last executing test programs: 44.750500005s ago: executing program 0 (id=465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@orlov}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000340)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) clock_gettime(0x9, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0xffffff85, 0x0, 0x0, 0xfffffffffffffca9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x3, 0x7) chdir(&(0x7f0000000880)='./bus\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 42.09155905s ago: executing program 0 (id=468): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VT_DISALLOCATE(r0, 0x5608) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffb, 0x0, "81fb08cc2b000000f6c05b7225ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) pipe2$9p(0x0, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000040)={0x0, 0x937, 0x0, 0x0, 0x0, "8afbb5a85093ef768ede381361ce675f4362d2"}) fcntl$setstatus(r5, 0x4, 0x102800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 40.175432196s ago: executing program 0 (id=473): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000500)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000002c0)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) 33.202431388s ago: executing program 1 (id=485): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000400), 0x4) 31.666073619s ago: executing program 1 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x25, 0x0, 0x0) 30.649835662s ago: executing program 1 (id=498): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e0000000000001090224"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 28.951430088s ago: executing program 1 (id=492): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@err_cont}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") truncate(0x0, 0x1) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x171c, 0x0, 0x0, 0x0, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffefffff5aff000001"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 24.008566013s ago: executing program 1 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) rt_sigpending(0x0, 0x1000000) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r8}) close_range(r2, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="3dff000000000000000005"], 0x1c}}, 0x0) 22.365748074s ago: executing program 1 (id=499): r0 = getuid() r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1200052, &(0x7f00000000c0), 0x1, 0x7aa, &(0x7f0000000800)="$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") chdir(&(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000440)='./control\x00', 0x0) open$dir(0x0, 0x4c4041, 0x0) unlink(0x0) rmdir(&(0x7f0000000040)='./control\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_setaffinity(r4, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, r0, &(0x7f0000000780)={0x0, 0xa, 0x10, 0xc66, 0x0, 0x8, 0x1, 0x100000001, 0x9}) getrandom(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1004084, &(0x7f0000001d40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c726f6469722c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e39352c756e695f786c6174653d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e66732c756e695f786c6174653d312c756e695f786c6174653d312c6e66732c757466383d312c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e66732c726f6469722c726f6469722c6e6e6f6e75000000000000000000c61fbe7fae49c7", @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES8=0x0, @ANYRESDEC=r5], 0x1, 0x2a6, &(0x7f0000000800)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 16.286744743s ago: executing program 4 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f00000004c0)=ANY=[@ANYBLOB="6465636f6d706f73652c666f7263652c6e6f626172726965722c706172743d3078303030303030303030303030633538612c6465636f6d706f73652c6e6f626172726965722c6e6c733d6d6163726f6d616e2c6e6f626172726965722c747970653d0bc4d8612c0059918aafb809720798d1ef21d6a229e637d1478ded69f0287999ffb445d9017e7c3f0628f3aef4c5df69d200309b2aedad65814db128388a5bd483b30135a2fe27b944fedaac7f29dc41bd6159b4e5c53de01b7f1344a95e17afdab4e339326e423965f6cc32f7a68cbe21a5ea350315c662629dd265928bae39"], 0x3, 0x6af, &(0x7f0000000a40)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 15.054387456s ago: executing program 4 (id=508): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@user_xattr}, {@jqfmt_vfsv1}, {@grpid}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x46f, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x6, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) io_setup(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e3e0539208021aa"], 0xa) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000000300)={0x80000001, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) 13.804847561s ago: executing program 3 (id=510): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 12.903137064s ago: executing program 4 (id=513): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x835, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xc, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}], 0xc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000180)) write$UHID_INPUT(r1, &(0x7f0000001980)={0xf, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e924afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 12.858448038s ago: executing program 3 (id=514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000300)='./file3/file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") sync() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000280)='./file3/file0\x00', &(0x7f0000000240)='aufs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x389d778c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r2 = dup(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1ca) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ff4f19fe6b85f2339b325756b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f0000000000"], 0x1, 0x17c, &(0x7f0000000a40)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000080)={0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002dbd7000ffdbdf25090000000500150001000000080014001a00000005001300b8000000080014000200000005001d00190000000500130003000000050013001900000005001d000e00000005001d000000"], 0x64}, 0x1, 0x0, 0x0, 0x1884}, 0x44890) socket$nl_route(0x10, 0x3, 0x0) 11.616206912s ago: executing program 4 (id=516): mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlinkprop={0x3c, 0x6c, 0x85424695c11f4cf7, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x0, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) read(0xffffffffffffffff, &(0x7f00000044c0)=""/22, 0x16) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 11.066455243s ago: executing program 3 (id=517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@deltaction={0x14, 0x25, 0x1}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) pipe(&(0x7f0000000140)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r7, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x440902) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000507000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) 9.46663222s ago: executing program 2 (id=519): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000000), 0x0, 0xb80, &(0x7f0000000c40)="$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") chdir(&(0x7f0000000280)='./file0\x00') getdents(0xffffffffffffffff, 0x0, 0x0) llistxattr(&(0x7f0000000580)='./file1\x00', 0x0, 0xffffffffffffffbd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x4080) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 8.415768487s ago: executing program 2 (id=520): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0xd19, 0x0, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0xcf6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0x4000000000000181) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xb8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x11, 0x3, 0x2ff, &(0x7f0000000100)) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xa9, 0x0, 0xf1, 0x1}) 7.438787746s ago: executing program 2 (id=521): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081074e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x1, 0x0, "1ac14097b1cb0c926b36cce91131858f73a5a5eed84e9608b399620d17249186cc24ceb201b86e9d91b81646448494c59d0bb17530f92b1f2d50473f905840"}, 0x60) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f00000001c0)="944b53671a56fe815931169b5777dbfba6a03d4f19cd02cc5b2514d75d0c1592d58c32772b6140b3d3b2166e67730916aa593d2e93eaeae3a34244cda6d12662b15a66cd4df35973c4d7bcdbf8bfede4d29e5af3065b2a6f3653222e6b57b8ba37bfa2be54eb47023c399728d9f251324ae5d875ab6d1f543ff21b808072d53769015ef96bc1655d3b0792328539ef9ac07b63eae55e4029edb09b64fd023daa29") r6 = socket$kcm(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) io_setup(0xffff, &(0x7f0000000140)=0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04050400c80027"], 0x7) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) io_submit(r8, 0x7, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x2, r6, &(0x7f0000000280)="1bdedcd110da9346c17d847d602e45dee630a0d4ad9b043715df65f05a26bb935938d4840cd19f23b866096fd49fecacce69253f6a77e5be25ea7512dba432cef041295ccd96344b02d73d0cd1d96b36e140aead51e21aaa", 0x58, 0x0, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb, 0x3, r1, &(0x7f0000000340)="63a3acd15a89738c2a80faa1912ffe5e1048f208645e090f1f5259013ba6d67463a80c0bd5e2e089bdc3a6f42af6", 0x2e, 0x9, 0x0, 0x2, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f00000003c0)="156f565faf6d454f8ba2cba9c1a228b320e91508bc305552bb1aa9286727e51a8498ffeee4fc56cfd5a54e2120438ba762d18afaf023fc20c341b4304df34051ccbb1761214e4397775d8f4590b41dfe68a01d7b0c57b76aa9be0f45a4754954dc488942a3a155d51a8b93eb5aed1763ae6fb41a9053234687b2909bcf87c197", 0x80, 0x200, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x1ff, r7, &(0x7f0000000480)="03dd7408c9164eb9013807333f9cd29f32f788c51196f731707f1dd87ac2ceefbaf1a3ff452b4fe315d318e7ed81cb1a9d599901bedfc8936585a5627e28d439ddd5b82ddd571a090cc4c14c838d7c4bc4c331ce5866dddbfba6465ae18c0e414c1d8081b32543a362252cb8d20e0b3aee560f2c368037759dbbd5a63f2cf3b50d8d1dda2a68c1676f84bdf24c8e124786e8f0298270d799fb9d67f6ca2616f2f4985fca49a28002e1c34fbb6610ad86", 0xb0, 0x8, 0x0, 0x1, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x2, r9, &(0x7f0000000580)="510189ce21d316aab3134873a4b0e29cb73a6d0042594a8eb8a3253ddc7b97bf6a7bbe2b1e91f3b225503617b31e4e05a67ac8bc136373c50cc937616eaa19a15a364c6e988883a78ffe5e4f21f6ba4c07185ba1f1ed3cdaefb7", 0x5a, 0x2, 0x0, 0x4, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1a67, r3, &(0x7f0000000640)="c7b729e9935a2916770354a6c4993102463ee9c6866ba78c4d322684526cbe56e4c6b58b211d75764dcd9c0abf57dfd06319b4d481fc00b58b", 0x39, 0x7, 0x0, 0x1, r7}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x101, r0, &(0x7f0000000880)="1c144d48be0f469f8c2f71341f17b6e79fc5d74788389eb185617d43198af01a7689dce6a55d9aeecaea048c77fb0fbafa198ec7fc397521e0d98d62379d7433bb5b47d6fec62d6637e5890b93b3306d64ba0cd8bb322951e7596970c9ff4e305364fab12f5f53f32caab5e66839c1209f92d60e2fd4048380b3ee789e1965ffb019d251949a947337f5ab98536785209f8a9d7951e695ecfe7207708546be7d21fe548b17b87c28c7dbe0df76cd8d52307dde3e685818c28c170145edf2", 0xbe, 0x3, 0x0, 0x3, r1}]) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r3) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90124fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x400000, 0x54f}) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 7.297433349s ago: executing program 4 (id=522): r0 = socket$inet6_udp(0xa, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@nodiscard}, {}, {@discard}]}, 0x1, 0xa07, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x80186e84, &(0x7f0000000180)) sched_setscheduler(0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r5 = syz_open_dev$radio(&(0x7f00000001c0), 0x2, 0x2) r6 = dup(r5) read$FUSE(r6, &(0x7f00000010c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.226582656s ago: executing program 3 (id=523): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r1 = fsopen(&(0x7f0000000480)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) dup3(r2, r1, 0x0) 5.9885796s ago: executing program 4 (id=524): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001100)={0x0, 0x0, 0x40}, &(0x7f00000018c0), &(0x7f0000001900)) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x11b'}, {0x20, '\xb1\x12\xe88;\xa7\xab\xfa\x00\x00\x00\x00\x00\x00\x00\x00?r\x1e\x0f\x84\xeaA\f\xa3\xe9\xe9.\'S\xd7\x84=)A;f\xabR6\x00'}]}, 0xfffffed4) 5.972761081s ago: executing program 3 (id=525): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) setpgid(0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000003dc0)={0x800, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000009c0), {}, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r1, 0x0, r1, r1, r1, r1, r1], 0x7, {r4}}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.858533564s ago: executing program 3 (id=526): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000300)='./file3/file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") sync() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000280)='./file3/file0\x00', &(0x7f0000000240)='aufs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x389d778c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r2 = dup(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1ca) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ff4f19fe6b85f2339b325756b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f0000000000"], 0x1, 0x17c, &(0x7f0000000a40)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000080)={0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002dbd7000ffdbdf25090000000500150001000000080014001a00000005001300b8000000080014000200000005001d00190000000500130003000000050013001900000005001d000e00000005001d000000"], 0x64}, 0x1, 0x0, 0x0, 0x1884}, 0x44890) socket$nl_route(0x10, 0x3, 0x0) 4.109685593s ago: executing program 0 (id=475): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() fsetxattr$trusted_overlay_origin(r0, &(0x7f0000001200), 0x0, 0x0, 0x3) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000011c0), 0x5, 0x40000002, 0x0, &(0x7f0000048000), 0xffffffff) 4.108778973s ago: executing program 2 (id=535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000000)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 2.161353612s ago: executing program 0 (id=527): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@delalloc}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcadbd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x13, 0x0, 0x8, 0x2}, 0x10}}, 0x10) 2.161151872s ago: executing program 2 (id=528): io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) 1.121481808s ago: executing program 2 (id=529): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@err_cont}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") truncate(0x0, 0x1) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x171c, 0x0, 0x0, 0x0, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffefffff5aff000001"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=530): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac405ff0008000071306a000000000095000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = semget$private(0x0, 0x5, 0x600) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) semop(r5, 0x0, 0x0) semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) kernel console output (not intermixed with test programs): d solve the problem. [ 182.598714][ T5260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.885853][ T5260] device hsr_slave_0 entered promiscuous mode [ 182.911780][ T5346] netlink: 'syz.0.264': attribute type 29 has an invalid length. [ 182.960564][ T5260] device hsr_slave_1 entered promiscuous mode [ 182.985809][ T5260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.079346][ T5260] Cannot create hsr debugfs directory [ 183.393705][ T5346] netlink: 'syz.0.264': attribute type 29 has an invalid length. [ 183.683282][ T5355] netlink: 'syz.0.264': attribute type 29 has an invalid length. [ 183.772294][ T3650] Bluetooth: hci2: command tx timeout [ 183.915915][ T5343] loop1: detected capacity change from 0 to 32768 [ 183.953671][ T5343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.263 (5343) [ 184.026349][ T5343] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.063631][ T5343] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 184.102344][ T5343] BTRFS info (device loop1): setting nodatacow, compression disabled [ 184.110756][ T5343] BTRFS info (device loop1): enabling auto defrag [ 184.142768][ T5343] BTRFS info (device loop1): max_inline at 0 [ 184.161609][ T5340] loop2: detected capacity change from 0 to 40427 [ 184.178558][ T5343] BTRFS info (device loop1): using free space tree [ 184.407963][ T5374] input: syz1 as /devices/virtual/input/input8 [ 184.584650][ T5340] F2FS-fs (loop2): invalid crc value [ 184.795798][ T5340] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 186.015695][ T5343] BTRFS error (device loop1): open_ctree failed [ 186.963804][ T5409] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 187.024209][ T5415] loop3: detected capacity change from 0 to 256 [ 188.335792][ T5428] loop1: detected capacity change from 0 to 128 [ 189.382110][ C0] sched: RT throttling activated [ 190.390719][ T5428] EXT4-fs: error -4 creating inode table initialization thread [ 190.400434][ T5428] EXT4-fs (loop1): mount failed [ 190.982407][ T5427] team0: Port device team_slave_1 removed [ 191.288522][ T5260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.328450][ T5260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.371713][ T5453] loop2: detected capacity change from 0 to 512 [ 191.390239][ T5260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.465405][ T5260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.476144][ T5453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.491827][ T5453] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 192.192879][ T5260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.274450][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.323218][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.359166][ T5260] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.381242][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.407828][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.433852][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.440983][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.505882][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.524778][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.558169][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.589044][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.596809][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.606590][ T3745] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 192.630500][ T3745] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 192.645340][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.664309][ T3745] EXT4-fs (loop2): This should not happen!! Data will be lost [ 192.664309][ T3745] [ 192.675597][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.687864][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.697448][ T3745] EXT4-fs (loop2): Total free blocks count 0 [ 192.704548][ T3745] EXT4-fs (loop2): Free/Dirty block details [ 192.713559][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.742350][ T3745] EXT4-fs (loop2): free_blocks=65280 [ 192.747857][ T3745] EXT4-fs (loop2): dirty_blocks=31 [ 192.853201][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.855671][ T3745] EXT4-fs (loop2): Block reservation details [ 192.868158][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.995954][ T3745] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 193.062717][ T4191] EXT4-fs (loop2): unmounting filesystem. [ 193.599295][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.643489][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.652401][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.663202][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.676185][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.687243][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.915070][ T5497] loop1: detected capacity change from 0 to 128 [ 193.994675][ T3652] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.068305][ T5468] loop0: detected capacity change from 0 to 32768 [ 194.185677][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193166][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.251791][ T5505] loop1: detected capacity change from 0 to 8 [ 194.321775][ T5468] XFS (loop0): Mounting V5 Filesystem [ 194.379213][ T3652] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.573362][ T5468] XFS (loop0): Ending clean mount [ 196.482322][ T3647] XFS (loop0): Unmounting Filesystem [ 197.684998][ T5531] loop2: detected capacity change from 0 to 512 [ 197.779746][ T5531] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.799435][ T5531] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 197.997310][ T5531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 198.030043][ T5531] System zones: 1-12 [ 198.101894][ T5531] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.291: corrupted in-inode xattr [ 198.191718][ T5531] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.291: couldn't read orphan inode 15 (err -117) [ 198.216308][ T5531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.408948][ T5531] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 255: comm syz.2.291: lblock 2 mapped to illegal pblock 255 (length 1) [ 198.541684][ T5531] EXT4-fs warning (device loop2): ext4_dx_find_entry:1796: inode #2: lblock 2: comm syz.2.291: error -117 reading directory block [ 198.786015][ T5553] loop0: detected capacity change from 0 to 8192 [ 198.814001][ T5553] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.830331][ T26] audit: type=1800 audit(1727555326.291:9): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.293" name="bus" dev="loop0" ino=1048620 res=0 errno=0 [ 199.419304][ T5561] program syz.1.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.499170][ T3650] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 199.985570][ T4191] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz-executor: Unrecognised inode hash code 84 [ 200.000312][ T4191] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 200.032627][ T4191] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /37/file0: bad entry in directory: directory entry overrun - offset=0, inode=684770115, rec_len=3636, size=1024 fake=0 [ 200.097860][ T4191] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 255: comm syz-executor: lblock 2 mapped to illegal pblock 255 (length 1) [ 200.130080][ T4191] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 255: comm syz-executor: lblock 2 mapped to illegal pblock 255 (length 1) [ 200.173097][ T4191] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 255: comm syz-executor: lblock 2 mapped to illegal pblock 255 (length 1) [ 200.659324][ T5565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 201.032465][ T5260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.047083][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.062385][ T4191] EXT4-fs (loop2): unmounting filesystem. [ 201.150881][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.272342][ T3679] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 201.330238][ T3745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.642817][ T3679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.656482][ T3679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.691586][ T3745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.704397][ T3679] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 201.727234][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.781383][ T3679] usb 4-1: config 0 descriptor?? [ 201.882810][ T3745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.064436][ T3745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.274736][ T3679] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0 [ 202.314549][ T3679] hid-multitouch 0003:1FD2:6007.0004: item fetching failed at offset 1/5 [ 202.356228][ T3679] hid-multitouch: probe of 0003:1FD2:6007.0004 failed with error -22 [ 202.427520][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.447968][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.476747][ T3679] usb 4-1: USB disconnect, device number 6 [ 202.586406][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.608653][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.649321][ T5260] device veth0_vlan entered promiscuous mode [ 202.664666][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.690223][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.746672][ T5260] device veth1_vlan entered promiscuous mode [ 202.755053][ T3646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.767468][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.776685][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.832643][ T3646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.848223][ T3646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.004538][ T3646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.022754][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.822324][ T3650] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 203.834512][ T3650] Bluetooth: hci4: Injecting HCI hardware error event [ 203.883788][ T3650] Bluetooth: hci4: hardware error 0x00 [ 203.894994][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.977142][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.067409][ T5260] device veth0_macvtap entered promiscuous mode [ 204.080840][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.202333][ T3646] Bluetooth: hci3: command tx timeout [ 205.230389][ T5260] device veth1_macvtap entered promiscuous mode [ 205.644689][ T5260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.705129][ T5260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.741950][ T5656] loop0: detected capacity change from 0 to 512 [ 205.770256][ T5260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.786444][ T5656] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 205.810469][ T5260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.848114][ T5656] EXT4-fs (loop0): invalid journal inode [ 205.883133][ T5260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.899973][ T5656] EXT4-fs (loop0): can't get journal size [ 205.931602][ T5656] EXT4-fs (loop0): 1 truncate cleaned up [ 205.943923][ T5260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.990865][ T5260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.012583][ T3650] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 206.021154][ T5656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.071446][ T5260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.269886][ T5260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.348135][ T5666] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.307: bg 0: block 255: padding at end of block bitmap is not set [ 206.801082][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 206.901865][ T5670] Bluetooth: MGMT ver 1.22 [ 207.091033][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.113667][ T5675] loop3: detected capacity change from 0 to 16 [ 207.131003][ T5675] erofs: (device loop3): mounted with root inode @ nid 36. [ 207.151587][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.351755][ T3650] Bluetooth: hci3: command tx timeout [ 208.613901][ T5678] syz.3.310: attempt to access beyond end of device [ 208.613901][ T5678] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 208.997450][ T5260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.043570][ T5260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.065322][ T5260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.078574][ T5260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.089423][ T5260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.101867][ T5260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.112767][ T5260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.124504][ T5260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.138983][ T5260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.479388][ T3646] Bluetooth: hci3: command tx timeout [ 209.498642][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.518615][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.614039][ T5260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.634267][ T5260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.672432][ T5260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.689999][ T5689] loop3: detected capacity change from 0 to 128 [ 209.707587][ T5260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.765691][ T3652] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.778040][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 209.828087][ T5621] chnl_net:caif_netlink_parms(): no params data found [ 210.024582][ T5689] loop3: detected capacity change from 0 to 8 [ 210.072200][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 210.113691][ T14] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 210.252465][ T14] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 210.271029][ T14] usb 1-1: can't read configurations, error -61 [ 210.442343][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 210.463867][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.475326][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.519891][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.618883][ T3745] device hsr_slave_0 left promiscuous mode [ 210.639973][ T3745] device hsr_slave_1 left promiscuous mode [ 210.687192][ T3745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.702219][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 210.728424][ T3745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.752753][ T14] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 210.774352][ T3745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.787872][ T3745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.803022][ T3745] device bridge_slave_1 left promiscuous mode [ 210.811641][ T3745] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.845690][ T3745] device bridge_slave_0 left promiscuous mode [ 210.859866][ T3745] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.893949][ T14] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 210.914758][ T14] usb 1-1: can't read configurations, error -61 [ 210.936336][ T14] usb usb1-port1: attempt power cycle [ 211.012614][ T3745] device veth1_macvtap left promiscuous mode [ 211.032959][ T3745] device veth0_macvtap left promiscuous mode [ 211.051696][ T3745] device veth1_vlan left promiscuous mode [ 211.076863][ T3745] device veth0_vlan left promiscuous mode [ 211.372718][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.495439][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 211.532253][ T3646] Bluetooth: hci3: command tx timeout [ 211.567818][ T14] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 212.352223][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 212.365008][ T5718] loop1: detected capacity change from 0 to 256 [ 212.373711][ T14] usb 1-1: can't read configurations, error -71 [ 212.383935][ T5718] FAT-fs (loop1): Unrecognized mount option "smaner=00000000000000000000" or missing value [ 212.446051][ T4021] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.652856][ T5718] loop1: detected capacity change from 0 to 40427 [ 212.702884][ T5718] F2FS-fs (loop1): invalid crc value [ 212.718802][ T5718] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.753367][ T5718] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 212.767328][ T5718] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 212.983984][ T5725] loop0: detected capacity change from 0 to 1024 [ 213.708876][ T4290] syz-executor: attempt to access beyond end of device [ 213.708876][ T4290] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.156481][ T5730] loop0: detected capacity change from 0 to 4096 [ 215.237891][ T5730] NILFS (loop0): invalid segment: Checksum error in segment payload [ 215.254013][ T5730] NILFS (loop0): trying rollback from an earlier position [ 215.351305][ T5730] NILFS (loop0): recovery complete [ 215.661535][ T5744] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.238354][ T5746] loop1: detected capacity change from 0 to 256 [ 217.311862][ T5746] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097162) [ 217.682313][ T26] audit: type=1800 audit(1727555344.731:10): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.322" name="file1" dev="loop1" ino=1048621 res=0 errno=0 [ 217.840534][ T5751] loop1: detected capacity change from 0 to 256 [ 217.992588][ T5751] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.195651][ T5751] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 219.251075][ T5751] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 219.433912][ T26] audit: type=1800 audit(1727555346.891:11): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.325" name="bus" dev="loop1" ino=1048622 res=0 errno=0 [ 219.567321][ T3745] team0 (unregistering): Port device team_slave_1 removed [ 219.732921][ T3745] team0 (unregistering): Port device team_slave_0 removed [ 219.889348][ T3745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.023338][ T3745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.139322][ T5768] loop1: detected capacity change from 0 to 128 [ 221.281569][ T3745] bond0 (unregistering): Released all slaves [ 221.282340][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 221.493514][ T3737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.512448][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.529981][ T3737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.548491][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.770991][ T5621] device bridge_slave_0 entered promiscuous mode [ 224.956882][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.012676][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.019814][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.057648][ T7] usb 4-1: unable to read config index 0 descriptor/all [ 225.067778][ T7] usb 4-1: can't read configurations, error -71 [ 225.123713][ T5621] device bridge_slave_1 entered promiscuous mode [ 225.521005][ T26] audit: type=1326 audit(1727555352.971:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 225.543484][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.752622][ T26] audit: type=1326 audit(1727555353.011:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 225.774884][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.897349][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.953971][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.973972][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 225.983584][ T26] audit: type=1326 audit(1727555353.011:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 226.006224][ T26] audit: type=1326 audit(1727555353.141:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 226.031630][ T26] audit: type=1326 audit(1727555353.141:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 226.053992][ T26] audit: type=1326 audit(1727555353.141:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 226.076622][ T26] audit: type=1326 audit(1727555353.151:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 226.104327][ T26] audit: type=1326 audit(1727555353.161:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 226.126668][ T26] audit: type=1326 audit(1727555353.161:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 226.150575][ T26] audit: type=1326 audit(1727555353.191:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 226.235324][ T5621] team0: Port device team_slave_0 added [ 226.273663][ T5621] team0: Port device team_slave_1 added [ 226.414367][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.423044][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.450419][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.463581][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.643845][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.661675][ T7] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.774215][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.869227][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.092231][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.114699][ T5813] loop4: detected capacity change from 0 to 764 [ 227.139642][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.155044][ T5813] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.208968][ T5813] Symlink component flag not implemented [ 227.215138][ T5813] Symlink component flag not implemented [ 227.221417][ T5813] Symlink component flag not implemented (128) [ 227.227665][ T5813] Symlink component flag not implemented (122) [ 227.290273][ T5790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.184954][ T7] usb 4-1: USB disconnect, device number 8 [ 228.291083][ T5621] device hsr_slave_0 entered promiscuous mode [ 228.318131][ T5621] device hsr_slave_1 entered promiscuous mode [ 228.332786][ T5621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.366345][ T5621] Cannot create hsr debugfs directory [ 228.405072][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.569719][ T5831] loop4: detected capacity change from 0 to 128 [ 228.840483][ T5831] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 229.160033][ T5826] loop0: detected capacity change from 0 to 4096 [ 229.375503][ T5826] NILFS (loop0): invalid segment: Checksum error in segment payload [ 229.412407][ T5826] NILFS (loop0): trying rollback from an earlier position [ 230.647460][ T5826] NILFS (loop0): recovery complete [ 230.782151][ T5843] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.181086][ T5857] dlm: no local IP address has been set [ 231.187398][ T5857] dlm: cannot start dlm midcomms -107 [ 231.195918][ T3646] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 231.207416][ T3646] Bluetooth: hci2: Injecting HCI hardware error event [ 231.256077][ T3650] Bluetooth: hci2: hardware error 0x00 [ 231.762186][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 231.898867][ T5859] loop4: detected capacity change from 0 to 2048 [ 232.051676][ T5859] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 232.087839][ T5859] UDF-fs: Scanning with blocksize 512 failed [ 232.666502][ T5859] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 232.682614][ T5859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.722151][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 232.925358][ T7] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 233.083043][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.116262][ T7] usb 4-1: config 0 descriptor?? [ 233.841665][ T3650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 234.010052][ T7] usb 4-1: can't set config #0, error -71 [ 234.218430][ T7] usb 4-1: USB disconnect, device number 9 [ 234.295032][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 234.414212][ T5881] loop1: detected capacity change from 0 to 128 [ 234.443010][ T5881] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 234.462182][ T5881] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 234.699463][ T5889] loop4: detected capacity change from 0 to 256 [ 234.726300][ T5881] syz.1.349 (pid 5881) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 235.889436][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.949182][ T5889] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 235.961510][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 236.449380][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.254126][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.264493][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.287309][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.469644][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.022220][ T7] usb 4-1: string descriptor 0 read error: -71 [ 238.028837][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.153123][ T4290] EXT4-fs (loop1): unmounting filesystem. [ 238.379894][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.467668][ T5977] loop1: detected capacity change from 0 to 16 [ 238.498818][ T5980] loop0: detected capacity change from 0 to 512 [ 238.505636][ T7] usb 4-1: can't set config #1, error -71 [ 238.524308][ T5977] erofs: (device loop1): mounted with root inode @ nid 36. [ 238.546587][ T7] usb 4-1: USB disconnect, device number 10 [ 238.588138][ T5980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.605125][ T5980] ext4 filesystem being mounted at /91/bus supports timestamps until 2038 (0x7fffffff) [ 238.801477][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.247626][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.375178][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.475737][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.523322][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 240.594705][ T5941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.661987][ T5941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.699128][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.706316][ T5941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.715248][ T5941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.914300][ T6000] loop4: detected capacity change from 0 to 512 [ 241.906432][ T6005] loop0: detected capacity change from 0 to 256 [ 242.005462][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.173724][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.207936][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.215553][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.920043][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.251461][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.305486][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.376718][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.417791][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.602465][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.644166][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.791191][ T5621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.812042][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.836904][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.869342][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.908126][ T6022] loop3: detected capacity change from 0 to 1024 [ 243.926102][ T6022] hfsplus: extend alloc file! (8192,65536,366) [ 244.001030][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.062888][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.085825][ T5791] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.086189][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.199849][ T6028] loop0: detected capacity change from 0 to 512 [ 244.208239][ T6029] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 244.329951][ T6028] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 244.443952][ T6028] EXT4-fs (loop0): orphan cleanup on readonly fs [ 244.508264][ T6028] __quota_error: 80 callbacks suppressed [ 244.508283][ T6028] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 244.542584][ T6028] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.611677][ T6028] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 244.673268][ T6028] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.363: casefold flag without casefold feature [ 244.766631][ T6028] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.363: couldn't read orphan inode 16 (err -117) [ 244.903781][ T6028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 244.981767][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.138739][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.198046][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.558240][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.578302][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.723372][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.736941][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 245.760898][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.781361][ T5621] device veth0_vlan entered promiscuous mode [ 245.809266][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.828201][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.915576][ T5621] device veth1_vlan entered promiscuous mode [ 246.626424][ T5621] device veth0_macvtap entered promiscuous mode [ 246.643625][ T5621] device veth1_macvtap entered promiscuous mode [ 246.658073][ T6066] loop4: detected capacity change from 0 to 128 [ 246.712401][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.742795][ T6066] EXT4-fs (loop4): Test dummy encryption mode enabled [ 246.750861][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.783712][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.794830][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.822652][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.879106][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.329028][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.393371][ T6066] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 248.402111][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.425612][ T6066] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038 (0x7fffffff) [ 248.452215][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.870644][ T6092] loop3: detected capacity change from 0 to 128 [ 248.877035][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.888951][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.901333][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.932135][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.962795][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.012649][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.034734][ T5835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.075983][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.108153][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.139345][ T6092] loop3: detected capacity change from 0 to 8 [ 249.161357][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.216012][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.276546][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.307127][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.335386][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.364418][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.382495][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.395770][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.448325][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.480979][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.523446][ T5260] EXT4-fs (loop4): unmounting filesystem. [ 250.080719][ T5835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.082659][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.114311][ T5621] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.123644][ T5621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.134286][ T5621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.151370][ T5621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.566441][ T6111] syz.1.375[6111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.566541][ T6111] syz.1.375[6111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.808542][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 252.812768][ T6121] loop4: detected capacity change from 0 to 128 [ 254.483194][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 254.747100][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.788003][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.834193][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.855688][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.889686][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.653000][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.659540][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.715226][ T6135] loop4: detected capacity change from 0 to 8 [ 255.732694][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.458861][ T6139] loop2: detected capacity change from 0 to 512 [ 256.588781][ T6139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.602472][ T6139] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 256.837310][ T5621] EXT4-fs (loop2): unmounting filesystem. [ 257.988933][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.001668][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.011489][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.019616][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.027783][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 258.043602][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.224509][ T6173] syz.2.382 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 258.607030][ T6181] loop3: detected capacity change from 0 to 8 [ 258.621342][ T6181] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 259.090279][ T6181] cramfs: bad data blocksize 4294966936 [ 259.096355][ T6181] cramfs: bad data blocksize 524460 [ 259.101705][ T6181] cramfs: bad data blocksize 4294966936 [ 259.152371][ T26] audit: type=1800 audit(1727555386.571:102): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.384" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 259.480128][ T3744] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.623582][ T3715] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 259.650761][ T6187] loop3: detected capacity change from 0 to 128 [ 259.745140][ T6187] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 260.093870][ T3651] Bluetooth: hci4: command tx timeout [ 260.544419][ T3715] usb 3-1: Using ep0 maxpacket: 16 [ 260.744730][ T3744] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.194284][ T3651] Bluetooth: hci4: command tx timeout [ 262.812399][ T3650] Bluetooth: hci1: command 0x0406 tx timeout [ 262.834398][ T3744] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.958714][ T6206] loop3: detected capacity change from 0 to 128 [ 263.841773][ T3744] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.011678][ T6216] loop3: detected capacity change from 0 to 8 [ 264.140197][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 264.182434][ T3715] usb 3-1: device descriptor read/all, error -71 [ 264.227124][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 264.252567][ T3646] Bluetooth: hci4: command tx timeout [ 264.621672][ T6165] chnl_net:caif_netlink_parms(): no params data found [ 265.360194][ T6233] loop2: detected capacity change from 0 to 4096 [ 266.332664][ T3646] Bluetooth: hci4: command tx timeout [ 266.560564][ T6249] loop1: detected capacity change from 0 to 1024 [ 266.628494][ T6249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.864135][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.871879][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.937592][ T6165] device bridge_slave_0 entered promiscuous mode [ 266.971246][ T6249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 267.760483][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.795096][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.813891][ T6165] device bridge_slave_1 entered promiscuous mode [ 267.856662][ T6275] loop2: detected capacity change from 0 to 128 [ 267.925968][ T6275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 267.953297][ T6275] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 268.209057][ T6165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.415166][ T6283] overlayfs: upper fs needs to support d_type. [ 268.518525][ T4290] EXT4-fs (loop1): unmounting filesystem. [ 268.854928][ T6165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.901568][ T5621] EXT4-fs (loop2): unmounting filesystem. [ 269.079886][ T6165] team0: Port device team_slave_0 added [ 269.108052][ T6293] loop2: detected capacity change from 0 to 512 [ 269.124464][ T6165] team0: Port device team_slave_1 added [ 269.141035][ T6293] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 269.141075][ T6293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 269.161285][ T6293] EXT4-fs (loop2): 1 truncate cleaned up [ 269.161319][ T6293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 269.402631][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.443614][ T5621] EXT4-fs (loop2): unmounting filesystem. [ 269.459713][ T6307] loop3: detected capacity change from 0 to 128 [ 269.522874][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.665802][ T6165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.824307][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 269.837879][ T6307] loop3: detected capacity change from 0 to 8 [ 269.862994][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 269.912167][ T3679] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 269.966747][ T6318] i2c i2c-0: Invalid block write size 50 [ 270.739779][ T5835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.768037][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.792304][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.864579][ T6165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.018215][ T3679] usb 3-1: Using ep0 maxpacket: 16 [ 271.132992][ T6165] device hsr_slave_0 entered promiscuous mode [ 271.142261][ T3679] usb 3-1: config 0 has no interfaces? [ 271.150139][ T6165] device hsr_slave_1 entered promiscuous mode [ 271.170388][ T6165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.197690][ T6165] Cannot create hsr debugfs directory [ 271.311414][ T6324] loop1: detected capacity change from 0 to 2048 [ 271.333743][ T3679] usb 3-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 271.354893][ T6324] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 271.380091][ T3679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.429145][ T3679] usb 3-1: Product: syz [ 271.449634][ T3679] usb 3-1: Manufacturer: syz [ 271.491070][ T3679] usb 3-1: SerialNumber: syz [ 271.516907][ T3744] device hsr_slave_0 left promiscuous mode [ 271.532995][ T3744] device hsr_slave_1 left promiscuous mode [ 271.551469][ T3679] usb 3-1: config 0 descriptor?? [ 271.586026][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.609387][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.646433][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.674392][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.690946][ T3744] device bridge_slave_1 left promiscuous mode [ 271.707610][ T3744] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.734603][ T3744] device bridge_slave_0 left promiscuous mode [ 271.745930][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.874860][ T3744] device veth1_macvtap left promiscuous mode [ 271.882773][ T3744] device veth0_macvtap left promiscuous mode [ 271.889283][ T3744] device veth1_vlan left promiscuous mode [ 271.909157][ T3744] device veth0_vlan left promiscuous mode [ 271.915999][ T4809] usb 3-1: USB disconnect, device number 5 [ 272.112244][ T3679] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 272.402175][ T3679] usb 2-1: Using ep0 maxpacket: 8 [ 272.582148][ T3679] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 272.592593][ T3679] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.609231][ T3679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.619812][ T3679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.630310][ T3679] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.644225][ T3679] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.653309][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.722192][ T5040] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 272.925213][ T3679] usb 2-1: GET_CAPABILITIES returned 0 [ 272.931055][ T3679] usbtmc 2-1:16.0: can't read capabilities [ 272.981992][ T3744] team0 (unregistering): Port device team_slave_1 removed [ 273.038701][ T3744] team0 (unregistering): Port device team_slave_0 removed [ 273.084872][ T3744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.129880][ T3744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.142375][ T5040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.162860][ T5040] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 273.185396][ T5040] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 273.194813][ T5040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.221158][ T5040] usb 4-1: config 0 descriptor?? [ 273.277691][ T5040] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 273.297746][ T5040] dvb-usb: bulk message failed: -22 (3/0) [ 273.309992][ T4809] usb 2-1: USB disconnect, device number 3 [ 273.316520][ T6334] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 273.336076][ T6355] usbtmc 2-1:16.0: usb_control_msg returned -19 [ 273.344758][ T5040] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 273.389524][ T5040] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 273.422333][ T5040] usb 4-1: media controller created [ 273.430742][ T5040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.631316][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.632729][ T5040] dvb-usb: bulk message failed: -22 (6/0) [ 273.650864][ T5040] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 273.667498][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.680470][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.702586][ T5040] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 273.829799][ T5040] dvb-usb: schedule remote query interval to 150 msecs. [ 273.905494][ T5040] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 274.048122][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.165845][ T4723] dvb-usb: bulk message failed: -22 (1/0) [ 274.280391][ T4723] dvb-usb: error while querying for an remote control event. [ 274.430073][ T3625] usb 4-1: USB disconnect, device number 11 [ 274.446782][ T6362] loop1: detected capacity change from 0 to 512 [ 274.481907][ T6362] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 274.537059][ T6362] EXT4-fs (loop1): 1 truncate cleaned up [ 274.548414][ T6362] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 274.677318][ T26] audit: type=1800 audit(1727555402.131:103): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 275.395473][ T4290] EXT4-fs (loop1): unmounting filesystem. [ 275.409377][ T3625] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 275.523934][ T3744] bond0 (unregistering): Released all slaves [ 275.663557][ C1] net_ratelimit: 11 callbacks suppressed [ 275.663575][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 276.481679][ T26] audit: type=1804 audit(1727555403.931:104): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.420" name="/newroot/41/bus/bus" dev="overlay" ino=247 res=1 errno=0 [ 276.564627][ T6375] Invalid ELF header magic: != ELF [ 276.625012][ T6379] ALSA: seq fatal error: cannot create timer (-22) [ 276.661238][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 276.698936][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 276.867853][ T6384] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2050 (only 8 groups) [ 277.084973][ T6385] loop3: detected capacity change from 0 to 128 [ 277.136681][ T6374] loop2: detected capacity change from 0 to 32768 [ 277.221082][ T6392] program syz.4.425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.375565][ T6374] XFS (loop2): Mounting V5 Filesystem [ 277.382971][ T6398] Zero length message leads to an empty skb [ 277.564907][ T6374] XFS (loop2): Ending clean mount [ 277.591891][ T6374] XFS (loop2): Quotacheck needed: Please wait. [ 277.669160][ T6399] loop3: detected capacity change from 0 to 8 [ 277.675009][ T6410] loop4: detected capacity change from 0 to 512 [ 277.711818][ T6410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 277.712397][ T4809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 277.763261][ T6374] XFS (loop2): Quotacheck: Done. [ 277.799344][ T6410] System zones: 0-2, 18-18, 34-34 [ 277.885613][ T6410] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.427: bg 0: block 248: padding at end of block bitmap is not set [ 277.935420][ T26] audit: type=1804 audit(1727555405.391:105): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.419" name="/newroot/10/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 277.975565][ T6410] Quota error (device loop4): write_blk: dquota write failed [ 277.988939][ T6410] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 277.999512][ T6410] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.427: Failed to acquire dquot type 1 [ 278.099577][ T6410] EXT4-fs (loop4): 1 truncate cleaned up [ 278.112562][ T4809] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 278.128566][ T6410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.156344][ T4809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.183463][ T6410] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 278.204205][ T4809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.229222][ T4809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 278.250531][ T4809] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 278.255131][ T6165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.281360][ T4809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.305020][ T4809] usb 2-1: config 0 descriptor?? [ 278.436198][ T6165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.449925][ T5621] XFS (loop2): Unmounting Filesystem [ 278.472799][ T6165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.518105][ T6165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.905944][ T5260] EXT4-fs (loop4): unmounting filesystem. [ 279.097806][ T4809] nintendo 0003:057E:2009.0005: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 279.253117][ T4809] nintendo 0003:057E:2009.0005: failed reading SPI flash; ret=-38 [ 279.278876][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.282716][ T4809] nintendo 0003:057E:2009.0005: using factory cal for left stick [ 279.331942][ T4809] nintendo 0003:057E:2009.0005: failed reading SPI flash; ret=-38 [ 279.332598][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.358660][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.371767][ T4809] nintendo 0003:057E:2009.0005: using factory cal for right stick [ 279.375625][ T6165] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.404428][ T4809] nintendo 0003:057E:2009.0005: failed reading SPI flash; ret=-38 [ 279.408669][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.431018][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.442437][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.449586][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.452810][ T4809] nintendo 0003:057E:2009.0005: Failed to read left stick cal, using defaults; e=-38 [ 279.475331][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.494500][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.514343][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.516693][ T4809] nintendo 0003:057E:2009.0005: failed reading SPI flash; ret=-38 [ 279.543229][ T4809] nintendo 0003:057E:2009.0005: Failed to read right stick cal, using defaults; e=-38 [ 279.543772][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.560135][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.562476][ T4809] nintendo 0003:057E:2009.0005: failed reading SPI flash; ret=-38 [ 279.570850][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.586911][ T4809] nintendo 0003:057E:2009.0005: using factory cal for IMU [ 279.606536][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.616217][ T4809] nintendo 0003:057E:2009.0005: failed reading SPI flash; ret=-38 [ 279.619883][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.638670][ T4809] nintendo 0003:057E:2009.0005: Failed to read IMU cal, using defaults; ret=-38 [ 279.643607][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.662855][ T4809] nintendo 0003:057E:2009.0005: Unable to read IMU calibration data [ 279.671323][ T6165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.682180][ T4809] nintendo 0003:057E:2009.0005: Failed to set report mode; ret=-38 [ 279.685046][ T6165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.713014][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.717017][ T4809] nintendo 0003:057E:2009.0005: Failed to initialize controller; ret=-38 [ 279.736470][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.757738][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.818129][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.827601][ T4809] nintendo 0003:057E:2009.0005: probe - fail = -38 [ 279.838197][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.843728][ T4809] nintendo: probe of 0003:057E:2009.0005 failed with error -38 [ 279.868306][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.890746][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.908405][ T4809] usb 2-1: USB disconnect, device number 4 [ 279.952362][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.238175][ T6425] loop4: detected capacity change from 0 to 32768 [ 280.429801][ T6425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.428 (6425) [ 280.464257][ T6425] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.477232][ T6425] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 281.754242][ T6425] BTRFS info (device loop4): use zlib compression, level 3 [ 281.763578][ T6425] BTRFS info (device loop4): using free space tree [ 282.232900][ T6463] loop3: detected capacity change from 0 to 256 [ 282.287830][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.310794][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.356788][ T6165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.520772][ T6425] BTRFS error (device loop4): open_ctree failed [ 282.534517][ T5835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (5835) [ 282.606070][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.625221][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.257788][ T6471] loop2: detected capacity change from 0 to 512 [ 283.297802][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.433'. [ 283.309953][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.327981][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.356196][ T6165] device veth0_vlan entered promiscuous mode [ 283.378600][ T5785] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.161951][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.269045][ T5040] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.338332][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.571286][ T6165] device veth1_vlan entered promiscuous mode [ 284.600055][ T6165] device veth0_macvtap entered promiscuous mode [ 284.614113][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 284.623113][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 284.641335][ T6165] device veth1_macvtap entered promiscuous mode [ 284.742332][ T5040] usb 2-1: Using ep0 maxpacket: 16 [ 284.806480][ T6495] loop3: detected capacity change from 0 to 256 [ 284.943003][ T5040] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.008097][ T5040] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 285.048665][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.075907][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.087631][ T5040] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 285.131932][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.148406][ T5040] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 285.314583][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.372647][ T5040] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.391569][ T5040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 285.419146][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.435001][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.447549][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.459486][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.618303][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.844884][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.983266][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.112152][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.125859][ T5040] usb 2-1: SerialNumber: syz [ 286.155319][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.173025][ T6474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 286.180264][ T6474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 286.209529][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.229094][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.320278][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.334326][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.345857][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.360422][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.383793][ T5040] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 286.405847][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.417931][ T5040] usb 2-1: USB disconnect, device number 5 [ 286.454017][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.480023][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.492809][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.515407][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.614060][ T6508] loop1: detected capacity change from 0 to 16 [ 286.640799][ T6508] erofs: (device loop1): mounted with root inode @ nid 36. [ 286.667889][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.681899][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.704125][ T6165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.908003][ T6165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.955921][ T6165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.255892][ T6165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.703402][ T6536] loop4: detected capacity change from 0 to 256 [ 288.731760][ T6536] exfat: Deprecated parameter 'utf8' [ 288.760470][ T6536] exfat: Deprecated parameter 'utf8' [ 288.837635][ T6536] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 288.855833][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.872181][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.893053][ T5040] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 288.937334][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.937499][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.967998][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.109909][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.222208][ T5040] usb 2-1: Using ep0 maxpacket: 8 [ 290.942859][ T5040] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=13.13 [ 290.951941][ T5040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.136269][ T5040] usb 2-1: config 0 descriptor?? [ 291.195783][ T5040] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 293.793239][ T3076] bcm5974 2-1:0.0: could not read from device [ 293.972161][ T3076] bcm5974 2-1:0.0: could not read from device [ 294.214138][ T5040] usb 2-1: USB disconnect, device number 6 [ 294.351336][ T3076] bcm5974 2-1:0.0: could not read from device [ 294.743262][ T3076] bcm5974 2-1:0.0: could not read from device [ 294.772843][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 294.903357][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 295.837546][ T6592] loop1: detected capacity change from 0 to 2048 [ 296.546348][ T6592] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.801653][ T6600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 297.592200][ T41] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 297.656805][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.668108][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.676794][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.686629][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.695017][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.703241][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.852824][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 298.090154][ T41] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16 [ 298.129017][ T41] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 299.027396][ T41] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.041417][ T41] usb 2-1: config 1 interface 0 has no altsetting 0 [ 299.087794][ T41] usb 2-1: string descriptor 0 read error: -71 [ 299.102229][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.163405][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.192285][ T41] usb 2-1: can't set config #1, error -71 [ 299.194209][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 299.200338][ T41] usb 2-1: USB disconnect, device number 7 [ 299.938761][ T3650] Bluetooth: hci1: command tx timeout [ 301.379921][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.392307][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.407535][ T6640] loop4: detected capacity change from 0 to 128 [ 301.438621][ T6604] device bridge_slave_0 entered promiscuous mode [ 301.681338][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.740838][ T6642] input: syz1 as /devices/virtual/input/input12 [ 302.398599][ T3650] Bluetooth: hci1: command tx timeout [ 302.518898][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.578531][ T6604] device bridge_slave_1 entered promiscuous mode [ 302.694494][ T6643] loop4: detected capacity change from 0 to 8 [ 303.587796][ T6649] loop0: detected capacity change from 0 to 512 [ 303.599570][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.735306][ T6649] EXT4-fs: Ignoring removed orlov option [ 303.745392][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.773197][ T6649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 303.838107][ T6653] loop2: detected capacity change from 0 to 256 [ 304.421751][ T3650] Bluetooth: hci1: command tx timeout [ 304.467811][ T6649] EXT4-fs (loop0): 1 truncate cleaned up [ 304.552334][ T6649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 304.647674][ T6604] team0: Port device team_slave_0 added [ 304.779206][ T6604] team0: Port device team_slave_1 added [ 305.352583][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.359553][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.459492][ T6165] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 305.512854][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.555326][ T6165] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 305.581351][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.591227][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.630316][ T6165] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 305.715667][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.716382][ T6165] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 305.782871][ T6165] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 305.870640][ T6165] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 305.898710][ T6165] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 305.953643][ T6165] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 305.978113][ T6165] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 306.014383][ T6604] device hsr_slave_0 entered promiscuous mode [ 306.014506][ T6165] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 306.067538][ T6604] device hsr_slave_1 entered promiscuous mode [ 306.078919][ T6661] loop1: detected capacity change from 0 to 2048 [ 306.092773][ T6604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.100482][ T6604] Cannot create hsr debugfs directory [ 306.191506][ T6661] loop1: p2 p3 p7 [ 306.268072][ C1] operation not supported error, dev loop1, sector 600 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 306.502798][ T3650] Bluetooth: hci1: command tx timeout [ 306.753468][ T6658] loop2: detected capacity change from 0 to 32768 [ 306.770961][ T6604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.854344][ T6658] XFS (loop2): Mounting V5 Filesystem [ 306.864707][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 306.964436][ T6658] XFS (loop2): Ending clean mount [ 306.995146][ T6658] XFS (loop2): Quotacheck needed: Please wait. [ 307.072287][ T6604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.138208][ T6658] XFS (loop2): Quotacheck: Done. [ 307.225000][ T26] audit: type=1804 audit(1727555434.681:106): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.467" name="/newroot/23/file0/bus" dev="loop2" ino=9290 res=1 errno=0 [ 307.259074][ T26] audit: type=1804 audit(1727555434.711:107): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.467" name="/newroot/23/file0/bus" dev="loop2" ino=9290 res=1 errno=0 [ 307.304592][ T6165] EXT4-fs (loop0): unmounting filesystem. [ 308.086492][ T5621] XFS (loop2): Unmounting Filesystem [ 308.138010][ T6604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.390116][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 308.412520][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 308.567236][ T6682] input: syz1 as /devices/virtual/input/input13 [ 309.119553][ T6604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.163324][ T3646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.255584][ T3646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.272726][ T3646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.283694][ T3646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.284615][ T26] audit: type=1326 audit(1727555436.751:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.4.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 309.313674][ T3646] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 309.321077][ T3646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.321235][ T26] audit: type=1326 audit(1727555436.771:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.4.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 309.357607][ T26] audit: type=1326 audit(1727555436.771:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.4.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 309.381289][ T26] audit: type=1326 audit(1727555436.771:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.4.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 309.406239][ T26] audit: type=1326 audit(1727555436.771:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.4.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 309.428680][ T26] audit: type=1326 audit(1727555436.771:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.4.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 309.502445][ T26] audit: type=1326 audit(1727555436.771:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.4.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 309.506529][ T6690] loop2: detected capacity change from 0 to 128 [ 309.560187][ T6690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 309.575431][ T5972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.577695][ T6690] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 309.606574][ T26] audit: type=1326 audit(1727555436.771:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.4.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402157dff9 code=0x7ffc0000 [ 310.330695][ T5972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.659581][ T5972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.703352][ T6698] device vlan2 entered promiscuous mode [ 310.717611][ T6698] device bridge0 entered promiscuous mode [ 310.730423][ T6698] device bridge0 left promiscuous mode [ 310.848703][ T5972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.884556][ T5621] EXT4-fs (loop2): unmounting filesystem. [ 310.946905][ T6604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.003162][ T6604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.153344][ T6604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.165671][ T6604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.604178][ T3650] Bluetooth: hci4: command tx timeout [ 311.924568][ T6700] kvm [6699]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 311.957931][ T6700] kvm [6699]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 312.121401][ T6684] chnl_net:caif_netlink_parms(): no params data found [ 312.149109][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.338933][ T6711] kvm [6710]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 312.413203][ T6711] kvm [6710]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 312.455130][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.472012][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.502882][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.520941][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.548865][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.580229][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.587449][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.691156][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.758437][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.783007][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.805708][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.812918][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.938416][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.988476][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.003283][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.053441][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.073763][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.093185][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.136271][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.184246][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.191345][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.249237][ T6684] device bridge_slave_0 entered promiscuous mode [ 313.337783][ T6604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.362999][ T6736] loop4: detected capacity change from 0 to 1024 [ 313.369424][ T6716] loop1: detected capacity change from 0 to 32768 [ 313.383369][ T6604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.458725][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.466140][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.474605][ T6684] device bridge_slave_1 entered promiscuous mode [ 313.487542][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.496396][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.507335][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.515980][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.539571][ T6716] XFS (loop1): Mounting V5 Filesystem [ 313.542650][ T6736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 313.566082][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.692204][ T3651] Bluetooth: hci4: command tx timeout [ 313.756150][ T6716] XFS (loop1): Ending clean mount [ 313.789353][ T6716] XFS (loop1): Quotacheck needed: Please wait. [ 313.900159][ T6716] XFS (loop1): Quotacheck: Done. [ 313.976788][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 313.976804][ T26] audit: type=1804 audit(1727555441.431:138): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.482" name="/newroot/82/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 314.031773][ T26] audit: type=1804 audit(1727555441.481:139): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.482" name="/newroot/82/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 314.067232][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.133521][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.251604][ T6736] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 314.272923][ T6736] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 844 with error 28 [ 314.300169][ T6684] team0: Port device team_slave_0 added [ 314.360439][ T4290] XFS (loop1): Unmounting Filesystem [ 314.383441][ T6736] EXT4-fs (loop4): This should not happen!! Data will be lost [ 314.383441][ T6736] [ 314.388848][ T6684] team0: Port device team_slave_1 added [ 314.428415][ T6736] EXT4-fs (loop4): Total free blocks count 0 [ 314.488122][ T6736] EXT4-fs (loop4): Free/Dirty block details [ 314.496359][ T6736] EXT4-fs (loop4): free_blocks=68451041280 [ 314.508654][ T6736] EXT4-fs (loop4): dirty_blocks=848 [ 314.514233][ T6736] EXT4-fs (loop4): Block reservation details [ 314.520361][ T6736] EXT4-fs (loop4): i_reserved_data_blocks=53 [ 314.561452][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.602600][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.766498][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.870140][ T6760] loop1: detected capacity change from 0 to 128 [ 315.772402][ T3651] Bluetooth: hci4: command tx timeout [ 315.909245][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.921597][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.989532][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.034713][ T5260] EXT4-fs (loop4): unmounting filesystem. [ 316.117918][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.294981][ T6778] loop4: detected capacity change from 0 to 4096 [ 316.322528][ T6778] NILFS (loop4): invalid segment: Checksum error in segment payload [ 316.330638][ T6778] NILFS (loop4): trying rollback from an earlier position [ 316.350943][ T6778] NILFS (loop4): recovery complete [ 316.357531][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.365287][ T6781] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.385365][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.441697][ T6778] overlayfs: upper fs does not support tmpfile. [ 316.454814][ T6778] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 316.467625][ T6778] overlayfs: failed to set xattr on upper [ 316.528158][ T6778] overlayfs: ...falling back to index=off,metacopy=off. [ 316.549502][ T5972] device hsr_slave_0 left promiscuous mode [ 316.577643][ T5972] device hsr_slave_1 left promiscuous mode [ 316.629130][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.637693][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.648131][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.655865][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.672537][ T5972] device bridge_slave_1 left promiscuous mode [ 316.681674][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.699772][ T5972] device bridge_slave_0 left promiscuous mode [ 316.708204][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.840622][ T5972] device veth1_macvtap left promiscuous mode [ 316.854547][ T5972] device veth0_macvtap left promiscuous mode [ 316.862064][ T5972] device veth1_vlan left promiscuous mode [ 316.925096][ T5972] device veth0_vlan left promiscuous mode [ 317.054423][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.060739][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.079165][ T6798] ceph: No mds server is up or the cluster is laggy [ 317.123907][ T3786] libceph: connect (1)[c::]:6789 error -101 [ 317.142529][ T3786] libceph: mon0 (1)[c::]:6789 connect error [ 317.229451][ T41] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 317.342271][ T152] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 317.622415][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.649068][ T41] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.662568][ T41] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.671767][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.684044][ T41] usb 3-1: config 0 descriptor?? [ 317.702259][ T152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.719512][ T152] usb 2-1: config 0 has no interfaces? [ 317.725181][ T152] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 317.741614][ T152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.764771][ T152] usb 2-1: config 0 descriptor?? [ 317.866451][ T3651] Bluetooth: hci4: command tx timeout [ 318.047646][ T152] usb 2-1: string descriptor 0 read error: -71 [ 318.055803][ T152] usb 2-1: USB disconnect, device number 8 [ 318.090437][ T5972] team0 (unregistering): Port device team_slave_1 removed [ 318.136727][ T5972] team0 (unregistering): Port device team_slave_0 removed [ 318.179908][ T5972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.184773][ T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 318.206569][ T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 318.216482][ T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 318.224355][ T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 318.231827][ T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 318.246370][ T41] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 318.271496][ T5972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.288449][ T41] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 318.608379][ T152] usb 3-1: USB disconnect, device number 6 [ 318.968271][ T5972] bond0 (unregistering): Released all slaves [ 318.983731][ T6815] loop1: detected capacity change from 0 to 32768 [ 319.060394][ T6815] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 319.130592][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 319.149743][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.168132][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 319.185877][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 319.195060][ T6815] loop1: detected capacity change from 32768 to 11 [ 319.239415][ T6818] syz.1.492: attempt to access beyond end of device [ 319.239415][ T6818] loop1: rw=0, sector=71, nr_sectors = 1 limit=11 [ 319.270845][ T6684] device hsr_slave_0 entered promiscuous mode [ 319.277133][ T6815] Dev loop1: unable to read RDB block 11 [ 319.287517][ T6684] device hsr_slave_1 entered promiscuous mode [ 319.292111][ T6815] loop1: unable to read partition table [ 319.306719][ T6684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.306829][ T6815] loop1: partition table beyond EOD, [ 319.326108][ T6684] Cannot create hsr debugfs directory [ 319.328468][ T6815] truncated [ 319.376902][ T6818] (syz.1.492,6818,0):ocfs2_assign_bh:2414 ERROR: status = -5 [ 319.397945][ T6815] loop_reread_partitions: partition scan of loop1 (ï5ŸA;¹8R÷ÖÑÎ])Ãî^\©) failed (rc=-5) [ 319.445068][ T6604] device veth0_vlan entered promiscuous mode [ 319.519960][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.532832][ T6818] (syz.1.492,6818,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -5 [ 319.536842][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.610370][ T6826] Invalid option length (295) for dns_resolver key [ 320.326723][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.327337][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.330408][ T6818] (syz.1.492,6818,1):ocfs2_reserve_suballoc_bits:789 ERROR: status = -5 [ 320.330531][ T6818] (syz.1.492,6818,1):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -5 [ 320.330553][ T6818] (syz.1.492,6818,1):ocfs2_reserve_clusters_with_limit:1202 ERROR: status = -5 [ 320.330684][ T6818] (syz.1.492,6818,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 320.330707][ T6818] (syz.1.492,6818,1):ocfs2_block_group_alloc:675 ERROR: status = -5 [ 320.330729][ T6818] (syz.1.492,6818,1):ocfs2_block_group_alloc:758 ERROR: status = -5 [ 320.330749][ T6818] (syz.1.492,6818,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -5 [ 320.330770][ T6818] (syz.1.492,6818,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 320.330792][ T6818] (syz.1.492,6818,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -5 [ 320.330859][ T6818] (syz.1.492,6818,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -5 [ 320.330958][ T6818] (syz.1.492,6818,1):ocfs2_init_xattr_set_ctxt:3276 ERROR: status = -5 [ 320.330978][ T6818] (syz.1.492,6818,1):ocfs2_xattr_set:3633 ERROR: status = -5 [ 320.403658][ T6828] loop2: detected capacity change from 0 to 512 [ 320.621393][ T6604] device veth1_vlan entered promiscuous mode [ 323.527651][ T4290] syz-executor: attempt to access beyond end of device [ 323.527651][ T4290] loop1: rw=0, sector=17057, nr_sectors = 1 limit=11 [ 323.528925][ T4290] (syz-executor,4290,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 323.531133][ T4290] syz-executor: attempt to access beyond end of device [ 323.531133][ T4290] loop1: rw=0, sector=17057, nr_sectors = 1 limit=11 [ 323.531162][ T4290] (syz-executor,4290,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 323.560342][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.561012][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.459398][ T6604] device veth0_macvtap entered promiscuous mode [ 324.551106][ T6604] device veth1_macvtap entered promiscuous mode [ 324.557929][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.557946][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.557952][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.557959][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.557964][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.557971][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.557977][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.557983][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.558687][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.559922][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.559935][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.559940][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.559947][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.559953][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.559960][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.559966][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.559972][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.575989][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.668533][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.669311][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.669929][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.670507][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.671088][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.685196][ T6604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.685260][ T6604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.685287][ T6604] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.685313][ T6604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.742644][ T6817] jbd2/loop1-75: attempt to access beyond end of device [ 324.742644][ T6817] loop1: rw=38913, sector=640, nr_sectors = 1 limit=11 [ 325.026743][ T6825] tty tty28: ldisc open failed (-12), clearing slot 27 [ 325.033700][ T6817] Buffer I/O error on dev loop1, logical block 640, lost sync page write [ 325.042332][ T6817] JBD2: I/O error when updating journal superblock for loop1-75. [ 325.053053][ T6817] Aborting journal on device loop1-75. [ 325.082346][ T6817] jbd2/loop1-75: attempt to access beyond end of device [ 325.082346][ T6817] loop1: rw=38913, sector=640, nr_sectors = 1 limit=11 [ 325.098438][ T6817] Buffer I/O error on dev loop1, logical block 640, lost sync page write [ 325.107274][ T6817] JBD2: I/O error when updating journal superblock for loop1-75. [ 325.108086][ T4290] syz-executor: attempt to access beyond end of device [ 325.108086][ T4290] loop1: rw=0, sector=71, nr_sectors = 1 limit=11 [ 325.108301][ T4290] (syz-executor,4290,0):ocfs2_assign_bh:2414 ERROR: status = -5 [ 325.108343][ T4290] (syz-executor,4290,0):ocfs2_inode_lock_full_nested:2509 ERROR: status = -5 [ 325.108356][ T4290] (syz-executor,4290,0):ocfs2_shutdown_local_alloc:411 ERROR: status = -5 [ 325.108403][ T4290] syz-executor: attempt to access beyond end of device [ 325.108403][ T4290] loop1: rw=1, sector=17024, nr_sectors = 1 limit=11 [ 325.108470][ T4290] Buffer I/O error on dev loop1, logical block 17024, lost sync page write [ 325.108522][ T4290] (syz-executor,4290,0):ocfs2_write_block:78 ERROR: status = -5 [ 325.108534][ T4290] (syz-executor,4290,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 325.108556][ T4290] (syz-executor,4290,0):ocfs2_put_slot:517 ERROR: status = -5 [ 325.108965][ T4290] (syz-executor,4290,0):ocfs2_journal_shutdown:1051 ERROR: status = -5 [ 325.109571][ T4290] ocfs2: Unmounting device (7,1) on (node local) [ 325.440598][ T5972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.467844][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.467891][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.471077][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.510814][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.510879][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.515924][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.755767][ T5972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.863790][ T6854] syz.3.446[6854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.864250][ T6854] syz.3.446[6854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.670335][ T6840] tty tty24: ldisc open failed (-12), clearing slot 23 [ 326.689879][ T6841] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 326.789654][ T5972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.970986][ T6856] loop3: detected capacity change from 0 to 32768 [ 326.978049][ T6856] XFS: attr2 mount option is deprecated. [ 326.983783][ T6856] XFS: noikeep mount option is deprecated. [ 326.997298][ T6684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.087278][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.109759][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.121243][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.130343][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.137954][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.146413][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.180521][ T5972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.191227][ T6856] XFS (loop3): Mounting V5 Filesystem [ 327.234815][ T6684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 327.320031][ T6684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 327.362710][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 327.418504][ T6856] XFS (loop3): Ending clean mount [ 327.430652][ T6856] XFS (loop3): Quotacheck needed: Please wait. [ 327.518995][ T6684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.541417][ T6856] XFS (loop3): Quotacheck: Done. [ 327.582241][ T4808] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 327.822879][ T4808] usb 5-1: Using ep0 maxpacket: 16 [ 328.006420][ T4808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.017970][ T4808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.029370][ T4808] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 328.048825][ T4808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.070203][ T4808] usb 5-1: config 0 descriptor?? [ 328.097253][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.108680][ T6604] XFS (loop3): Unmounting Filesystem [ 328.194769][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.224383][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.238838][ T6684] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.258490][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.297512][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.312502][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.319639][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.367025][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.529645][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.577679][ T4808] wacom 0003:056A:0300.0007: unknown main item tag 0x0 [ 328.592918][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.601077][ T4808] wacom 0003:056A:0300.0007: unknown main item tag 0x0 [ 328.621390][ T4808] wacom 0003:056A:0300.0007: unknown main item tag 0x0 [ 328.630426][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.637607][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.657938][ T4808] wacom 0003:056A:0300.0007: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 328.681006][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.695119][ T4808] wacom 0003:056A:0300.0007: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.4-1/input0 [ 328.723991][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 328.729403][ T4808] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0300.0007/input/input14 [ 328.861807][ T4808] usb 5-1: USB disconnect, device number 3 [ 328.878681][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.921226][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.961821][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.004896][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.084920][ T6684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.095494][ T6684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.110785][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.123402][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.132820][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.146975][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.161161][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.171910][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.213641][ T3650] Bluetooth: hci0: command tx timeout [ 329.299590][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.568980][ T6909] loop3: detected capacity change from 0 to 164 [ 329.608779][ T6908] overlayfs: missing 'lowerdir' [ 331.342225][ T3650] Bluetooth: hci0: command tx timeout [ 331.636930][ T6928] loop4: detected capacity change from 0 to 1024 [ 332.063936][ T6930] input: syz1 as /devices/virtual/input/input17 [ 332.071033][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.086033][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.207314][ T41] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 332.207384][ T6925] hfsplus: walked past end of dir [ 332.485710][ T6860] device bridge_slave_0 entered promiscuous mode [ 332.557938][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.638821][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.689440][ T6860] device bridge_slave_1 entered promiscuous mode [ 332.702163][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 332.805088][ T6935] loop4: detected capacity change from 0 to 512 [ 332.840869][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.862383][ T6935] EXT4-fs: Ignoring removed nobh option [ 332.871203][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.884839][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.897897][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.911591][ T41] usb 3-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 332.926383][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.935575][ T6935] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 332.951562][ T6935] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.508: attempt to clear invalid blocks 2 len 1 [ 332.969422][ T41] usb 3-1: config 0 descriptor?? [ 333.005361][ T6935] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 333.064394][ T6935] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.508: invalid indirect mapped block 1819239214 (level 0) [ 333.080855][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.106723][ T6935] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.508: invalid indirect mapped block 1819239214 (level 1) [ 333.115621][ T6684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.140637][ T6935] EXT4-fs (loop4): 1 truncate cleaned up [ 333.155595][ T6935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 333.156147][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 333.176731][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 333.331624][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.372334][ T3650] Bluetooth: hci0: command tx timeout [ 333.393579][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.420377][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.443603][ T6952] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.508: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 333.715647][ T6860] team0: Port device team_slave_0 added [ 333.751443][ T6860] team0: Port device team_slave_1 added [ 333.879955][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.906647][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.926217][ T41] wacom 0003:056A:0300.0008: unknown main item tag 0x0 [ 333.932562][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.952466][ T41] wacom 0003:056A:0300.0008: unknown main item tag 0x0 [ 333.961316][ T41] wacom 0003:056A:0300.0008: unknown main item tag 0x0 [ 333.970972][ T41] wacom 0003:056A:0300.0008: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 333.979006][ T5260] EXT4-fs (loop4): unmounting filesystem. [ 333.988553][ T41] wacom 0003:056A:0300.0008: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.2-1/input0 [ 334.026185][ T41] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0300.0008/input/input18 [ 334.058458][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.133863][ T41] usb 3-1: USB disconnect, device number 7 [ 334.157273][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.169878][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.218859][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.262237][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.286606][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.331071][ T6684] device veth0_vlan entered promiscuous mode [ 334.359559][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.376947][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.517563][ T6684] device veth1_vlan entered promiscuous mode [ 334.571543][ T6860] device hsr_slave_0 entered promiscuous mode [ 334.600229][ T6860] device hsr_slave_1 entered promiscuous mode [ 334.615385][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.626356][ T6860] Cannot create hsr debugfs directory [ 334.885185][ T6980] loop2: detected capacity change from 0 to 512 [ 334.937395][ T6974] loop3: detected capacity change from 0 to 128 [ 334.991355][ T6980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.015963][ T6985] loop4: detected capacity change from 0 to 16 [ 335.044444][ T6985] erofs: (device loop4): mounted with root inode @ nid 36. [ 335.648903][ T3650] Bluetooth: hci0: command tx timeout [ 335.956917][ T6980] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 335.980014][ T6980] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 336.010425][ T6980] System zones: 0-1, 15-15, 18-18, 34-34 [ 336.017439][ T6980] EXT4-fs (loop2): orphan cleanup on readonly fs [ 336.027206][ T5835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 336.029459][ T6980] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 336.046657][ T6980] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 336.072108][ T6980] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 336.122282][ T6980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.511: bg 0: block 40: padding at end of block bitmap is not set [ 336.142516][ T6981] loop3: detected capacity change from 0 to 8 [ 336.149063][ T6684] device veth0_macvtap entered promiscuous mode [ 336.180699][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.199549][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.218436][ T6980] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 336.246430][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.256900][ T6980] EXT4-fs (loop2): 1 truncate cleaned up [ 336.269824][ T6980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 336.279019][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.473207][ T5972] device hsr_slave_0 left promiscuous mode [ 336.792869][ T5972] device hsr_slave_1 left promiscuous mode [ 336.802922][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.831049][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.869308][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.895619][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.933198][ T7004] 9pnet_fd: Insufficient options for proto=fd [ 336.955486][ T5972] device bridge_slave_1 left promiscuous mode [ 336.967817][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.003648][ T5972] device bridge_slave_0 left promiscuous mode [ 337.021067][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.082351][ T5621] EXT4-fs (loop2): unmounting filesystem. [ 337.121539][ T5972] device veth1_macvtap left promiscuous mode [ 337.131685][ T5972] device veth0_macvtap left promiscuous mode [ 337.144080][ T5972] device veth1_vlan left promiscuous mode [ 337.149991][ T5972] device veth0_vlan left promiscuous mode [ 337.666768][ T5972] team0 (unregistering): Port device team_slave_1 removed [ 337.713709][ T5972] team0 (unregistering): Port device team_slave_0 removed [ 337.761748][ T5972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.811476][ T5972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.173306][ T7010] loop2: detected capacity change from 0 to 4096 [ 338.195122][ T7010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 338.707855][ T5972] bond0 (unregistering): Released all slaves [ 339.071406][ T5621] EXT4-fs (loop2): unmounting filesystem. [ 339.141386][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.159393][ T6684] device veth1_macvtap entered promiscuous mode [ 340.201147][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'. [ 340.252383][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'. [ 340.291248][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.314815][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.395953][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.438090][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.502226][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.704688][ T7034] loop4: detected capacity change from 0 to 2048 [ 341.453833][ T7035] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.563902][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.584037][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.642268][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.644603][ T7042] loop3: detected capacity change from 0 to 128 [ 341.655330][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.698138][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.715739][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.729240][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.748777][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.760131][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.778795][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.790080][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.808408][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.820273][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.838489][ T6684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.912073][ T6684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.931040][ T6684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.950221][ T6684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.432470][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.511234][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.530456][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.592941][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.615003][ T7047] loop4: detected capacity change from 0 to 8192 [ 342.855593][ T7054] loop3: detected capacity change from 0 to 128 [ 343.003163][ T5835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.031940][ T3744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.057310][ T3744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.113178][ T3745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.115010][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.121285][ T3745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.278242][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.319390][ T7057] loop3: detected capacity change from 0 to 8 [ 344.899335][ T6860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.923581][ T6860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.939280][ T6860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.043565][ T6860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.192650][ T7065] futex_wake_op: syz.0.475 tries to shift op by -1; fix this program [ 345.269567][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.327405][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.343367][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.404959][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.470412][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.566549][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.591412][ T7082] loop0: detected capacity change from 0 to 512 [ 345.629738][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.636849][ T3745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.706665][ T7082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 346.454366][ T7082] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 346.501754][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.572346][ T7082] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 346.580417][ T7082] System zones: 0-1, 15-15, 18-18, 34-34 [ 346.587447][ T7082] EXT4-fs (loop0): orphan cleanup on readonly fs [ 346.594509][ T7082] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 346.604075][ T7082] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 346.620141][ T7082] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 346.630559][ T7082] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.527: bg 0: block 40: padding at end of block bitmap is not set [ 346.646144][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.658716][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.667258][ T7082] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 346.688145][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.695276][ T3745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.704010][ T7082] EXT4-fs (loop0): 1 truncate cleaned up [ 346.709667][ T7082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 346.741120][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.796495][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.937956][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.090284][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.283566][ T6860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.302324][ T7089] loop2: detected capacity change from 0 to 32768 [ 347.323260][ T6860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.449326][ T7089] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 347.541973][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.557901][ T6684] EXT4-fs (loop0): unmounting filesystem. [ 347.588700][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.677396][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.694148][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.711377][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.721085][ T7089] loop2: detected capacity change from 32768 to 11 [ 347.733582][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.748392][ T7096] (syz.2.529,7096,0):ocfs2_read_blocks:240 ERROR: status = -12 [ 347.767763][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.791365][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.804443][ T7096] [ 347.806776][ T7096] ===================================== [ 347.812294][ T7096] WARNING: bad unlock balance detected! [ 347.817805][ T7096] 6.1.111-syzkaller #0 Not tainted [ 347.822885][ T7096] ------------------------------------- [ 347.828398][ T7096] syz.2.529/7096 is trying to release lock (&oi->ip_io_mutex) at: [ 347.836268][ T7096] [] ocfs2_read_blocks+0x11ef/0x16e0 [ 347.843112][ T7096] but there are no more locks to release! [ 347.848799][ T7096] [ 347.848799][ T7096] other info that might help us debug this: [ 347.856829][ T7096] 8 locks held by syz.2.529/7096: [ 347.861824][ T7096] #0: ffff88805532e460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 347.871024][ T7096] #1: ffff888071d93488 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 347.881432][ T7096] #2: ffff888071d931b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 347.891328][ T7096] #3: ffff888071d1d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 347.904965][ T7096] #4: ffff888071d1b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 347.918598][ T7096] #5: ffff88805532e650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_reserve_suballoc_bits+0x8f8/0x5190 [ 347.929187][ T7096] #6: ffff88802db2e8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3b5/0x6f0 [ 347.939854][ T7096] #7: ffff888027ee6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f51/0x21b0 [ 347.949486][ T7096] [ 347.949486][ T7096] stack backtrace: [ 347.955359][ T7096] CPU: 0 PID: 7096 Comm: syz.2.529 Not tainted 6.1.111-syzkaller #0 [ 347.963312][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.973346][ T7096] Call Trace: [ 347.976606][ T7096] [ 347.979514][ T7096] dump_stack_lvl+0x1e3/0x2cb [ 347.984173][ T7096] ? nf_tcp_handle_invalid+0x642/0x642 [ 347.989617][ T7096] ? panic+0x764/0x764 [ 347.993930][ T7096] ? ocfs2_read_blocks+0x11ef/0x16e0 [ 347.999191][ T7096] print_unlock_imbalance_bug+0x24e/0x2c0 [ 348.004893][ T7096] ? list_move_tail+0x130/0x130 [ 348.009720][ T7096] ? prb_read_valid+0xa5/0xf0 [ 348.014412][ T7096] lock_release+0x5ad/0xa20 [ 348.018899][ T7096] ? ocfs2_read_blocks+0x11ef/0x16e0 [ 348.024162][ T7096] ? __lock_acquire+0x1f80/0x1f80 [ 348.029339][ T7096] ? __getblk_gfp+0x46b/0xa20 [ 348.033991][ T7096] ? __mlog_printk+0x278/0x2a0 [ 348.038734][ T7096] ? ocfs2_read_blocks+0x11ef/0x16e0 [ 348.043995][ T7096] __mutex_unlock_slowpath+0xde/0x750 [ 348.049343][ T7096] ? mutex_unlock+0x10/0x10 [ 348.053823][ T7096] ? __getblk_gfp+0x97f/0xa20 [ 348.058490][ T7096] ocfs2_read_blocks+0x11ef/0x16e0 [ 348.063598][ T7096] ? ocfs2_read_group_descriptor+0x230/0x230 [ 348.069578][ T7096] ? ocfs2_read_blocks_sync+0xcd0/0xcd0 [ 348.075122][ T7096] ocfs2_search_chain+0x2d1/0x2640 [ 348.080213][ T7096] ? mark_lock+0x9a/0x340 [ 348.084530][ T7096] ? ocfs2_block_group_find_clear_bits+0x360/0x360 [ 348.091022][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 348.096375][ T7096] ? __lock_acquire+0x1f80/0x1f80 [ 348.101382][ T7096] ocfs2_claim_suballoc_bits+0x1201/0x2560 [ 348.107174][ T7096] ? ocfs2_claim_metadata+0x560/0x560 [ 348.112611][ T7096] ? jbd2__journal_start+0x5c0/0x5c0 [ 348.117877][ T7096] ? __kasan_slab_alloc+0x65/0x70 [ 348.122875][ T7096] ? slab_post_alloc_hook+0x71/0x3a0 [ 348.128137][ T7096] __ocfs2_claim_clusters+0x327/0xa30 [ 348.133489][ T7096] ? ocfs2_which_cluster_group+0x1e0/0x1e0 [ 348.139270][ T7096] ? jbd2_journal_start+0x25/0x30 [ 348.144271][ T7096] ? ocfs2_recovery_exit+0x280/0x280 [ 348.149532][ T7096] ? is_bpf_text_address+0x22/0x2a0 [ 348.154707][ T7096] ocfs2_reserve_suballoc_bits+0x1241/0x5190 [ 348.160667][ T7096] ? 0xffffffffa0000650 [ 348.164809][ T7096] ? arch_stack_walk+0xf3/0x140 [ 348.169638][ T7096] ? ocfs2_block_group_search+0x530/0x530 [ 348.175334][ T7096] ? stack_trace_save+0x113/0x1c0 [ 348.180335][ T7096] ? stack_trace_snprint+0xe0/0xe0 [ 348.185423][ T7096] ? __stack_depot_save+0x36/0x470 [ 348.190511][ T7096] ? kasan_set_track+0x60/0x70 [ 348.195258][ T7096] ? kasan_set_track+0x4b/0x70 [ 348.200001][ T7096] ? __kasan_kmalloc+0x97/0xb0 [ 348.204738][ T7096] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 348.211215][ T7096] ? ocfs2_init_xattr_set_ctxt+0x3ab/0x950 [ 348.217006][ T7096] ? __vfs_setxattr+0x3e7/0x420 [ 348.221835][ T7096] ? vfs_setxattr+0x21d/0x420 [ 348.226483][ T7096] ? setxattr+0x250/0x2b0 [ 348.230787][ T7096] ? path_setxattr+0x1bc/0x2a0 [ 348.235545][ T7096] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 348.240644][ T7096] ? do_syscall_64+0x3b/0xb0 [ 348.245225][ T7096] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.251289][ T7096] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 348.257603][ T7096] ? ocfs2_init_steal_slots+0x150/0x150 [ 348.263129][ T7096] ? ocfs2_xattr_block_set+0x3620/0x3620 [ 348.268740][ T7096] ? ocfs2_xattr_set+0xef8/0x1930 [ 348.273835][ T7096] ocfs2_init_xattr_set_ctxt+0x3ab/0x950 [ 348.279448][ T7096] ? ocfs2_prepare_refcount_xattr+0x1220/0x1220 [ 348.285667][ T7096] ? up_write+0x19d/0x580 [ 348.289972][ T7096] ? ocfs2_remove_btree_range+0x18a0/0x18a0 [ 348.295844][ T7096] ? __up_read+0x690/0x690 [ 348.300239][ T7096] ? ocfs2_xattr_ibody_find+0xd0/0x9c0 [ 348.305680][ T7096] ocfs2_xattr_set+0xf46/0x1930 [ 348.310513][ T7096] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 348.316383][ T7096] ? validate_chain+0x112/0x5950 [ 348.321303][ T7096] ? is_bpf_text_address+0x22/0x2a0 [ 348.326497][ T7096] ? unwind_next_frame+0x1a3f/0x2220 [ 348.331757][ T7096] ? deref_stack_reg+0x17c/0x210 [ 348.336691][ T7096] ? __lock_acquire+0x125b/0x1f80 [ 348.341698][ T7096] ? evm_protected_xattr_common+0x181/0x1a0 [ 348.347565][ T7096] ? evm_protect_xattr+0x8b1/0xb10 [ 348.352654][ T7096] ? ocfs2_xattr_security_get+0x40/0x40 [ 348.358180][ T7096] __vfs_setxattr+0x3e7/0x420 [ 348.362841][ T7096] __vfs_setxattr_noperm+0x12a/0x5e0 [ 348.368105][ T7096] vfs_setxattr+0x21d/0x420 [ 348.372582][ T7096] ? xattr_permission+0x4f0/0x4f0 [ 348.377579][ T7096] ? __might_fault+0xbd/0x110 [ 348.382238][ T7096] setxattr+0x250/0x2b0 [ 348.386368][ T7096] ? path_setxattr+0x2a0/0x2a0 [ 348.391210][ T7096] ? __mnt_want_write+0x222/0x2a0 [ 348.396211][ T7096] path_setxattr+0x1bc/0x2a0 [ 348.400781][ T7096] ? simple_xattr_list_add+0xf0/0xf0 [ 348.406047][ T7096] ? syscall_enter_from_user_mode+0x2e/0x230 [ 348.412002][ T7096] __x64_sys_lsetxattr+0xb4/0xd0 [ 348.416935][ T7096] do_syscall_64+0x3b/0xb0 [ 348.421330][ T7096] ? clear_bhb_loop+0x45/0xa0 [ 348.425988][ T7096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.431931][ T7096] RIP: 0033:0x7fc2c277dff9 [ 348.436346][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.455936][ T7096] RSP: 002b:00007fc2c3524038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 348.464335][ T7096] RAX: ffffffffffffffda RBX: 00007fc2c2936058 RCX: 00007fc2c277dff9 [ 348.472301][ T7096] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000080 [ 348.480259][ T7096] RBP: 00007fc2c27f0296 R08: 0000000000000000 R09: 0000000000000000 [ 348.488211][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.496166][ T7096] R13: 0000000000000000 R14: 00007fc2c2936058 R15: 00007ffc116a3d48 [ 348.504129][ T7096] [ 348.519873][ T7096] (syz.2.529,7096,0):ocfs2_search_chain:1761 ERROR: status = -12 [ 348.527926][ T7096] (syz.2.529,7096,0):ocfs2_search_chain:1871 ERROR: status = -12 [ 348.538068][ T7096] (syz.2.529,7096,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -12 [ 348.547010][ T7096] (syz.2.529,7096,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 348.557571][ T7096] (syz.2.529,7096,0):__ocfs2_claim_clusters:2355 ERROR: status = -12 [ 348.566041][ T7096] (syz.2.529,7096,0):__ocfs2_claim_clusters:2363 ERROR: status = -12 [ 348.579202][ T7096] (syz.2.529,7096,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -12 [ 348.588272][ T7096] (syz.2.529,7096,0):ocfs2_block_group_alloc:705 ERROR: status = -12 [ 348.598491][ T7096] (syz.2.529,7096,0):ocfs2_block_group_alloc:758 ERROR: status = -12 [ 348.644357][ T7096] (syz.2.529,7096,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -12 [ 348.668155][ T7096] (syz.2.529,7096,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -12 [ 348.687053][ T7096] (syz.2.529,7096,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -12 [ 349.079088][ T7096] (syz.2.529,7096,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -12 [ 349.089526][ T7089] Dev loop2: unable to read RDB block 11 [ 349.096643][ T7089] loop2: unable to read partition table [ 349.119920][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.130132][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.139293][ T7089] loop2: partition table beyond EOD, truncated [ 349.164235][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.174064][ T7096] (syz.2.529,7096,0):ocfs2_init_xattr_set_ctxt:3276 ERROR: status = -12 [ 349.188293][ T7089] loop_reread_partitions: partition scan of loop2 (ï5ŸA;¹8R÷ÖÑÎ])Ãî^\©) failed (rc=-5) [ 349.191551][ T7096] (syz.2.529,7096,0):ocfs2_xattr_set:3633 ERROR: status = -12 [ 349.198170][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.220130][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.271641][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.281325][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.289833][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.298282][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.307510][ T6860] device veth0_vlan entered promiscuous mode [ 349.317388][ T6860] device veth1_vlan entered promiscuous mode [ 349.331588][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.341596][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.349840][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.359098][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.369000][ T6860] device veth0_macvtap entered promiscuous mode [ 349.379010][ T6860] device veth1_macvtap entered promiscuous mode [ 349.390360][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.401245][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.411337][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.422216][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.432266][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.444205][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.454122][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.464653][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.474490][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.484953][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.495930][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.503886][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.511924][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.521087][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.530244][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.540739][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.551372][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.562837][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.573299][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.583450][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.593901][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.603724][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.614735][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.624580][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.635632][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.646442][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.654754][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.663317][ T5932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.675576][ T6860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.684348][ T6860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.694815][ T6860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.704037][ T6860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.727962][ T6860] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 349.746359][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.747405][ T6860] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 349.762299][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.778296][ T5621] syz-executor: attempt to access beyond end of device [ 349.778296][ T5621] loop2: rw=0, sector=17057, nr_sectors = 1 limit=11 [ 349.786591][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.791975][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.799541][ T5621] (syz-executor,5621,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 349.816506][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.824669][ T5621] syz-executor: attempt to access beyond end of device [ 349.824669][ T5621] loop2: rw=0, sector=17057, nr_sectors = 1 limit=11 [ 349.839264][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.847163][ T5621] (syz-executor,5621,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 349.870460][ T7095] jbd2/loop2-75: attempt to access beyond end of device [ 349.870460][ T7095] loop2: rw=38913, sector=640, nr_sectors = 1 limit=11 [ 349.885409][ T7095] Buffer I/O error on dev loop2, logical block 640, lost sync page write [ 349.894273][ T7095] JBD2: I/O error when updating journal superblock for loop2-75. [ 349.902165][ T7095] Aborting journal on device loop2-75. [ 349.907708][ T7095] jbd2/loop2-75: attempt to access beyond end of device [ 349.907708][ T7095] loop2: rw=38913, sector=640, nr_sectors = 1 limit=11 [ 349.922184][ T7095] Buffer I/O error on dev loop2, logical block 640, lost sync page write [ 349.931023][ T7095] JBD2: I/O error when updating journal superblock for loop2-75. [ 349.940239][ T6619] (syz.2.459,6619,0):ocfs2_start_trans:359 ERROR: status = -30 [ 349.948413][ T6619] OCFS2: abort (device loop2): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 349.962876][ T6619] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 349.974912][ T6619] OCFS2: Returning error to the calling process. [ 349.982512][ T6619] (syz.2.459,6619,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30 [ 349.999954][ T6619] syz.2.459: attempt to access beyond end of device [ 349.999954][ T6619] loop2: rw=1, sector=17024, nr_sectors = 1 limit=11 [ 350.013409][ T6619] Buffer I/O error on dev loop2, logical block 17024, lost sync page write [ 350.022134][ T6619] (syz.2.459,6619,0):ocfs2_write_block:78 ERROR: status = -5 [ 350.029945][ T6619] (syz.2.459,6619,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 350.040236][ T6619] (syz.2.459,6619,0):ocfs2_put_slot:517 ERROR: status = -5 [ 350.049645][ T6619] (syz.2.459,6619,0):ocfs2_journal_shutdown:1051 ERROR: status = -5 [ 350.058141][ T6619] ocfs2: Unmounting device (7,2) on (node local) [ 350.397342][ T5939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.489060][ T5939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.550240][ T5939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.606176][ T5939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.527409][ T5939] device hsr_slave_0 left promiscuous mode [ 351.535126][ T5939] device hsr_slave_1 left promiscuous mode [ 351.552177][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.559597][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.582646][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.590066][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.615709][ T5939] device bridge_slave_1 left promiscuous mode [ 351.621910][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.643012][ T5939] device bridge_slave_0 left promiscuous mode [ 351.649208][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.675486][ T5939] device veth1_macvtap left promiscuous mode [ 351.681532][ T5939] device veth0_macvtap left promiscuous mode [ 351.702125][ T5939] device veth1_vlan left promiscuous mode [ 351.707937][ T5939] device veth0_vlan left promiscuous mode [ 351.887511][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 351.929651][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 351.965410][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.004910][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.078477][ T5939] bond0 (unregistering): Released all slaves