpfs_map_4sectors(): unaligned read [ 178.734635][ T6692] hpfs: filesystem error: unable to find root dir [ 178.782170][ T4597] usb 2-1: Using ep0 maxpacket: 16 [ 178.845166][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 178.861328][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 178.903756][ T4597] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.920170][ T4597] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.951240][ T4597] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.979039][ T4597] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 178.999263][ T4597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.012362][ T4597] usb 2-1: config 0 descriptor?? [ 179.119326][ T6699] loop6: detected capacity change from 0 to 512 [ 179.140959][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 179.208394][ T6699] EXT4-fs (loop6): Test dummy encryption mode enabled [ 179.279402][ T6699] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,. Quota mode: writeback. [ 179.497370][ T4597] hid-multitouch 0003:0EEF:72C4.0006: No inputs registered, leaving [ 179.601664][ T4597] hid-multitouch 0003:0EEF:72C4.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 180.192118][ C0] net_ratelimit: 70 callbacks suppressed [ 180.262261][ T4597] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 180.415425][ T4373] usb 2-1: USB disconnect, device number 7 [ 180.502222][ T4597] usb 8-1: Using ep0 maxpacket: 32 [ 180.528476][ T144] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.598702][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.629399][ T144] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.713342][ T4597] usb 8-1: unable to get BOS descriptor or descriptor too short [ 180.729840][ T144] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.782639][ T4597] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 180.810784][ T4597] usb 8-1: can't read configurations, error -71 [ 180.856166][ T144] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.317970][ T6748] loop5: detected capacity change from 0 to 7 [ 181.360307][ T6748] Dev loop5: unable to read RDB block 7 [ 181.372335][ T6748] loop5: AHDI p1 p2 p3 [ 181.376553][ T6748] loop5: partition table partially beyond EOD, truncated [ 181.493469][ T6748] loop5: p1 start 1818582900 is beyond EOD, truncated [ 181.518698][ T6748] loop5: p3 start 335544320 is beyond EOD, truncated [ 181.700713][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.573'. [ 182.280619][ T6784] loop7: detected capacity change from 0 to 128 [ 182.306810][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 182.419125][ T6784] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.432468][ T6784] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.653911][ T144] device hsr_slave_0 left promiscuous mode [ 182.690605][ T144] device hsr_slave_1 left promiscuous mode [ 183.040522][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.051312][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.115607][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.158212][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.196743][ T144] device bridge_slave_1 left promiscuous mode [ 183.220264][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.269409][ T144] device bridge_slave_0 left promiscuous mode [ 183.293377][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 183.310100][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.351617][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 183.429335][ T144] device veth1_macvtap left promiscuous mode [ 183.459894][ T144] device veth0_macvtap left promiscuous mode [ 183.481040][ T144] device veth1_vlan left promiscuous mode [ 183.491324][ T144] device veth0_vlan left promiscuous mode [ 183.696318][ T6806] loop6: detected capacity change from 0 to 32768 [ 183.712868][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 183.758543][ T6806] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.585 (6806) [ 183.847267][ T6806] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 183.874020][ T6806] BTRFS info (device loop6): using free space tree [ 183.880799][ T6806] BTRFS info (device loop6): has skinny extents [ 184.108682][ T6806] BTRFS info (device loop6): enabling ssd optimizations [ 184.130583][ T6806] BTRFS info (device loop6): checking UUID tree [ 184.263632][ T26] audit: type=1800 audit(1789728281.662:78): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.585" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 184.420228][ T144] team0 (unregistering): Port device team_slave_1 removed [ 184.463243][ T144] team0 (unregistering): Port device team_slave_0 removed [ 184.528762][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.586171][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.938736][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 184.965886][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 185.312630][ T148] net_ratelimit: 60 callbacks suppressed [ 185.406484][ T144] bond0 (unregistering): Released all slaves [ 185.558534][ T6810] tipc: Enabling of bearer rejected, already enabled [ 186.112140][ T4597] Bluetooth: hci4: command 0x0406 tx timeout [ 186.122426][ T4370] Bluetooth: hci0: command 0x0406 tx timeout [ 187.800015][ T6918] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.318120][ T6990] loop7: detected capacity change from 0 to 256 [ 189.334093][ T6991] input: syz1 as /devices/virtual/input/input9 [ 189.351812][ T6986] netlink: 'syz.1.612': attribute type 3 has an invalid length. [ 189.374822][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 189.419127][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 189.667115][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 189.708974][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 189.932110][ T4370] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 190.332393][ T4370] usb 7-1: config 0 has no interfaces? [ 190.338113][ T4370] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.367941][ T4370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.388765][ T4370] usb 7-1: config 0 descriptor?? [ 190.432301][ T4284] net_ratelimit: 54 callbacks suppressed [ 190.661931][ T4370] usb 7-1: USB disconnect, device number 9 [ 191.302193][ T23] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 191.712950][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.730690][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.757877][ T23] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 191.779916][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.812490][ T23] usb 8-1: config 0 descriptor?? [ 191.844334][ T7062] loop2: detected capacity change from 0 to 32768 [ 191.854368][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 191.944338][ T7062] JBD2: Ignoring recovery information on journal [ 192.001682][ T7062] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 192.088077][ T7062] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 192.104312][ T7062] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 192.114567][ T7062] OCFS2: File system is now read-only. [ 192.120196][ T7062] (syz.2.623,7062,1):ocfs2_trim_mainbm:7603 ERROR: status = -30 [ 192.230673][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 192.304055][ T23] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 192.311066][ T23] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 192.324771][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 192.363268][ T23] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 192.370275][ T23] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 192.375163][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 192.412099][ T23] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 192.419161][ T23] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 192.442324][ T23] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 192.470739][ T23] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 192.607267][ T23] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 192.701715][ T7109] loop2: detected capacity change from 0 to 8 [ 192.740646][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 193.223636][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 193.248000][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 193.266987][ T23] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 193.289189][ T23] usb 8-1: USB disconnect, device number 5 [ 193.325906][ T7132] udevd[7132]: open /dev/null failed: No such file or directory [ 194.274830][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.533468][ T7160] loop7: detected capacity change from 0 to 164 [ 194.544235][ T7153] Disabled LAPIC found during irq injection [ 194.595181][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 194.707569][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 194.750076][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 195.148349][ T7165] loop6: detected capacity change from 0 to 32768 [ 195.163845][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 195.205060][ T7165] JBD2: Ignoring recovery information on journal [ 195.239657][ T7165] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 195.289149][ T7165] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 195.304526][ T7165] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 195.314441][ T7165] OCFS2: File system is now read-only. [ 195.319945][ T7165] (syz.6.639,7165,0):ocfs2_trim_mainbm:7603 ERROR: status = -30 [ 195.348274][ T4776] ocfs2: Unmounting device (7,6) on (node local) [ 195.407762][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 195.426943][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 195.552579][ T148] net_ratelimit: 62 callbacks suppressed [ 196.256888][ T7180] loop7: detected capacity change from 0 to 1024 [ 196.275478][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 196.783024][ T7192] loop6: detected capacity change from 0 to 512 [ 196.812589][ T5516] hfsplus: node 4:3 still has 1 user(s)! [ 196.882959][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 197.008391][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 197.054175][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 197.087657][ T7192] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.172752][ T7192] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.534951][ T7209] loop6: detected capacity change from 0 to 256 [ 198.584929][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.641926][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.707822][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.746481][ T7211] device bridge_slave_0 left promiscuous mode [ 198.772406][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.865537][ T7211] device bridge_slave_1 left promiscuous mode [ 198.896890][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.915183][ T7224] overlayfs: failed to get inode (-116) [ 198.927675][ T7224] overlayfs: failed to get inode (-116) [ 198.957907][ T7211] bond0: (slave bond_slave_0): Releasing backup interface [ 199.029837][ T7211] bond0: (slave bond_slave_1): Releasing backup interface [ 199.125170][ T7211] team0: Port device team_slave_0 removed [ 199.223615][ T7211] team0: Port device team_slave_1 removed [ 199.229866][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.242991][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.263819][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.271238][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.326148][ T7215] team0: Mode changed to "loadbalance" [ 199.343451][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'. [ 199.436609][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.7.656'. [ 199.517068][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 200.712578][ T7243] loop6: detected capacity change from 0 to 512 [ 200.723809][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 200.855567][ T7243] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 200.892231][ T7243] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.966094][ T26] audit: type=1800 audit(1789728298.362:79): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.657" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 200.992119][ C0] net_ratelimit: 51 callbacks suppressed [ 201.126670][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 201.144446][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 202.879357][ T7289] netlink: 'syz.1.665': attribute type 7 has an invalid length. [ 202.962127][ T7289] netlink: 148 bytes leftover after parsing attributes in process `syz.1.665'. [ 203.019470][ T7294] netlink: 27 bytes leftover after parsing attributes in process `syz.6.668'. [ 203.033740][ T7296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 203.325177][ T7303] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 203.356162][ T7303] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 206.512124][ C1] net_ratelimit: 57 callbacks suppressed [ 207.650498][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 207.698258][ T7464] loop7: detected capacity change from 0 to 1024 [ 207.754344][ T7469] udevd[7469]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 207.839040][ T7464] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.257589][ T7466] udevd[7466]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 208.275707][ T7466] udevd[7466]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 210.083614][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.693'. [ 210.271543][ T7501] device syzkaller1 entered promiscuous mode [ 210.402285][ T4373] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.652228][ T4373] usb 3-1: Using ep0 maxpacket: 32 [ 210.772328][ T4373] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 210.780526][ T4373] usb 3-1: config 0 has no interface number 0 [ 210.786690][ T4373] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 210.952387][ T4373] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 210.961427][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.972901][ T4373] usb 3-1: Product: syz [ 210.977080][ T4373] usb 3-1: Manufacturer: syz [ 210.981653][ T4373] usb 3-1: SerialNumber: syz [ 210.991376][ T4373] usb 3-1: config 0 descriptor?? [ 211.012494][ T7496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.244040][ T7496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.712111][ C1] net_ratelimit: 69 callbacks suppressed [ 212.575123][ T4373] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 212.613011][ T4373] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 212.691039][ T4373] asix: probe of 3-1:0.188 failed with error -71 [ 212.691133][ T7518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 212.749733][ T4373] usb 3-1: USB disconnect, device number 5 [ 212.779524][ T7522] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 212.878516][ T7518] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 212.909626][ T7518] overlayfs: d_ino too big (., ino=4611686018427387912, xinobits=3) [ 212.939727][ T7518] overlayfs: d_ino too big (snd_seq, ino=4611686018427400255, xinobits=3) [ 212.954289][ T7518] overlayfs: d_ino too big (netdevsim, ino=4611686018427432073, xinobits=3) [ 212.976875][ T7518] overlayfs: d_ino too big (serio, ino=4611686018427400146, xinobits=3) [ 212.991241][ T7518] overlayfs: d_ino too big (ulpi, ino=4611686018427400099, xinobits=3) [ 213.006139][ T7518] overlayfs: d_ino too big (coreboot, ino=4611686018427455586, xinobits=3) [ 213.017367][ T7522] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 213.031286][ T7522] overlayfs: d_ino too big (coreboot, ino=4611686018427455586, xinobits=3) [ 215.201119][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.7.709'. [ 215.212277][ T1324] usb 7-1: new full-speed USB device number 10 using dummy_hcd SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=569 state=3 status=67 (errno 9: Bad file descriptor) [ 215.302172][ T4370] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.522197][ T4373] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.572261][ T4370] usb 2-1: Using ep0 maxpacket: 32 [ 216.192629][ T1324] usb 7-1: unable to read config index 0 descriptor/all [ 216.199654][ T1324] usb 7-1: can't read configurations, error -71 [ 216.515025][ T7540] device syz_tun left promiscuous mode [ 216.642481][ T4370] usb 2-1: device descriptor read/all, error -71 [ 216.709423][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.778424][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.828110][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.890664][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.002078][ C1] net_ratelimit: 50 callbacks suppressed [ 217.049368][ T144] tipc: Disabling bearer [ 217.068818][ T144] tipc: Left network mode [ 217.901728][ T144] device hsr_slave_0 left promiscuous mode [ 217.921318][ T144] device hsr_slave_1 left promiscuous mode [ 217.938353][ T144] device veth1_macvtap left promiscuous mode [ 217.944689][ T144] device veth0_macvtap left promiscuous mode [ 217.950900][ T144] device veth0_vlan left promiscuous mode [ 218.583287][ T144] bond0 (unregistering): Released all slaves [ 220.553726][ T144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.589276][ T144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.659838][ T144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.733665][ T144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.707136][ T144] device hsr_slave_0 left promiscuous mode [ 221.716379][ T144] device hsr_slave_1 left promiscuous mode [ 221.724192][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.731601][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.741180][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.749794][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.758313][ T144] device bridge_slave_1 left promiscuous mode [ 221.765831][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.775769][ T144] device bridge_slave_0 left promiscuous mode [ 221.784385][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.831606][ T144] device veth1_macvtap left promiscuous mode [ 221.840702][ T144] device veth0_macvtap left promiscuous mode [ 221.847179][ T144] device veth1_vlan left promiscuous mode [ 221.853163][ T144] device veth0_vlan left promiscuous mode [ 222.202063][ C1] net_ratelimit: 63 callbacks suppressed [ 222.228365][ T144] team0 (unregistering): Port device team_slave_1 removed [ 222.256067][ T144] team0 (unregistering): Port device team_slave_0 removed [ 222.286555][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.314352][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.495952][ T144] bond0 (unregistering): Released all slaves