last executing test programs: 9.059869628s ago: executing program 1: r0 = socket(0x2b, 0x1, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x20040001) write$binfmt_misc(r2, &(0x7f0000000280)=ANY=[], 0xff36) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 8.719535133s ago: executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) close(r1) 8.448123387s ago: executing program 1: syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000340), 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000002700)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 8.108800011s ago: executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0xff, 0x0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) rmdir(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000008060300001f0000000800000000000005000100060000004643ba82c48b9d3640d3eb2d736ff403686e175da197b8c7ab209c741b325b3c4afcd3f96676961e937bc901f0833799fd02545a9d612ab91d087940b6e8"], 0x1c}}, 0x0) 6.910719905s ago: executing program 3: syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c713a5774613f726573697a652c7533727130303030303030303000303030303030303030342c736d61636b66736861743d6574002678f9edfbac5d6325f9002c00c9cd79b9b92293ea"], 0xfe, 0x61a0, &(0x7f000000a180)="$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") mknod(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/149, 0x95) 6.771407167s ago: executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) close(r1) 6.429869032s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0xac, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.041893005s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}}, 0x0) 5.930908523s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x0, 0x4, 0x0, 0xc}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xd2, &(0x7f0000000040)=""/210}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="3dfad9290e569fca863fdcceebbefce553a81efc746a9f74eb9c72036432d4f7d60753a9705a82d6cddf867e3f0142de1fdbc602ed127ad1e9bf7403d4cd7c9572841d8519802a19e6801746b19e61d635", @ANYBLOB="0615709497b84a5a7a6746b5c8274f0efd3922b9fd7146fe6bad2bfa629bc46ccbba5242777e781f65d44a68a15fb87c86efff26d834f838f6939ef5ca8f2ce12cf12b8b67be86792910cb8fd7ecb94a969ba8d311a687ab898acad3c552c985247fd50a3e1862afc384d1986b1ca56374fbff0b06df9c87c9d8630e723205ed6fd39dc060b91db5ca6ceea407631e0ba158425f71a62e3201c0ec79e564671fc6be0309097a4d53e8b7fad94bf3892d91db4759724b5b81c232b51b0485d29a5d1fb629d4d7637df3a4528b12ec35af1050a164cc4dedee9b3792553d6ba2fa65edef"], 0x2, 0x678, &(0x7f0000001740)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) 5.491354704s ago: executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x3, 0x0, 0x0}) 5.193795552s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 5.114869095s ago: executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000002ac0)={{0x12, 0x1, 0x0, 0xcb, 0x58, 0x4f, 0x20, 0xeb1a, 0x2870, 0xcb88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x52, 0x21, 0x1b, 0x0, [], [{{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) 4.365967875s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x40}}, 0x0) 3.536533439s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ed0000008500000015000000850000007d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.510938323s ago: executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}}], 0x1, 0x0) 3.482570138s ago: executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) 3.041174389s ago: executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x20}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000000080), 0x4000000000001f0, 0x0) 2.938908726s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}}, 0x0) 2.879427115s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000017f"], 0x14) 2.866728377s ago: executing program 0: socket$inet(0x2, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x100}) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@multicast2}]}]}}}}}}}, 0x0) 2.816018385s ago: executing program 4: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) 2.406448961s ago: executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000000ac0)={0x8, {"8ea19feb250708049338b2efdeac0cdccd4a5dd0470eb6ae725d0b4eea387aff1cf91f6db86e97539d6b8613a2af70a83f10111f26d24244863ad163e163390e574b1117d3a7a0a6b60dacbe0657a157b26d9244f581652755468035c68e8c06e0c247c534d75a8947453be6b814f4187d79a1b45830367a0c372aadd71425a6604ad1cdc729ba2b941c799a78e83075b7bdba4ea3ea5b66de58f29ac6e305e59b5e9bb37ec9cfa8ddf707f9b25e87a035f82de0f60b634ff4679a8dc2bc9f70a9ceb2134679336094f4e20c54898f10b713e1ff788c8a618e65d68362fcc3316a53a520f07f3d80186fddeef5c61ba19e7ac92e7f15d7807652b9ab9e2604248886ef955f913aaaf1f0a2bbc1e42c00d075f0a194d5ef5c747f17de2fafa52c24dcb3845426021a5f1abd5344666d4fe1ff812fa0fd5b1c47e96badabdfc15ef20718eefd2c39e171b5118dcf6d83518f68f0842a0fe6ac47ebd90d68ebe68c93e7becafd07e1a4812b138fda2c943f79e3e441185c21875d22f8d50274d457164aee5b3c9dce3f7e772ca352d367277e0e396f2679ab773041461f58ac24d622b1bc7b5204f9357490ff92ed490ceef3e9cc0083b3dcbedf0af9d74b18513b1fb86faa4e3975333cf088fd755b6965115d61ffc946dfb6907177616f70b4f7fa65dd64ca3d8cd3a4923d85294b939c29176688f2cb449035b883e807901951750ab7532da470baf76e9e39b0e5e99aa7ef37ac996e1bbb7f0f35a84b1154bbf2024d9e3812781fc9124dddd1c0f52f5120ea72ddb9df771536302747d14e2c66df15dab15c6347805328760ca31c4f31dd51c012989d052079a40685280911f22f53168c321379e4fadbb8ba74c8b4d6f1b706d8b3b553018d7afec7552cb13998519cb0afb0bff3e4359b84721d13672869152e7ee154794fdb0e068be1be738f250c17c61f6285dd004d77f903d744b4f5b1fcb72b4e7cf4c6c5217a50ecb03baf01d7de3c23031bf1b2ec3f31ceb5c06cc7da85b3826b679e60129a01c9afe22b2828847274d30a0cef499fe56bb5b4b3804f25a46b2b972c03682f312ffac5cae452c27421883cb236468f304f4aa3eaad5f90f4652292fc60f5505693695a027d26cdceafb0621c8932da220bcfd301c52ac37306859f95afda94f25f82f740daf11b39f8e7f32425ee6373eca72f0e95ef88dcd99a3affc69d10c8a5d62173b1514d428ff6c23565eab129d986e3d0e8eb7c8e88f9fbd80a6860a0ec908a760c2cdbce156ebfe0bf6434a50db1bac7f2990bccf8a85e92e17a45d10f1a80176741685f520a8bddaa7b89dc71266414501bfe72674e5fea68385d8697be037ef2b8de5bad7a8f84a1f2b6bac9d0957dc85ef9659a45fbf0f327c0974719a41ca965a9c431fa980af1337ac280d8e95251a1d4fca3b6192a649c6e76081d71300585485b18fc2b291a4d751e2519c7c64e982e80532c8214fd4e97cb5007b94e39e7d4c33155ab8f71bc5fb568f1ca59ccc406835f2127c38bfae6d21c70ac38cc02b7961798c224bffb6e311c77e87f33a536ab6eb16adb2cb508b4e9f75e823b396043d3483873afac86ab6f950dcd0d1f6d09c29f2b6b80763e6d1cdcd38108fa649c589a46d9aacb5d8ff20c7afc54c50b53e34b9ee62891b3610bedc695784efc534d4cd1d59e85979503ed6c402affdf6d80ccaf9162d3849acfa07a7aa0822f7757622917a5dd00115c89760957a66d315d3af58e4bf61f67f36122312d780fb8587e7b97756644d4ff7082b94a2746fe3e80d5a6107d15383510fef56917c1378180b766a15e9f45babc12222cbdb097d70dc2f14b949d62cf60c8c89d2cd551836f1e35003d7f668011738129be9a562e98f40ba20cbe28654a1cf38250377a566a2d170d2ae05287d1242d88f1a723c2afc5c68dee2c9d2be241cdd1f51a5734ab63a021bbe657fe8de10ce2cb2ec5656544996900031a14c9978af4dbee1cb924bbb59d5b984a3cf0dd99accb6d6a21f730f5b33fbebc12e94d54ed6ffe043ad770c3d58b04a0083afb5b85012bd6ed874b9872af4d3d6b24611d9278426f644302147c14fd5e21b37162661c11b771533b347f057eeda1e6ff82353274829f1c1ab5f2809b2d18ae2914cb39440861b7105c11ba3854ef7f88eafbb2879908c95e80219a5a875f99244e10678a2985e06b1f9ffee53704bd3b05db0a195d12679163e4014f663264dd912697926f977f60125cc1d4c77f252d1ce6d283cb50c6a2e63f1ccf3e014e9c6d94574cda31709492b37ba0e86ff8012ab2d14dbf1fedd8e013020c51b6f2a8906600756d84b7c060eeb987365eb8db1af3b68f5f1b10f5b655c8b56b0bdf23644ffa5e4d3ee0e746af842db5bbe829aa9c64628503e41cf0f12170da33fa6880fa241b6db5a4b39c79dd40ee9767bd3695e545ff1e26fbfb44f95bbcd278f26f3cff81040e90ae828bbb81193af4347a5ccab86952b72ce500dc9470fa1ce35447418658ce3d034346a6e2a61adf43a262c88d9154328cafe1a94f3b425bc0b2eadb200766b75bc154a6352928da14c4d140dfe18baef710fda01041c07bc692ac483c769808f5dd59036843c854960b093650eaee1316d578a196d33802de78442dd1c24c266db3635455044eff440685568ece5be9d635f153c15ba5821b2ee7636925cce1de2375b064dcb27fbb46bd3c51f9dda2ecc19d6e200847d23904d88d0dbef8101c98c313f01bb527d2a6b48675b5b76cf7f5718fd6b486df16b19b43872434c9aaa9de1ebf9bbd75c83a76147b4f191844d4585f353f7b78739f02c4abab6563c064fb47146f866a03e64a2b1c3a28c9454cde2305be09188ee146ca34da6183ade024be99a6594770d1c34645c12f3e01d8ce4b46ebe1153bc8a48e9f7b19a0cafe5f2fe6bb60a378532a2c4a854a68ccd8d5510556dc993d7ae0e2f75035c6e376157b8eb228c0fdfcc520cbdc92b3bde85ef43081f1f16962454d3eb1a1fe6f2890b1f58653c0edd92bcbc6da8caaa68f4dbddcb49e734e546e0f7f13aec6087633d68ac619e088f63900c17b8c5e44c225c41797408f10e2dd4fabe9793db4488372369f2d75ee1fd75b595e859af65bb49252f16a529566fd0161a6254cfeab70127846ad8809c882e903a6110da9beaceb6f758e65062e3aec82ff06d979338ee09593f7579366569224c7bc5a1a152cb1b31f4faace53e0a9795a1b1010f4d10bd8c1a632c22a45a84f38be7d739e019599cda1c1c86bf5dfb4fb65e2da7ab60f39de529e4cd1aee98dbda1149b0ff8baebb9335313b552ab315915f9eb5793576b3f4b11149a44994c490861ace353aaeb88ce0c14453e4c78991a96f6048f409a4b603594cb2ad2df93e32ead51d2e0ed37e11473d7b44cd32c92e76bfa3583e7048eb2371f944ef10bc2a6d6061744184b41e073343f75775984823b9ec68e07e0ecd69b19182d3a9afc8f132de919466ea20bee334da81ea584f24e59af0996a1f1ae591abc8ccfbc8ffc81f0fe326e1dc9c9b6f02ceb0ecf87f0311e6e10c722f549abc36b8be55fa2f39a17a2aee8dd65315c6bf464501cd7d8f3dd291dcd6947215082d9565f31c613058284a7c05fa0bde45e6dcccc8401692752bdc030564269fb3f80712fcd14aab733d9eb4eb557c63e4e965a95f221627897560c2a7223373a5ee16fe659235a45c97b99157558d9f35a647973adccb641d0a2ec5044d03fddd88c840da8d71b6ec550d62b7b619cfe385aca4df833ae2d0d80b99b4edb5a679d04ffd11d955ebf404c3bd9c49ecc2d18028c9f26d1a61dec81a5f6410b3fdc39540b51090c416b9a92f70ff8d25539e06756dedc986cb8a3dedf9f9a2f8fe519ff1382aa4f2b819c178cbe35143f03c82a3ca07e829873b5c789f887fe51c0eff1ed679b2eccb356e386a808b1062b881316755f9d573b1d8ad84e1553545133c74dc2d6b7ce33a7707c0f38bbdc884e843bfd857dc5be7694fdee6ee7aa8667477072de91aa27d33d2c36bfbb4998362b027136a68ede45136f7f460cea2c95e1ba21514d3b78a5490a2c791cf28a1b085aca016a334f16d5545abca81a033803b4b2322b405543653bb9f20699abd2b7407f738ab29625d48ab47e1aae6dad21e787ef0dcfbd25c76c72cfa1ef10ba493558e61780b65398b87a24d5b36672b14ed6a8887d8970966c2dc54d20841a86cda46ba00346fada2d43702e662164b247eac20a46be8a83cc1681aea2679a65d2401491bb26b71ffe904de74c5f98161b476224599e8af9dfd43a677286ff646847eb1d6a6a7ae4ea6694df4c2044b64eb172eeb0842537d047f02141889edce6f347c80528e3b1071d00e715f744da53f78c82feb5bda9021ab7379e9ab2525640facfc3c996e3054e2c08670d03c11162132941a581f4fc4de578685621f931d6f9294019a1c21673739a6d746471688b90146fb6d4be95b3fb798c797104d038b39c529212049691fc5c02d82b43e70d931d41e66f11233f0b4459fd0307b6daa95186671432f2df9606db4df129308f7b415d4a31edad2dd3fec80dcaec25fca25eca4e2b5ce7b1fd042bf8109f93757c870ec896d006a9a40c2c9e7b2e003f1d7038533e431e1af2dc15406b9a37f0d67351fc72f2f8c22f1915656125b64218084145202ff021e07944acdb0ab672532d8804fd71f4e339ea182d879b942b49dea7536304d76a7680075a87b25e9043734aa23f6f6f3c3240ebdd22817ad17a25f5b47d47a28a1909f88d8ca0baf16ec6831aac1d8c0d003234f0201a3770006a655f305a4211a03ac99c1e6fbc078dc75de8891ed24f2f5023bbf99f6eed0856d3e64bd1ad049ba5fff4c0e177afca5ec325cf3e3a554d45f438032eb41db421fc87f9df906a4cf671eedebe290828e4c92bb01e5e6cfc8890f6564bf331f9af91731f85486ad6ed0101117f9e5727e3b30eb46716d9b896affdb0501e06002f1d349d218484c4527ad9c062b6ef4ded2e5e1babb6eebbe1eccf8aa0f31e075629a5942a6d1d98e27f8717affb5ecb9692b1dc8d5db56f00fd5f32a8af2212567382df2bb564119f0b7cdfcf8557368f9c31d72f1b581818e8a2c059f27322fe9902c13e00bc247f9f83f33dc8ddf6d4c480ad5c1bdcf18b8ff7f2f5e7a50ed931fdfe978420ed4d5279a66fcba95fb0ee8a9700a13333e1c26878046204d093ef4099903cd236444867964c97fb6f060c908f4eec643c3940b2461622717e8d275a09d58d665eb552f8fa1491c846f6c77d7cf52d75e2b54d92e80f94223168fe6beec791d20669fdf568bed6844669666532b53943e362677306e1b752f37975c5124af91235bb6fdb41975eb22441158d45c06090c81d4f7ee0773d5f41d35442900d8a4cf4972fdef9ba2f6f5f64a15b934258401c61f04a733cac9ebc96e5be0ec33f5bba9af80efec51e2ca9211f0a53e5d459713e3e86aae00fa3c76ee3db75f6490d342e58533cf749c8e773fb0cf5ba0130d539e400a9a980e1e6371ae5af9e7efc5535386a02a9683ad397dd2e6ff37abd0b057ada143b9a15870604528e6e6b18b43b3c491ad794a6771b352faf09cd6f1321216ae8111e112165ba89d731d8056d34c7cd520108913801a7d47795e38e9993a5731332859132ab56f8d7bf07cdafab526b02a41722ea8e518789c016c0232a25f694d6abdfda194fb137dfbad5e9e35727547e9082b0b79e45044ca047582af47209f6b512d420c90f6dd52aad8739", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@noload}, {@discard}, {@nogrpid}, {@noblock_validity}]}, 0x0, 0x50c, &(0x7f0000000a40)="$eJzs3c9rHG0dAPDvbLJ5myZ9k1c96Au+b7WVtGh3k4a2wUOtIHoqqPVeY7IJIZtsyW7aJhSb4h8giKjgSS9eBP8AQQpePIpQ0LOiooi2elDQjuzubJomu0nedJtNk88HpvP82Jnv82w7s/PMTGcCOLFuZNPzNE0vRsRIVp7Lpk/WMxsRZyPi2dMHM/UpiTS99fckkqysta604a0Yai7SWMFXvxTxjWRn3Ora+uJ0uVxayfLF2tKdYnVt/dLC0vR8ab60PDk5cXXq2tSVqfFX6d7cUJY4ExHXv/Dn7337J1+8/ovP3PvD7b9e+GbSbPPD2NaPD6h/t8pm1/NxaktZ/btcOWCwo6h/a2Jwf8s8yv6JAABwuOrHpR/KjvMvxkj07X44CwAAALyB0s8Nx3+T1rW7HQY6lAMAAABvkFxEDEeSK2T3+w5HLlcoROMe3o/E6Vy5Uq19eq6yujxbr4sYjXxubqFcGs/uFR6NfFLPTzTSL/KXt+UnI+KdiPjuyGAjX5iplGd7ffIDAAAAToihbeP/f400x/8AAADAMTPa6wYAAAAAr53xPwAAABx/xv8AAABwrH355s36lLbefz17d211sXL30mypulhYWp0pzFRW7hTmK5X5xjP7lnZd2earA5dX7xdrpWqtWF1bv71UWV2u3V546RXYAAAAwCF65/3Hv0siYuOzg42pbmBL/X+y9wT0rIHAa7N5yi6SbD6w80O/f7s5/9MhNQo4FH29bgDQM/29bgDQM/leNwDouWSP+o437/w6m3+iu+0BAAC6b+xjna//53ZdcmP3auDIsxHDyeX6P5xcjev/bW75a8vBAhwreUcAcOK98vX/Pfk/RAAA0GvDjSnJFbLTe8ORyxUKEWcarwXIJ3ML5dJ4RLwdEb8dyb9Vz080lkz2HDMAAAAAAAAAAAAAAAAAAAAAAAAAAE1pmkQKAAAAHGsRub8kv2w+y39s5Pzw9vMDA8m/RyJ7Rei9H976/v3pWm1lol7+j83y2g+y8su9OIMBAAAAbNcap7fG8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTc+ePphpTYcZ92+fj4jRdvH741RjfiryEXH6n0n0b1kuiYi+LsTfeBQRH20XP6k3azNku/iDrz9+jGbfQrv4Q12IDyfZ4/r+50a77S8XZxvz9ttff8RL+YPqvP+Lzf1fX4ft/8w+Y7z75GfFjvEfRbzb337/04qfdIh/bp/xv/619fVOdemPIsba/v4kL8Uq1pbuFKtr65cWlqbnS/Ol5cnJiatT16auTI0X5xbKpezPtjG+8/GfP9+t/6c7xB/do//n99n//z25//TDzWS+XfwL59rE/9WPs0/sjJ/Lfvs+laXr9WOt9EYzvdV7P/3Ne7v1f7ZD//f6+7+wz/5f/Mq3/rjPjwIAh6C6tr44XS6XVo5toj5KPwLNkDiCiYc7q96PA68wTdO0vk29QsOSg0fvTiLZLOn1ngkAAOi2F0f/vW4JAAAAAAAAAAAAAAAAAAAAnFyH8Vyx7TE3NlNJNx6hDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQFf8PAAD//7Qk6VY=") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f2ff000000000000ed100000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000300)) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vcsu(0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, 0x0) connect$unix(r3, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x18a}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80085504, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="00000400402853d008000d00dcffff"], 0x28}}, 0x0) dup(0xffffffffffffffff) 1.212121704s ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [], 0x2c}) 1.05181524s ago: executing program 2: syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c713a5774613f726573697a652c7533727130303030303030303000303030303030303030342c736d61636b66736861743d6574002678f9edfbac5d6325f9002c00c9cd79b9b92293ea"], 0xfe, 0x61a0, &(0x7f000000a180)="$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") mknod(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/149, 0x95) 1.036991052s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x0, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"011920059dae1829c3cb6235d0994341baf3c3201d20a1a818cb23703a12fcf3", r1, 0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r2}], 0x1, 0x0) 749.019229ms ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 422.774601ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x13, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}}}, 0x34}}, 0x0) 316.900158ms ago: executing program 0: r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 260.675048ms ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000009000095000000000000006100fcff00000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x103, &(0x7f0000000140)=""/259}, 0x23) 0s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ed0000008500000015000000850000007d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 462.386100][T10439] device veth0_macvtap entered promiscuous mode [ 462.458363][T10939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.470298][ T3697] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 462.492662][ T3697] usb 2-1: config 0 has no interface number 0 [ 462.512744][ T3697] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.552979][ T3697] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 462.594453][T10439] device veth1_macvtap entered promiscuous mode [ 462.652331][T10939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.703442][ T3697] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 462.712724][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 462.727102][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.762708][ T3697] usb 2-1: Product: syz [ 462.767027][ T3697] usb 2-1: SerialNumber: syz [ 462.778817][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.791694][ T3697] usb 2-1: config 0 descriptor?? [ 462.819636][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.850616][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.854707][ T3697] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 462.891626][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.913023][ T3697] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 462.927387][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.952063][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.993025][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.028296][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.059213][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.084602][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.132453][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.156317][ T3697] usb 2-1: USB disconnect, device number 14 [ 463.173033][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.180034][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 463.180387][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.251223][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.263121][ T3574] Bluetooth: hci6: command tx timeout [ 463.284665][T10439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.297915][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 463.308454][ T3697] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 463.334301][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 463.342409][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.403805][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.436524][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.471902][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.502260][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.530283][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.560219][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.594315][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.622906][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.652899][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.675309][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.702957][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.762937][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.793208][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.825437][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.856291][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.899693][T10439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.987874][T10939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.039064][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 464.059178][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 464.081611][T10439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.100746][T10439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.128697][T10439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.150748][T10439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.242755][T10939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.343785][ T3568] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 464.359116][ T3568] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 464.383896][ T3568] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 464.412754][ T3568] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 464.423198][ T3568] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 464.435256][ T3568] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 464.675445][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.704408][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.858938][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.968403][ T3731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.995461][ T3731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.060120][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 465.150415][T10939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 465.202964][T10939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.353148][ T3568] Bluetooth: hci6: command tx timeout [ 465.367380][T10939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.458673][T10939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.765995][T11365] chnl_net:caif_netlink_parms(): no params data found [ 465.802390][T10939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.049115][T10939] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.085400][ T27] audit: type=1800 audit(1718598092.525:931): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1949 res=0 errno=0 [ 466.086341][T11545] 9pnet_fd: Insufficient options for proto=fd [ 466.117172][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.134227][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.206739][T11552] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.217377][T11551] loop1: detected capacity change from 0 to 1024 [ 466.234605][T11552] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.243539][T11551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.263363][ T9294] device hsr_slave_0 left promiscuous mode [ 466.273031][ T9294] device hsr_slave_1 left promiscuous mode [ 466.279536][T11551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.305102][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.312579][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.352994][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.360473][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.373983][T11551] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 466.409754][T11551] EXT4-fs (loop1): unmounting filesystem. [ 466.417939][ T9294] device bridge_slave_1 left promiscuous mode [ 466.424371][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.428725][T11560] loop4: detected capacity change from 0 to 190 [ 466.464306][ T3568] Bluetooth: hci8: command tx timeout [ 466.483599][ T9294] device bridge_slave_0 left promiscuous mode [ 466.489854][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.523601][T11560] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 466.582525][T11560] ntfs: (device loop4): ntfs_read_inode_mount(): Incorrect mft offset to the first attribute 65530 in superblock. [ 466.600434][ T9294] device veth1_macvtap left promiscuous mode [ 466.613101][ T9294] device veth0_macvtap left promiscuous mode [ 466.633069][ T9294] device veth1_vlan left promiscuous mode [ 466.638940][ T9294] device veth0_vlan left promiscuous mode [ 466.652970][T11560] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 466.702978][T11560] ntfs: (device loop4): ntfs_fill_super(): Failed to load essential metadata. [ 467.247535][ T9294] team0 (unregistering): Port device team_slave_1 removed [ 467.313783][ T9294] team0 (unregistering): Port device team_slave_0 removed [ 467.343549][ T9294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.413626][ T9294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.655802][ T9294] bond0 (unregistering): Released all slaves [ 467.783620][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.792405][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.873793][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.880929][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.983221][T11365] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.991144][T11365] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.051735][T11365] device bridge_slave_0 entered promiscuous mode [ 468.093769][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.104047][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.123265][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.131739][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.138896][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.146930][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.167749][T11365] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.185893][T11365] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.207830][T11365] device bridge_slave_1 entered promiscuous mode [ 468.247570][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.266806][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.322914][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.341402][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.370881][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.438172][T11604] loop1: detected capacity change from 0 to 2048 [ 468.451826][T10939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.474477][T10939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.503814][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.512498][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.537200][T11604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.546318][ T3568] Bluetooth: hci8: command tx timeout [ 468.566016][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.575194][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.583804][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.627376][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.646443][T11365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.662306][T11365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.748184][T11365] team0: Port device team_slave_0 added [ 468.843935][T11365] team0: Port device team_slave_1 added [ 469.066536][T11365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.084266][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.232921][T11365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.286955][T11365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.313775][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.392683][T11365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.453937][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.461490][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.502195][T10939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.621533][T11365] device hsr_slave_0 entered promiscuous mode [ 469.664283][T11365] device hsr_slave_1 entered promiscuous mode [ 469.891136][T11365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.899588][T11365] Cannot create hsr debugfs directory [ 469.961247][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.974367][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.424405][T10939] device veth0_vlan entered promiscuous mode [ 470.434001][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 470.450082][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 470.485628][T11697] device bridge_slave_0 left promiscuous mode [ 470.551041][T11697] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.633117][ T3568] Bluetooth: hci8: command tx timeout [ 470.723915][T11697] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 470.771798][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.790205][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.873197][T10939] device veth1_vlan entered promiscuous mode [ 470.929595][T11671] loop1: detected capacity change from 0 to 32768 [ 470.975552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 470.999832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.019958][T11671] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 471.047469][T11671] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 471.063522][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.072381][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.131310][T11671] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 7ms [ 471.174552][T10939] device veth0_macvtap entered promiscuous mode [ 471.188163][ T7] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 471.196321][ T7] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 471.219151][T10939] device veth1_macvtap entered promiscuous mode [ 471.367489][T11779] loop4: detected capacity change from 0 to 512 [ 471.416643][T11365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.423892][ T7] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 227ms [ 471.435160][T11779] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 471.482960][ T7] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 471.488271][T11671] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 471.519445][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.563043][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.612920][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.645489][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.683052][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.722905][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.732758][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.783199][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.824018][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.864806][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.905127][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.944102][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.989600][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.033002][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.127240][T10939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.140567][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.155572][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.167099][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.179851][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.190418][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.201666][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.216525][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.227435][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.263953][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.331705][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.359039][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.425006][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.487042][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.553836][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.594317][T10939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.623613][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.632053][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.673880][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.682701][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.703179][ T3568] Bluetooth: hci8: command tx timeout [ 472.743061][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.755260][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.826401][T11365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.883792][T11779] device bond0 entered promiscuous mode [ 472.890619][T11779] device bond_slave_0 entered promiscuous mode [ 472.910307][T11779] device bond_slave_1 entered promiscuous mode [ 473.002561][T11365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.065316][T10939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.102924][T10939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.104905][T11801] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 473.112593][T10939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.193138][T11801] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 473.233236][T10939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.370180][T11365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.536703][T11807] loop4: detected capacity change from 0 to 2048 [ 473.595402][T11807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.614958][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.655541][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.763160][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 473.785320][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.811734][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.858942][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 474.024891][T11365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 474.083116][T11365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 474.124108][T11365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 474.176076][T11365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 474.231134][ T27] audit: type=1326 audit(1718598100.665:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d4767cea9 code=0x0 [ 474.555055][T11805] loop1: detected capacity change from 0 to 32768 [ 474.688512][T11805] XFS (loop1): Mounting V5 Filesystem [ 474.761273][T11365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.794708][T11805] XFS (loop1): Ending clean mount [ 474.862497][T10029] XFS (loop1): Unmounting Filesystem [ 474.927556][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.944450][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.018767][T11365] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.095722][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.123609][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.153269][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.160420][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.284139][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.292393][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.322695][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.353661][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.360804][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.393264][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 475.423762][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.432617][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 475.484836][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.554717][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 475.574576][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 475.603487][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 475.683321][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 475.711181][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.733710][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 475.762764][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.794407][T11365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.295135][ T27] audit: type=1326 audit(1718598102.736:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 476.360247][T11862] loop4: detected capacity change from 0 to 32768 [ 476.388151][ T27] audit: type=1326 audit(1718598102.776:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 476.413781][ T9294] device bridge_slave_1 left promiscuous mode [ 476.420034][ T9294] bridge2: port 1(bridge_slave_1) entered disabled state [ 476.454514][T11862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11862) [ 476.502278][ T9294] device hsr_slave_0 left promiscuous mode [ 476.516203][T11862] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.533652][ T27] audit: type=1326 audit(1718598102.776:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 476.563062][T11862] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 476.571776][T11862] BTRFS info (device loop4): using free space tree [ 476.578544][ T9294] device hsr_slave_1 left promiscuous mode [ 476.597719][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.643742][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.683498][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.690970][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.765469][ T9294] device bridge_slave_0 left promiscuous mode [ 476.772387][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.826410][ T9294] device veth1_macvtap left promiscuous mode [ 476.837980][T11862] BTRFS info (device loop4): enabling ssd optimizations [ 476.842705][ T9294] device veth0_macvtap left promiscuous mode [ 476.851261][ T9294] device veth1_vlan left promiscuous mode [ 476.863187][ T9294] device veth0_vlan left promiscuous mode [ 477.033843][T10439] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 477.894400][ T9294] team0 (unregistering): Port device team_slave_1 removed [ 477.948858][ T9294] team0 (unregistering): Port device team_slave_0 removed [ 477.993192][ T9294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.022425][ T9294] device bond_slave_1 left promiscuous mode [ 478.036732][T11924] loop4: detected capacity change from 0 to 256 [ 478.068136][ T9294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.098621][ T9294] device bond_slave_0 left promiscuous mode [ 478.354304][ T9294] bond0 (unregistering): Released all slaves [ 478.437493][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.496792][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.533981][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 478.563633][ T27] audit: type=1326 audit(1718598105.006:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d4767cea9 code=0x0 [ 478.567931][T11365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.830000][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 478.870255][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 478.964570][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 478.993654][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.002520][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.053452][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.085061][T11365] device veth0_vlan entered promiscuous mode [ 479.142633][T11365] device veth1_vlan entered promiscuous mode [ 479.252269][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.270835][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 479.308296][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.348201][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.485758][T11365] device veth0_macvtap entered promiscuous mode [ 479.517719][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 479.547651][T11365] device veth1_macvtap entered promiscuous mode [ 479.658755][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.725105][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.764325][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.812949][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.822814][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.913405][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.953328][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.961215][T11970] loop1: detected capacity change from 0 to 2048 [ 480.013034][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.034997][T11970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.052958][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.082918][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.092794][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.143306][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.183254][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.232921][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.266558][T11365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.318462][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.327819][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.388257][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.443036][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.484716][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.543001][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.582978][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.645962][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.697699][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.746441][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.797424][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.882950][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.922976][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.962960][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.972812][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.057268][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.090547][T11964] loop4: detected capacity change from 0 to 32768 [ 481.124640][T11365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.129850][T11964] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 481.141392][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.164011][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.185997][T11365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.201630][T11964] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 481.236824][T11365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.267709][T11365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.268173][ T3574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 481.289156][ T3574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 481.297341][T11365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.297460][ T3574] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 481.306700][T11964] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 481.313442][ T4494] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 481.329402][ T3574] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 481.331704][ T4494] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 481.345711][ T3574] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 481.353879][ T3574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 481.663006][ T4494] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 331ms [ 481.670622][ T4494] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 481.716722][T11964] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 482.077955][ T4571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.113161][ T4571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.175847][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.384477][ T3863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.422904][ T3863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.477619][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 482.607030][T11987] chnl_net:caif_netlink_parms(): no params data found [ 483.052459][T11987] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.063017][T11987] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.071272][T11987] device bridge_slave_0 entered promiscuous mode [ 483.099234][T12001] loop1: detected capacity change from 0 to 32768 [ 483.149592][T11987] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.179526][T11987] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.205338][T12001] XFS (loop1): Mounting V5 Filesystem [ 483.214651][T11987] device bridge_slave_1 entered promiscuous mode [ 483.416605][T11987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.427611][ T3574] Bluetooth: hci5: command tx timeout [ 483.443452][T12001] XFS (loop1): Ending clean mount [ 483.486857][T11987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.488107][T12001] XFS (loop1): Quotacheck needed: Please wait. [ 483.606666][T12001] XFS (loop1): Quotacheck: Done. [ 483.636719][T11987] team0: Port device team_slave_0 added [ 483.675257][T11987] team0: Port device team_slave_1 added [ 483.812179][T11987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.875010][T10029] XFS (loop1): Unmounting Filesystem [ 483.883149][T11987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.983446][T11987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.035938][T11987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.073047][T11987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.163886][T11987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.296282][T11987] device hsr_slave_0 entered promiscuous mode [ 484.343520][T11987] device hsr_slave_1 entered promiscuous mode [ 484.393354][T11987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.401138][T11987] Cannot create hsr debugfs directory [ 485.496993][T11987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.513171][ T3574] Bluetooth: hci5: command tx timeout [ 485.619150][T12312] device bridge_slave_0 left promiscuous mode [ 485.625438][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.667303][T12312] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 485.761778][T11987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.895834][T11987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.107793][T11987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.311853][T12388] loop1: detected capacity change from 0 to 1024 [ 486.565018][T11987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.588864][ T102] hfsplus: b-tree write err: -5, ino 4 [ 486.638173][T11987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.669149][T11987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.690438][T11987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.903513][T11987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.974776][T11987] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.982820][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 486.993583][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.093158][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.133787][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.153658][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.160802][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.244759][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.253476][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.262336][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.302792][ T4108] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.309974][ T4108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.353279][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.382540][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.413074][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 487.442883][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.479417][T11987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.559067][T11987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.583236][ T3574] Bluetooth: hci5: command tx timeout [ 487.634883][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.654302][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.698923][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.724840][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.744712][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.755822][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 487.765172][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.842982][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.293671][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.299241][T12439] loop1: detected capacity change from 0 to 512 [ 488.301192][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.345010][T12439] ext4: Bad value for 'resuid' [ 488.359048][T11987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.419688][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.443794][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.499376][T11987] device veth0_vlan entered promiscuous mode [ 488.544269][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.552775][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.570934][T11987] device veth1_vlan entered promiscuous mode [ 488.614180][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.622130][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.653959][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.688381][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.704008][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.723624][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.747515][T11987] device veth0_macvtap entered promiscuous mode [ 488.769404][T11987] device veth1_macvtap entered promiscuous mode [ 488.819658][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.840424][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.860954][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.884889][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.905047][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.927889][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.958142][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.987488][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.014367][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.043130][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.067440][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.096734][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.124050][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.151190][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.177822][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.208305][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.238556][T11987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.271721][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.286008][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.307076][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.327224][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.349809][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.374517][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.402709][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.428696][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.453057][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.480094][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.508057][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.535156][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.560550][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.612968][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.642995][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.663123][ T3574] Bluetooth: hci5: command tx timeout [ 489.679147][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.704306][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.744507][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.782938][T11987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.815679][T11987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.848343][T11987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.867520][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.883547][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.913860][T12454] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 489.923760][T11987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.952816][T11987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.961604][T11987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.043682][T11987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.373503][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.381974][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.418651][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.435461][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.479644][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.504301][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.553661][ T27] audit: type=1326 audit(1718598116.997:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 490.607183][ T27] audit: type=1326 audit(1718598116.997:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 490.663061][ T27] audit: type=1326 audit(1718598117.007:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 490.716517][ T27] audit: type=1326 audit(1718598117.007:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 490.794597][ T27] audit: type=1326 audit(1718598117.007:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 490.881708][ T27] audit: type=1326 audit(1718598117.147:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 490.914518][T12489] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 490.953719][ T27] audit: type=1326 audit(1718598117.147:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 491.032693][ T27] audit: type=1326 audit(1718598117.147:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe21507a627 code=0x7ffc0000 [ 491.106346][ T27] audit: type=1326 audit(1718598117.147:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe215040309 code=0x7ffc0000 [ 491.187847][ T27] audit: type=1326 audit(1718598117.177:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21507cea9 code=0x7ffc0000 [ 491.674818][T12488] loop1: detected capacity change from 0 to 40427 [ 491.705947][T12488] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (67108865, 24) [ 491.722309][T12488] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 491.753907][T12488] F2FS-fs (loop1): invalid crc value [ 491.793571][T12488] F2FS-fs (loop1): Found nat_bits in checkpoint [ 491.893885][T12488] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 491.913045][T12488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 491.971572][T12488] syz-executor.1: attempt to access beyond end of device [ 491.971572][T12488] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 491.974737][T12504] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 492.071007][T10029] syz-executor.1: attempt to access beyond end of device [ 492.071007][T10029] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 492.968912][T12524] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 493.390990][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.425905][T12543] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 493.573034][ T4121] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 493.801423][T12555] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 493.943258][ T4121] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 493.961965][ T4121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.986487][ T4121] usb 1-1: config 0 descriptor?? [ 494.043988][ T4121] cp210x 1-1:0.0: cp210x converter detected [ 494.148835][T12565] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 494.173135][T12565] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 494.503068][ T4121] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 494.523019][ T4121] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 494.530544][ T4121] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 494.573675][ T4121] usb 1-1: cp210x converter now attached to ttyUSB0 [ 494.591933][ T4121] usb 1-1: USB disconnect, device number 6 [ 494.616799][ T4121] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 494.635421][ T4121] cp210x 1-1:0.0: device disconnected [ 494.644814][T12596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 494.762987][ T3617] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 495.382141][ T3617] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.468489][ T3617] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.723830][ T3617] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 495.982997][ T3617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 496.021689][ T3617] usb 2-1: SerialNumber: syz [ 496.305608][ T3617] usb 2-1: 0:2 : does not exist [ 496.383146][ T4494] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 496.633053][ T4494] usb 3-1: Using ep0 maxpacket: 8 [ 496.716966][ T3697] usb 2-1: USB disconnect, device number 15 [ 496.933068][ T4494] usb 3-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=fd.7b [ 496.952462][ T4494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.979528][ T4494] usb 3-1: Product: syz [ 496.993073][ T4494] usb 3-1: Manufacturer: syz [ 497.008014][ T4494] usb 3-1: SerialNumber: syz [ 497.024444][ T4494] usb 3-1: config 0 descriptor?? [ 497.083725][ T4494] usb 3-1: Could not find all expected endpoints [ 497.316926][T12669] loop1: detected capacity change from 0 to 256 [ 497.319005][ T4108] usb 3-1: USB disconnect, device number 21 [ 497.352033][T12669] exfat: Deprecated parameter 'utf8' [ 497.381684][T12669] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 498.377448][T12827] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 498.413035][T12827] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 498.691925][T12838] loop1: detected capacity change from 0 to 256 [ 498.754246][T12838] exfat: Deprecated parameter 'utf8' [ 498.798823][T12838] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 499.799945][T12846] tipc: Started in network mode [ 499.922955][T12846] tipc: Node identity f0, cluster identity 4711 [ 499.931039][ T27] audit: type=1326 audit(1718598126.367:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 499.942935][T12846] tipc: Node number set to 240 [ 499.996258][ T27] audit: type=1326 audit(1718598126.367:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 500.075220][ T27] audit: type=1326 audit(1718598126.397:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 500.146793][ T27] audit: type=1326 audit(1718598126.397:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 500.214994][ T27] audit: type=1326 audit(1718598126.397:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 500.285441][ T27] audit: type=1326 audit(1718598126.427:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 500.372924][ T27] audit: type=1326 audit(1718598126.427:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 500.442969][ T27] audit: type=1326 audit(1718598126.427:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 500.510256][ T27] audit: type=1326 audit(1718598126.427:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb727cea9 code=0x7ffc0000 [ 500.698627][T12848] loop1: detected capacity change from 0 to 40427 [ 500.746728][T12848] F2FS-fs (loop1): invalid crc value [ 500.762264][T12856] Bluetooth: MGMT ver 1.22 [ 500.795826][T12848] F2FS-fs (loop1): Found nat_bits in checkpoint [ 500.900465][T12848] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 500.935547][T12848] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 501.020913][T12848] syz-executor.1: attempt to access beyond end of device [ 501.020913][T12848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 501.344432][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.350765][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.884088][T12895] syz-executor.1[12895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.886794][T12895] syz-executor.1[12895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.974076][T12906] loop1: detected capacity change from 0 to 32768 [ 503.072000][T12906] jfs_rename did not expect dtDelete to return rc = -2 [ 503.112750][T12906] ERROR: (device loop1): jfs_rename: [ 503.112750][T12906] [ 503.356008][T12906] jfs_rename did not expect dtDelete to return rc = -2 [ 503.540946][T12906] ERROR: (device loop1): jfs_rename: [ 503.540946][T12906] [ 504.104934][T12941] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 504.185721][T12941] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 504.403235][ T3697] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 504.420228][T12953] loop1: detected capacity change from 0 to 64 [ 504.448606][T12954] syz-executor.0[12954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.448706][T12954] syz-executor.0[12954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.476768][T12953] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 504.763087][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.802923][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.812762][ T3697] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 504.852377][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.903697][ T3697] usb 3-1: config 0 descriptor?? [ 505.244956][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.419591][ T3697] sony 0003:054C:0268.0011: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 505.466218][T12989] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 505.482643][ T3697] sony 0003:054C:0268.0011: failed to claim input [ 505.509755][T12989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.728384][ T3697] usb 3-1: USB disconnect, device number 22 [ 506.553159][T13004] dccp_close: ABORT with 136 bytes unread [ 506.633046][ T4022] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 506.993171][ T4022] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 507.002265][ T4022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.054676][ T4022] usb 2-1: config 0 descriptor?? [ 507.093963][ T4022] cp210x 2-1:0.0: cp210x converter detected [ 507.533165][ T4022] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 507.553131][ T4022] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 507.560652][ T4022] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 507.602985][ T4022] usb 2-1: cp210x converter now attached to ttyUSB0 [ 507.615917][ T4022] usb 2-1: USB disconnect, device number 16 [ 507.635730][ T4022] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 507.673961][ T4022] cp210x 2-1:0.0: device disconnected [ 508.422725][ T27] audit: type=1326 audit(1718598134.857:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b07cea9 code=0x7ffc0000 [ 508.513057][ T27] audit: type=1326 audit(1718598134.857:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357b07cea9 code=0x7ffc0000 [ 508.558658][ T27] audit: type=1326 audit(1718598134.857:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b07cea9 code=0x7ffc0000 [ 508.632992][ T27] audit: type=1326 audit(1718598134.857:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357b07cea9 code=0x7ffc0000 [ 508.681769][ T27] audit: type=1326 audit(1718598134.897:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357b07cea9 code=0x7ffc0000 [ 508.742431][ T27] audit: type=1326 audit(1718598134.927:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f357b07a627 code=0x7ffc0000 [ 508.791664][ T27] audit: type=1326 audit(1718598134.927:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f357b040309 code=0x7ffc0000 [ 508.835972][ T27] audit: type=1326 audit(1718598134.927:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f357b07a627 code=0x7ffc0000 [ 508.881189][ T27] audit: type=1326 audit(1718598134.927:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f357b040309 code=0x7ffc0000 [ 508.930811][ T27] audit: type=1326 audit(1718598134.927:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f357b07a627 code=0x7ffc0000 [ 509.052914][ T3685] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 509.132418][T13100] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 509.313068][ T3685] usb 4-1: Using ep0 maxpacket: 8 [ 509.473339][ T3685] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 509.482456][ T3685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.546238][ T3685] usb 4-1: config 0 descriptor?? [ 509.823056][ T3685] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 510.253364][T13109] loop1: detected capacity change from 0 to 32768 [ 510.325191][T13109] jfs_rename did not expect dtDelete to return rc = -2 [ 510.332109][T13109] ERROR: (device loop1): jfs_rename: [ 510.332109][T13109] [ 510.413367][T13109] jfs_rename did not expect dtDelete to return rc = -2 [ 510.420270][T13109] ERROR: (device loop1): jfs_rename: [ 510.420270][T13109] [ 511.280773][ T3685] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 511.321549][ T3685] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 511.362399][ T3685] asix: probe of 4-1:0.0 failed with error -71 [ 511.399584][ T3685] usb 4-1: USB disconnect, device number 11 [ 512.608274][ T3568] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 512.621337][ T3568] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 512.630855][ T3568] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 512.653454][ T3568] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 512.661116][ T3568] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 512.668677][ T3568] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 513.741710][T13142] chnl_net:caif_netlink_parms(): no params data found [ 513.851234][T13141] loop1: detected capacity change from 0 to 40427 [ 513.898645][T13141] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 513.931106][T13141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 514.058637][T13142] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.073401][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.084556][T13141] F2FS-fs (loop1): Found nat_bits in checkpoint [ 514.109090][T13303] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 514.126757][T13142] device bridge_slave_0 entered promiscuous mode [ 514.167058][T13142] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.203376][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.216488][T13142] device bridge_slave_1 entered promiscuous mode [ 514.243010][T13323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.258138][T13141] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 514.276465][T13141] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 514.303013][T13323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.387710][T13303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.421376][T13142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.453716][T13142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.491958][T13352] syz-executor.1: attempt to access beyond end of device [ 514.491958][T13352] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 514.637767][T13142] team0: Port device team_slave_0 added [ 514.665343][T13142] team0: Port device team_slave_1 added [ 514.703375][ T3568] Bluetooth: hci9: command tx timeout [ 514.723001][ T3613] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 514.806764][T13142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.825946][T13142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.903036][T13142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.934974][T13142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.941951][T13142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.072960][T13142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.286721][T13142] device hsr_slave_0 entered promiscuous mode [ 515.324322][T13142] device hsr_slave_1 entered promiscuous mode [ 515.333476][ T3613] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 515.342728][T13142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.352514][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.354582][T13142] Cannot create hsr debugfs directory [ 515.385130][ T3613] usb 3-1: Product: syz [ 515.402664][ T3613] usb 3-1: Manufacturer: syz [ 515.421391][ T3613] usb 3-1: SerialNumber: syz [ 515.455935][ T3613] usb 3-1: config 0 descriptor?? [ 515.768587][T13497] tipc: Started in network mode [ 515.783074][T13497] tipc: Node identity f0, cluster identity 4711 [ 515.789371][T13497] tipc: Node number set to 240 [ 515.798458][ T2904] usb 3-1: USB disconnect, device number 23 [ 515.936272][T13142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.115628][T13142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.275166][T13142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.515528][T13142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.722984][ T3697] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 516.783682][ T3568] Bluetooth: hci9: command tx timeout [ 516.964886][T13142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.044919][T13142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.069522][T13142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 517.094101][T13142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 517.103193][ T3697] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 517.213186][ T3697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.242925][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.252024][ T3697] usb 2-1: SerialNumber: syz [ 517.346399][T13142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.379336][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 517.391662][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.417044][T13142] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.444823][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 517.463729][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.472332][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.479468][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.505816][T13576] netlink: 2272 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.538960][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.553721][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 517.583775][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.592347][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.599543][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.633308][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 517.642242][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.699129][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.716237][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.743642][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.773223][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.781862][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.833628][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.846191][T13142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.888930][T13142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 517.906658][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.915540][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.943948][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.990054][T13540] loop1: detected capacity change from 0 to 512 [ 518.057780][T13540] EXT4-fs (loop1): orphan cleanup on readonly fs [ 518.113076][T13540] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 518.203601][T13540] EXT4-fs error (device loop1): ext4_quota_enable:6971: comm syz-executor.1: Bad quota inode: 3, type: 0 [ 518.265348][T13540] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 518.313810][T13540] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 518.335246][T13540] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 518.384253][T13540] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 13: comm syz-executor.1: path /root/syzkaller-testdir1362094973/syzkaller.f9lexb/148/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=134217730, rec_len=0, size=4096 fake=1 [ 518.543511][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.600992][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.643179][ T3697] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 518.655094][T13142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.674251][ T3697] usb 2-1: USB disconnect, device number 17 [ 518.775851][T10029] EXT4-fs (loop1): unmounting filesystem. [ 518.855272][T13597] input: syz0 as /devices/virtual/input/input17 [ 518.878785][ T3568] Bluetooth: hci9: command tx timeout [ 520.425760][T13621] loop1: detected capacity change from 0 to 4096 [ 520.557945][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 520.574003][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.582274][T13621] __ntfs_error: 43 callbacks suppressed [ 520.582290][T13621] ntfs: (device loop1): parse_options(): NLS character set maccenteuroAdma not found. Using previous one koi8-u. [ 520.619918][T13142] device veth0_vlan entered promiscuous mode [ 520.646469][T13621] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 520.660772][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.682946][T13621] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 520.683837][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.729986][T13621] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 520.730387][T13142] device veth1_vlan entered promiscuous mode [ 520.777404][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.794415][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.803325][T13621] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 520.812669][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 520.853041][T13621] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 520.907002][T13632] device syzkaller0 entered promiscuous mode [ 520.913291][T13621] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 520.943391][ T3568] Bluetooth: hci9: command tx timeout [ 520.997319][T13621] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 521.005787][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 521.023298][T13621] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 521.028188][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 521.076435][T13621] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 521.093876][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 521.121121][T13142] device veth0_macvtap entered promiscuous mode [ 521.128600][T13621] ntfs: volume version 3.1. [ 521.296882][T13142] device veth1_macvtap entered promiscuous mode [ 521.372298][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.436852][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.481353][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.523991][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.563171][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.592998][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.632904][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.663799][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.692902][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.732905][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.742767][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.788844][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.812995][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.857528][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.887124][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.912971][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.937358][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.968214][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.014562][T13142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.025151][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 522.047108][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 522.079086][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 522.111269][T13665] Invalid ELF header len 18 [ 522.116880][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 522.172589][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.242907][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.252762][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.303093][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.322959][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.363210][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.403210][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.422938][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.452922][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.485414][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.512474][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.541167][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.572972][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.585581][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.629080][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.652921][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.662784][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.700955][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.734536][T13142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.743196][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 522.752053][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 522.784639][T13142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.794444][T13142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.824416][T13142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.853062][T13142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.156357][ T3731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.191978][ T3731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.244928][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 523.283923][ T3731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.311583][ T3731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.374651][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 524.425930][T13723] loop4: detected capacity change from 0 to 2048 [ 524.466441][T13723] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 524.484074][T13723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.087013][T13724] ALSA: mixer_oss: invalid OSS volume 'u' [ 525.299804][T13735] Invalid ELF header len 18 [ 525.630056][T13750] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 526.535832][T13756] loop4: detected capacity change from 0 to 2048 [ 527.437976][T13756] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 527.450238][T13756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.032126][T13761] loop1: detected capacity change from 0 to 32768 [ 528.040244][T13761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (13761) [ 528.059452][T13761] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 528.069762][T13761] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 528.078588][T13761] BTRFS info (device loop1): using free space tree [ 528.162050][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 528.162066][ T27] audit: type=1804 audit(1718598154.597:1012): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2317478850/syzkaller.rgplNU/41/bus" dev="sda1" ino=1975 res=1 errno=0 [ 528.174042][T13784] Invalid ELF header len 18 [ 528.219189][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.415917][T13761] BTRFS info (device loop1): enabling ssd optimizations [ 528.529839][ T27] audit: type=1800 audit(1718598154.967:1013): pid=13761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 528.844328][T10029] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 528.853585][ T27] audit: type=1326 audit(1718598155.287:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a767cea9 code=0x7ffc0000 [ 528.916376][ T27] audit: type=1326 audit(1718598155.317:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f02a767cea9 code=0x7ffc0000 [ 529.004709][T13836] Invalid ELF header len 18 [ 529.025650][ T27] audit: type=1326 audit(1718598155.317:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a767cea9 code=0x7ffc0000 [ 529.130910][ T27] audit: type=1326 audit(1718598155.317:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02a767cea9 code=0x7ffc0000 [ 529.202590][ T27] audit: type=1326 audit(1718598155.317:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a767cea9 code=0x7ffc0000 [ 529.272923][ T27] audit: type=1326 audit(1718598155.317:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f02a767cea9 code=0x7ffc0000 [ 529.384744][ T27] audit: type=1326 audit(1718598155.317:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a767cea9 code=0x7ffc0000 [ 529.482698][ T27] audit: type=1326 audit(1718598155.317:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f02a767cea9 code=0x7ffc0000 [ 529.784150][T13849] loop4: detected capacity change from 0 to 32768 [ 529.792098][T13849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (13849) [ 529.815648][T13849] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 529.825884][T13849] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 529.834655][T13849] BTRFS info (device loop4): using free space tree [ 529.852814][T13858] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 530.169330][T13849] BTRFS info (device loop4): enabling ssd optimizations [ 530.202760][T13881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 530.526515][T13142] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 531.140153][T13904] loop1: detected capacity change from 0 to 128 [ 531.228118][T13904] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 531.287261][T13904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 531.313179][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 531.795049][T13924] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 532.082532][T13906] loop4: detected capacity change from 0 to 32768 [ 532.166874][T13940] loop1: detected capacity change from 0 to 128 [ 532.193167][T13940] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 532.202059][T13906] XFS (loop4): Mounting V5 Filesystem [ 532.258747][T13906] XFS (loop4): Ending clean mount [ 532.273799][T13940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.323806][T13906] XFS (loop4): Quotacheck needed: Please wait. [ 532.389865][T13906] XFS (loop4): Quotacheck: Done. [ 532.519574][T13142] XFS (loop4): Unmounting Filesystem [ 533.874794][T13987] loop1: detected capacity change from 0 to 2048 [ 533.920632][T13987] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 533.939220][T13987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.919413][T14004] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.290772][T14019] loop4: detected capacity change from 0 to 64 [ 535.935491][T14042] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.140642][ T3732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.159426][ T3732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.176055][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 537.247842][T14092] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 537.469234][T14098] loop4: detected capacity change from 0 to 4096 [ 537.506021][T14098] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 537.765707][T14110] loop1: detected capacity change from 0 to 1024 [ 538.334680][T14133] "syz-executor.3" (14133) uses obsolete ecb(arc4) skcipher [ 538.365012][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 538.365028][ T27] audit: type=1800 audit(1718598164.807:1037): pid=14133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1965 res=0 errno=0 [ 538.596990][T14137] loop1: detected capacity change from 0 to 4096 [ 538.647691][T14137] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 539.832329][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 540.224529][T14164] loop4: detected capacity change from 0 to 64 [ 540.550665][T14152] loop1: detected capacity change from 0 to 32768 [ 540.571919][T14152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (14152) [ 540.611826][T14152] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 540.651601][T14152] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 540.679422][T14152] BTRFS info (device loop1): using free space tree [ 540.785578][T14152] BTRFS info (device loop1): enabling ssd optimizations [ 540.930771][T14195] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 541.162161][T14152] syz-executor.1 (14152) used greatest stack depth: 18080 bytes left [ 541.182448][T10029] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 541.590254][ T3643] Bluetooth: hci10: Frame reassembly failed (-84) [ 542.124526][T14215] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 542.591957][T14228] xt_NFQUEUE: number of queues (17952) out of range (got 83484) [ 542.780140][T14218] loop1: detected capacity change from 0 to 40427 [ 542.823577][T14218] F2FS-fs (loop1): Invalid log sectorsize (2) [ 542.829824][T14218] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 542.904695][T14218] F2FS-fs (loop1): Found nat_bits in checkpoint [ 543.008258][T14218] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 543.022947][T14218] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 543.273540][T10029] syz-executor.1: attempt to access beyond end of device [ 543.273540][T10029] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 543.585830][ T3574] Bluetooth: hci10: command 0x1003 tx timeout [ 543.592613][ T3568] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 544.389309][T14251] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 544.911731][T14262] loop4: detected capacity change from 0 to 2048 [ 544.953582][T14262] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 544.969641][T14262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.779087][T14266] loop1: detected capacity change from 0 to 4096 [ 545.804125][ T27] audit: type=1800 audit(1718598172.247:1038): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1975 res=0 errno=0 [ 545.864497][ T27] audit: type=1800 audit(1718598172.247:1039): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1976 res=0 errno=0 [ 546.355038][T14287] loop1: detected capacity change from 0 to 1024 [ 547.640223][T14316] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.717957][T14315] loop1: detected capacity change from 0 to 4096 [ 548.016109][T14321] loop1: detected capacity change from 0 to 1024 [ 548.082766][T14321] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 548.142140][T14321] EXT4-fs: Ignoring removed nobh option [ 548.192941][T14321] EXT4-fs: Ignoring removed bh option [ 548.198429][T14321] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 548.262996][T14321] EXT4-fs: can't change dax mount option while remounting [ 548.267828][T14305] loop4: detected capacity change from 0 to 32768 [ 548.305223][T14305] XFS: attr2 mount option is deprecated. [ 548.326009][T14325] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 548.331342][T14305] XFS: noikeep mount option is deprecated. [ 548.339939][T10029] EXT4-fs (loop1): unmounting filesystem. [ 548.421011][T14305] XFS (loop4): Mounting V5 Filesystem [ 548.630121][T14305] XFS (loop4): Ending clean mount [ 548.652582][T14305] XFS (loop4): Quotacheck needed: Please wait. [ 548.772640][T14305] XFS (loop4): Quotacheck: Done. [ 548.822285][T14343] loop1: detected capacity change from 0 to 8 [ 548.907525][T14343] SQUASHFS error: Unable to read inode 0x11f [ 549.042556][T13142] XFS (loop4): Unmounting Filesystem [ 549.210491][T14348] loop1: detected capacity change from 0 to 1024 [ 549.335783][ T27] audit: type=1804 audit(1718598175.777:1040): pid=14348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1362094973/syzkaller.f9lexb/209/bus/bus" dev="loop1" ino=3 res=1 errno=0 [ 549.375647][T14348] hfsplus: xattr searching failed [ 549.381449][T14350] hfsplus: xattr searching failed [ 549.424194][T14350] hfsplus: b-tree write err: -5, ino 3 [ 550.059066][ T34] hfsplus: b-tree write err: -5, ino 3 [ 551.085800][T14370] loop4: detected capacity change from 0 to 1764 [ 551.632643][T14385] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 551.797922][T14395] loop4: detected capacity change from 0 to 1024 [ 551.943905][ T27] audit: type=1804 audit(1718598178.387:1041): pid=14395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2058384661/syzkaller.YJlmDb/63/bus/bus" dev="loop4" ino=3 res=1 errno=0 [ 551.944744][T14395] hfsplus: xattr searching failed [ 552.196928][T14375] loop1: detected capacity change from 0 to 32768 [ 552.214030][T14399] hfsplus: xattr searching failed [ 552.243577][T14399] hfsplus: b-tree write err: -5, ino 3 [ 552.268820][T14375] XFS: attr2 mount option is deprecated. [ 552.322962][T14375] XFS: noikeep mount option is deprecated. [ 552.767164][T14375] XFS (loop1): Mounting V5 Filesystem [ 553.215428][T14375] XFS (loop1): Ending clean mount [ 553.222934][T14375] XFS (loop1): Quotacheck needed: Please wait. [ 553.305426][T14375] XFS (loop1): Quotacheck: Done. [ 553.320716][ T3729] hfsplus: b-tree write err: -5, ino 3 [ 553.594466][T10029] XFS (loop1): Unmounting Filesystem [ 554.606679][T14443] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 554.781692][T14428] loop4: detected capacity change from 0 to 32768 [ 554.939448][T14428] XFS (loop4): Mounting V5 Filesystem [ 555.000673][T14440] loop1: detected capacity change from 0 to 32768 [ 555.039320][T14440] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 555.039320][T14440] [ 555.056454][T14440] ERROR: (device loop1): remounting filesystem as read-only [ 555.100735][T14440] ERROR: (device loop1): jfs_unlink: [ 555.100735][T14440] [ 555.135554][T14428] XFS (loop4): Ending clean mount [ 555.302042][T10029] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 555.302042][T10029] [ 555.338647][T10029] ERROR: (device loop1): remounting filesystem as read-only [ 555.413126][T14428] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 555.506801][T14428] XFS (loop4): Unmount and run xfs_repair [ 555.544363][T14428] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 555.583194][T14428] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 555.634813][T14428] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 555.686471][T14428] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 555.719812][T14428] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 555.755878][T14428] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 555.816483][T14428] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 555.862972][T14428] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 555.871896][T14428] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 555.934018][T14428] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 556.016394][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 556.030020][T14428] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 556.119772][T14428] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 556.584414][T13142] XFS (loop4): Unmounting Filesystem [ 557.142985][ T3697] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 557.503633][ T3697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.553107][ T3697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.620291][ T3697] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 559.534793][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.644030][ T3697] usb 2-1: config 0 descriptor?? [ 559.763829][ T3568] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 559.793551][ T3568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 559.806167][ T3568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 559.816452][ T3568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 559.827598][ T3568] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 559.835171][ T3568] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.923374][ T3697] usbhid 2-1:0.0: can't add hid device: -71 [ 559.929406][ T3697] usbhid: probe of 2-1:0.0 failed with error -71 [ 559.954131][ T3697] usb 2-1: USB disconnect, device number 18 [ 559.986836][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.175735][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.338403][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.490335][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.894518][T14519] chnl_net:caif_netlink_parms(): no params data found [ 561.903124][ T3568] Bluetooth: hci5: command tx timeout [ 562.265031][T14519] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.272163][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.295731][T14519] device bridge_slave_0 entered promiscuous mode [ 562.312519][T14519] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.333068][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.357944][T14519] device bridge_slave_1 entered promiscuous mode [ 562.501593][T14519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.573755][T14519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.626750][T14645] loop1: detected capacity change from 0 to 32768 [ 562.750502][T14519] team0: Port device team_slave_0 added [ 562.784635][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.790961][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.820328][T14645] XFS (loop1): Mounting V5 Filesystem [ 562.944488][T14645] XFS (loop1): Ending clean mount [ 562.955640][T14519] team0: Port device team_slave_1 added [ 563.983142][ T3568] Bluetooth: hci5: command tx timeout [ 564.420728][T14519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.438624][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.493821][T10029] XFS (loop1): Unmounting Filesystem [ 564.539772][T14519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.589421][T14519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.600306][T14759] loop4: detected capacity change from 0 to 32768 [ 564.613002][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.644797][T14759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (14759) [ 564.721172][T14519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.770476][T14759] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 564.803079][T14759] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 564.860055][T14759] BTRFS info (device loop4): use zlib compression, level 3 [ 564.893027][T14759] BTRFS info (device loop4): using free space tree [ 565.022543][T14519] device hsr_slave_0 entered promiscuous mode [ 565.080166][T14519] device hsr_slave_1 entered promiscuous mode [ 565.133145][T14519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.140748][T14519] Cannot create hsr debugfs directory [ 565.249878][T14759] BTRFS info (device loop4): enabling ssd optimizations [ 565.450288][T13142] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 566.003051][ T11] device hsr_slave_0 left promiscuous mode [ 566.043694][ T11] device hsr_slave_1 left promiscuous mode [ 566.054228][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.063167][ T3568] Bluetooth: hci5: command tx timeout [ 566.131659][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.165445][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.193469][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.245745][ T11] device bridge_slave_1 left promiscuous mode [ 566.270337][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.307175][ T11] device bridge_slave_0 left promiscuous mode [ 566.341182][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.449718][ T11] device veth1_macvtap left promiscuous mode [ 566.475740][ T11] device veth0_macvtap left promiscuous mode [ 566.481906][ T11] device veth1_vlan left promiscuous mode [ 566.523252][ T11] device veth0_vlan left promiscuous mode [ 567.336851][ T11] team0 (unregistering): Port device team_slave_1 removed [ 567.377671][ T11] team0 (unregistering): Port device team_slave_0 removed [ 567.423332][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.473553][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.510335][T14930] loop4: detected capacity change from 0 to 32768 [ 567.546212][T14930] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (14930) [ 567.589466][T14930] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 567.628768][T14930] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 567.657499][T14930] BTRFS info (device loop4): enabling auto defrag [ 567.679639][T14930] BTRFS info (device loop4): doing ref verification [ 567.699729][T14930] BTRFS info (device loop4): setting nodatacow, compression disabled [ 567.725736][T14930] BTRFS info (device loop4): max_inline at 4096 [ 567.739382][ T11] bond0 (unregistering): Released all slaves [ 567.753095][T14930] BTRFS info (device loop4): disabling auto defrag [ 567.780544][T14930] BTRFS info (device loop4): max_inline at 4096 [ 567.797198][T14930] BTRFS info (device loop4): using free space tree [ 567.862678][T14921] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 567.881522][T14921] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 568.143120][ T3568] Bluetooth: hci5: command tx timeout [ 568.212116][ T27] audit: type=1800 audit(1718598194.647:1042): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 568.233996][T13142] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 568.315524][ T27] audit: type=1800 audit(1718598194.657:1043): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 568.851208][T14997] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 569.043133][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 569.380663][T14519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 569.406535][T14519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 569.423230][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.448377][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.462419][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 569.491752][ T7] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 569.514464][T14519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 569.539552][T14519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 569.543490][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.574583][T15023] device bridge_slave_1 left promiscuous mode [ 569.583246][T15023] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.615023][ T7] usb 2-1: config 0 descriptor?? [ 569.663808][T15023] bridge1: port 1(bridge_slave_1) entered blocking state [ 569.671136][T15023] bridge1: port 1(bridge_slave_1) entered disabled state [ 569.712531][T15023] device bridge_slave_1 entered promiscuous mode [ 569.736266][T15023] bridge1: port 1(bridge_slave_1) entered blocking state [ 569.743473][T15023] bridge1: port 1(bridge_slave_1) entered forwarding state [ 569.882792][T14993] loop1: detected capacity change from 0 to 2048 [ 569.973666][T14993] loop1: p1 < > p4 [ 569.985535][T14993] loop1: p4 size 8388608 extends beyond EOD, truncated [ 570.037051][T14519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.098433][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 570.108022][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 570.125792][T14519] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.155745][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 570.169130][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.222637][ T4107] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.229864][ T4107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.302084][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 570.317355][ T7] kye 0003:0458:501A.0012: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 570.324315][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 570.363737][ T7] kye 0003:0458:501A.0012: tablet-enabling feature report not found [ 570.367047][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.371843][ T7] kye 0003:0458:501A.0012: tablet enabling failed [ 570.417900][ T4109] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.425140][ T4109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.477402][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 570.523977][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 570.585011][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 570.597389][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 570.626684][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.657122][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.687380][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 570.717758][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.738009][T14519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.750736][ T4108] usb 2-1: USB disconnect, device number 19 [ 570.823446][T14519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 570.839492][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 570.858046][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 570.888002][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 571.456113][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 571.483249][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.517987][T14519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.605952][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.615440][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.715502][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.744125][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.761844][T15051] loop4: detected capacity change from 0 to 32768 [ 571.791722][T14519] device veth0_vlan entered promiscuous mode [ 571.814304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.815306][T15051] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (15051) [ 571.822362][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.897006][T14519] device veth1_vlan entered promiscuous mode [ 571.932678][T15051] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 571.943220][T15074] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 571.961104][T15074] overlayfs: failed to set xattr on upper [ 571.967703][T15074] overlayfs: ...falling back to xino=off. [ 571.984417][T15051] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 571.994797][T15074] overlayfs: maximum fs stacking depth exceeded [ 572.027503][T15051] BTRFS info (device loop4): enabling auto defrag [ 572.040963][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 572.058774][T15051] BTRFS info (device loop4): doing ref verification [ 572.063843][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 572.099192][T15051] BTRFS info (device loop4): setting nodatacow, compression disabled [ 572.113799][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 572.128241][T15051] BTRFS info (device loop4): max_inline at 4096 [ 572.132422][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 572.157511][T15051] BTRFS info (device loop4): disabling auto defrag [ 572.168003][T14519] device veth0_macvtap entered promiscuous mode [ 572.190703][T15051] BTRFS info (device loop4): max_inline at 4096 [ 572.202752][T15078] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 572.232237][T15051] BTRFS info (device loop4): using free space tree [ 572.251261][T15080] loop1: detected capacity change from 0 to 512 [ 572.303179][T15079] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 572.345441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 572.386966][T14519] device veth1_macvtap entered promiscuous mode [ 572.401709][T15080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 572.423472][T15080] ext4 filesystem being mounted at /root/syzkaller-testdir1362094973/syzkaller.f9lexb/230/file0 supports timestamps until 2038 (0x7fffffff) [ 572.523868][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.594136][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.652774][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.693015][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.722993][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.772912][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.803384][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.833030][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.852906][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.886724][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.910962][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.932674][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.966194][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.993542][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.021328][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.055184][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.071891][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.088032][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.154600][T14519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.210043][T15099] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 573.271030][T15104] device bridge_slave_1 left promiscuous mode [ 573.291240][T15104] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.311431][T13142] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 573.695723][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 573.704814][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 573.724912][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.759254][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.791196][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.822681][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.849813][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.883716][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.908261][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.933242][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.963462][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.988179][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.011569][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.033640][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.063212][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.082935][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.102951][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.124042][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.144123][T14519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.166846][T14519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.206729][T14519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.216187][T10029] EXT4-fs (loop1): unmounting filesystem. [ 574.248407][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 574.267410][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 574.308384][T14519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.350616][T14519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.380917][T14519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.433111][T14519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.664986][ T4530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.696682][ T4530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.786170][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 574.827279][ T3863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.849258][ T3863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.890542][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 575.103579][ T3568] Bluetooth: hci2: command 0x0406 tx timeout [ 575.363009][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 575.395961][ T27] audit: type=1800 audit(1718598201.837:1044): pid=15160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 575.448769][ T27] audit: type=1800 audit(1718598201.867:1045): pid=15160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 575.723249][ T7] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 575.732366][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.779756][ T7] usb 5-1: config 0 descriptor?? [ 575.844037][ T7] cp210x 5-1:0.0: cp210x converter detected [ 575.894223][T15172] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 576.086755][T15157] loop1: detected capacity change from 0 to 32768 [ 576.113927][T15157] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (15157) [ 576.176911][T15157] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 576.200206][T15157] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 576.229373][T15157] BTRFS info (device loop1): using free space tree [ 576.283047][ T7] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 576.507729][T15157] BTRFS info (device loop1): enabling ssd optimizations [ 576.543096][ T7] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 576.555179][ T7] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 576.583724][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 576.594306][ T7] usb 5-1: cp210x converter now attached to ttyUSB0 [ 576.612955][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 576.626704][ T7] usb 5-1: USB disconnect, device number 13 [ 576.644541][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 576.664934][ T7] cp210x 5-1:0.0: device disconnected [ 577.290633][T10029] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 577.369920][T15247] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 577.405026][T15247] overlayfs: failed to set xattr on upper [ 577.413041][T15247] overlayfs: ...falling back to xino=off. [ 577.450180][T15247] overlayfs: maximum fs stacking depth exceeded [ 579.557876][T15265] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 579.713559][T15271] loop4: detected capacity change from 0 to 256 [ 579.895950][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 580.231259][ T3574] Bluetooth: hci6: command 0x0406 tx timeout [ 580.240385][ T3573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 580.258336][ T3573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 580.273671][ T3573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 580.284642][ T3573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 580.292357][ T3573] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 580.301518][ T3573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 581.025295][T15279] chnl_net:caif_netlink_parms(): no params data found [ 581.160878][T15419] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 581.769115][T15400] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 582.221383][T15438] loop4: detected capacity change from 0 to 512 [ 582.299128][T15438] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 582.309567][T15427] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 582.345795][T15438] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 582.393073][ T3573] Bluetooth: hci0: command tx timeout [ 582.402930][T15438] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 582.433685][T15438] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 582.453897][T15438] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 582.516229][T15438] EXT4-fs (loop4): too many log groups per flexible block group [ 582.524613][T15438] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 582.531650][T15438] EXT4-fs (loop4): mount failed [ 582.645046][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.652175][T15279] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.681804][T15279] device bridge_slave_0 entered promiscuous mode [ 582.704072][T15438] mac80211_hwsim hwsim63 wlan1: refused to change device tx_queue_len [ 582.733406][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.753123][T15279] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.761538][T15279] device bridge_slave_1 entered promiscuous mode [ 582.908211][T15279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.952620][T15279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.969680][T15495] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 583.007284][T15495] overlayfs: failed to set xattr on upper [ 583.048449][T15509] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 583.075594][T15495] overlayfs: ...falling back to xino=off. [ 583.099525][T15495] overlayfs: maximum fs stacking depth exceeded [ 583.274339][T15279] team0: Port device team_slave_0 added [ 583.311770][T15279] team0: Port device team_slave_1 added [ 583.467429][T15279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.486589][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.551446][T13142] [ 583.553807][T13142] ====================================================== [ 583.560826][T13142] WARNING: possible circular locking dependency detected [ 583.567850][T13142] 6.1.94-syzkaller #0 Not tainted [ 583.572871][T13142] ------------------------------------------------------ [ 583.573244][T15279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.579869][T13142] syz-executor.4/13142 is trying to acquire lock: [ 583.579881][T13142] ffff88814c6aa3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x213/0x760 [ 583.579930][T13142] [ 583.579930][T13142] but task is already holding lock: [ 583.579935][T13142] ffff88808c024030 (&sb->s_type->i_mutex_key#8 [ 583.601143][T15279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.607988][T13142] ){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0 [ 583.608026][T13142] [ 583.608026][T13142] which lock already depends on the new lock. [ 583.608026][T13142] [ 583.608031][T13142] [ 583.608031][T13142] the existing dependency chain (in reverse order) is: [ 583.608036][T13142] [ 583.608036][T13142] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 583.608064][T13142] lock_acquire+0x1f8/0x5a0 [ 583.608087][T13142] down_read+0xad/0xa30 [ 583.608113][T13142] ext4_bmap+0x4b/0x410 [ 583.608132][T13142] bmap+0xa1/0xd0 [ 583.608151][T13142] jbd2_journal_flush+0x5b5/0xc40 [ 583.608170][T13142] ext4_ioctl+0x3986/0x5f60 [ 583.608189][T13142] __se_sys_ioctl+0xf1/0x160 [ 583.608209][T13142] do_syscall_64+0x3b/0xb0 [ 583.608229][T13142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.608250][T13142] [ 583.608250][T13142] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 583.608274][T13142] validate_chain+0x1661/0x5950 [ 583.608293][T13142] __lock_acquire+0x125b/0x1f80 [ 583.608312][T13142] lock_acquire+0x1f8/0x5a0 [ 583.639611][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.644900][T13142] mutex_lock_io_nested+0x134/0xab0 [ 583.644931][T13142] __jbd2_log_wait_for_space+0x213/0x760 [ 583.644950][T13142] start_this_handle+0x1040/0x21b0 [ 583.644965][T13142] jbd2__journal_start+0x2d1/0x5c0 [ 583.644981][T13142] __ext4_journal_start_sb+0x19b/0x410 [ 583.645000][T13142] __ext4_unlink+0x412/0xba0 [ 583.645017][T13142] ext4_unlink+0x1d5/0x670 [ 583.645033][T13142] vfs_unlink+0x359/0x5f0 [ 583.645050][T13142] do_unlinkat+0x4a5/0x820 [ 583.645068][T13142] __x64_sys_unlink+0x45/0x50 [ 583.645085][T13142] do_syscall_64+0x3b/0xb0 [ 583.645106][T13142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.645126][T13142] [ 583.645126][T13142] other info that might help us debug this: [ 583.645126][T13142] [ 583.645131][T13142] Possible unsafe locking scenario: [ 583.645131][T13142] [ 583.645136][T13142] CPU0 CPU1 [ 583.645141][T13142] ---- ---- [ 583.851844][T13142] lock(&sb->s_type->i_mutex_key#8); [ 583.857213][T13142] lock(&journal->j_checkpoint_mutex); [ 583.865259][T13142] lock(&sb->s_type->i_mutex_key#8); [ 583.873222][T13142] lock(&journal->j_checkpoint_mutex); [ 583.878769][T13142] [ 583.878769][T13142] *** DEADLOCK *** [ 583.878769][T13142] [ 583.886908][T13142] 3 locks held by syz-executor.4/13142: [ 583.892442][T13142] #0: ffff88814c6a6460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 583.901593][T13142] #1: ffff88808c024a38 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x266/0x820 [ 583.911860][T13142] #2: ffff88808c024030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0 [ 583.921955][T13142] [ 583.921955][T13142] stack backtrace: [ 583.927834][T13142] CPU: 0 PID: 13142 Comm: syz-executor.4 Not tainted 6.1.94-syzkaller #0 [ 583.936229][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 583.946278][T13142] Call Trace: [ 583.949630][T13142] [ 583.952553][T13142] dump_stack_lvl+0x1e3/0x2cb [ 583.957229][T13142] ? nf_tcp_handle_invalid+0x642/0x642 [ 583.962688][T13142] ? print_circular_bug+0x12b/0x1a0 [ 583.967873][T13142] check_noncircular+0x2fa/0x3b0 [ 583.972796][T13142] ? add_chain_block+0x850/0x850 [ 583.977730][T13142] ? lockdep_lock+0x11f/0x2a0 [ 583.982398][T13142] ? _find_first_zero_bit+0xd0/0x100 [ 583.987672][T13142] validate_chain+0x1661/0x5950 [ 583.992521][T13142] ? reacquire_held_locks+0x660/0x660 [ 583.997886][T13142] ? reacquire_held_locks+0x660/0x660 [ 584.003368][T13142] ? reacquire_held_locks+0x660/0x660 [ 584.008728][T13142] ? validate_chain+0x112/0x5950 [ 584.014001][T13142] ? unwind_next_frame+0x1a3f/0x2220 [ 584.019272][T13142] ? deref_stack_reg+0x17c/0x210 [ 584.024215][T13142] ? 0xffffffffa0003b40 [ 584.028374][T13142] ? 0xffffffffa0003b40 [ 584.032631][T13142] ? mark_lock+0x9a/0x340 [ 584.036980][T13142] __lock_acquire+0x125b/0x1f80 [ 584.041951][T13142] lock_acquire+0x1f8/0x5a0 [ 584.046724][T13142] ? __jbd2_log_wait_for_space+0x213/0x760 [ 584.052545][T13142] ? __jbd2_log_wait_for_space+0x213/0x760 [ 584.058501][T13142] ? read_lock_is_recursive+0x10/0x10 [ 584.063888][T13142] ? __might_sleep+0xb0/0xb0 [ 584.068467][T13142] ? __jbd2_log_wait_for_space+0x213/0x760 [ 584.074263][T13142] mutex_lock_io_nested+0x134/0xab0 [ 584.079652][T13142] ? __jbd2_log_wait_for_space+0x213/0x760 [ 584.085467][T13142] ? __jbd2_log_wait_for_space+0x207/0x760 [ 584.091278][T13142] ? __lock_acquire+0x1f80/0x1f80 [ 584.096388][T13142] ? mutex_lock_interruptible_nested+0x20/0x20 [ 584.102535][T13142] __jbd2_log_wait_for_space+0x213/0x760 [ 584.108162][T13142] ? do_raw_write_lock+0x143/0x4e0 [ 584.113260][T13142] ? jbd2_commit_block_csum_verify+0x4f0/0x4f0 [ 584.119489][T13142] ? do_raw_read_unlock+0x70/0x70 [ 584.124501][T13142] start_this_handle+0x1040/0x21b0 [ 584.129598][T13142] ? jbd2__journal_start+0x144/0x5c0 [ 584.134891][T13142] ? jbd2__journal_start+0x5c0/0x5c0 [ 584.140251][T13142] ? __kasan_slab_alloc+0x65/0x70 [ 584.145260][T13142] ? slab_post_alloc_hook+0x71/0x3a0 [ 584.150533][T13142] ? rcu_is_watching+0x11/0xb0 [ 584.155285][T13142] ? jbd2__journal_start+0x144/0x5c0 [ 584.160557][T13142] jbd2__journal_start+0x2d1/0x5c0 [ 584.165835][T13142] __ext4_journal_start_sb+0x19b/0x410 [ 584.171407][T13142] __ext4_unlink+0x412/0xba0 [ 584.176020][T13142] ? __ext4_read_dirblock+0x880/0x880 [ 584.181397][T13142] ? rwsem_write_trylock+0x166/0x210 [ 584.186683][T13142] ? inode_permission+0xf7/0x450 [ 584.191633][T13142] ? clear_nonspinnable+0x60/0x60 [ 584.196694][T13142] ext4_unlink+0x1d5/0x670 [ 584.201154][T13142] vfs_unlink+0x359/0x5f0 [ 584.205604][T13142] do_unlinkat+0x4a5/0x820 [ 584.210051][T13142] ? fsnotify_link_count+0xf0/0xf0 [ 584.215205][T13142] __x64_sys_unlink+0x45/0x50 [ 584.219918][T13142] do_syscall_64+0x3b/0xb0 [ 584.224365][T13142] ? clear_bhb_loop+0x45/0xa0 [ 584.229054][T13142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.235049][T13142] RIP: 0033:0x7f02a767c657 [ 584.239475][T13142] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 584.259611][T13142] RSP: 002b:00007ffcfe0aa208 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 584.268016][T13142] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f02a767c657 [ 584.276317][T13142] RDX: 00007ffcfe0aa230 RSI: 00007ffcfe0aa2c0 RDI: 00007ffcfe0aa2c0 [ 584.284273][T13142] RBP: 00007ffcfe0aa2c0 R08: 0000000000000000 R09: 0000000000000000 [ 584.292232][T13142] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffcfe0ab370 2024/06/17 04:23:30 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 584.300185][T13142] R13: 00007f02a76d9636 R14: 000000000008e6e2 R15: 0000000000000002 [ 584.308163][T13142] [ 584.311226][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.383998][T15279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.463294][ T3573] Bluetooth: hci0: command tx timeout