last executing test programs: 11.401670178s ago: executing program 1 (id=3951): inotify_init1(0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) rt_sigreturn() timer_create(0x0, &(0x7f0000004040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000004080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RFLUSH(r0, 0x0, 0x0) 8.942104246s ago: executing program 1 (id=3957): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xa812, r0, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/99) 8.080294258s ago: executing program 1 (id=3958): r0 = socket$unix(0x1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigreturn() futex(&(0x7f0000000700), 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = eventfd2(0x0, 0x0) fgetxattr(r2, 0x0, 0x0, 0x0) 4.676725121s ago: executing program 1 (id=3974): r0 = memfd_create(&(0x7f00000006c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6\x02\x00\x00\x00A\xc5\xb8_\xd4\x18,\fus\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b0\xc3\x93;\xcc\x14\x02\xc4\xfd{\xbb-\x80\xbf\xab\xbf\xd2\xd3\xe0Cf\xb7\x7f\x93X\'\xf5/\xf9cY\x828\xa2\x00_\xb0#w\xae\xb8L\xeb\xa1\xecF\xbd\xf0\x91$s\xd8\x80\x1a\xc4\xe5=_b\x99\xf9\x84(\xcb,Y\xe6\xf0\x13\x15J\x9f,\xa5\xf2.A\x00\x00S\x94\xe7\x05no\xee\x8b\xb0ciB\x82\t9*\a\x88\xfe\xca\xcb\xe2G\x00\xa9;q\x0f\xb4\xfa\x8e\v\xf7\xc7\x86>wHw]=rW\x01\xe3\xdb\x10G-\xf7\xacD\xd7\xfb\xa0\x96\x85u\xddDv\x9c\x8b\xab\xe3F\x1d\xd2C\xdc\x1f\x80\x005\'y8a\xd3s_\xa6\b\x90\xab\xc9_\xc9\xcb;z\xcc\x9d5\xd2j\x1d\xd9\xe1\xcb\x1c\x156\xc5\xf2d\xfe\x0er\x01\xcdyF\xc1H\r\x94\xa9\x89P|\xcff\x9e\x03\xa4:\x04\v\xfe\x04\x02.\x9e\xf5~\x00\xf2TL\xac\x87<)\x02\xbaq\xae\x87\x1a\xc0\xe5\x90', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x8001) mmap(&(0x7f00001c3000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800008, 0x2) 2.544914168s ago: executing program 3 (id=3982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ptrace$peeksig(0x4209, r0, &(0x7f00000003c0)={0x1, 0x0, 0x3}, &(0x7f0000019840)=[{}, {}, {}]) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6b00330080000000ffffffffffff080211"], 0x88}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x90, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @broadcast}, 0x0, @default, 0x0, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x7, {0xb7, 0xfa, 0x4, "9508af87"}}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0x12}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x800004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000199c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="000326bd7000fedbdf250a0000000a0009000180c20000030000050029000000000008002b001f02000008000300", @ANYRES32=r7, @ANYBLOB="1c003400000808000938eedd0a38476d93eebd566adb000600", @ANYBLOB="1fa20136f3698327f631ca1cbe1b74b5b1dcd31aeeece5d5fe7388e02dd710eb07ba92b048d6cc53ca638f615fb2f7d608d14508a5dc1ba861917be5a98db28c81f56539fc696d70610baccb55e753a9b4e419385a8f29c762891c9bb147dd410cef8ee8c268b83340c9f19b37ca50141f6cc7206bb5c415fe607640a6d73fa233aab614b20815b9047f5384e49e793d9643204e7a45206e044712b6952e559d154416972656da85a1df58a5c2fce729e42e0f2d46078eaece3443236cb6fbd87c1852e210808cdb2d310aa28fa335dc18", @ANYBLOB="0800340005000000050033000000000008002b0004130000"], 0x60}}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.389525176s ago: executing program 4 (id=3987): syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {@block_validity}, {@dioread_lock}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000001400), &(0x7f0000001440)=ANY=[], 0x386, 0x0) 1.36045793s ago: executing program 3 (id=3989): syz_open_procfs(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2}}}}}}, 0x0) 1.269852724s ago: executing program 3 (id=3990): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60a1, &(0x7f00000076c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.264706875s ago: executing program 2 (id=3991): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x74, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/99) 1.236909139s ago: executing program 4 (id=3992): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x148, 0x1170, 0x1398, 0x148, 0x1170, 0x370, 0x1398, 0x1398, 0x370, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 1.212121453s ago: executing program 1 (id=3993): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@fastboot}, {@user_xattr}, {@grpjquota={'grpjquota', 0x3d, '\\#&['}}, {@jqfmt_vfsv1}, {@fsync_mode_strict}, {@noextent_cache}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") write(0xffffffffffffffff, &(0x7f00000002c0)="e1", 0x1) r0 = dup(0xffffffffffffffff) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0) 1.151773093s ago: executing program 2 (id=3994): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x0, 0x1, 0x5e}, 0x0) 1.082788803s ago: executing program 4 (id=3996): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@local, r1}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) 1.03900558s ago: executing program 2 (id=3997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xa4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa4}}, 0x0) 1.018970243s ago: executing program 4 (id=3998): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000100f300000000002400000008000200", @ANYRES32=r1], 0x1c}}, 0x0) 951.034243ms ago: executing program 2 (id=3999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7}, @jmp={0x5, 0x0, 0xc}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 900.179281ms ago: executing program 4 (id=4000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ptrace$peeksig(0x4209, r0, &(0x7f00000003c0)={0x1, 0x0, 0x3}, &(0x7f0000019840)=[{}, {}, {}]) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6b00330080000000ffffffffffff080211"], 0x88}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x90, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @broadcast}, 0x0, @default, 0x0, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x7, {0xb7, 0xfa, 0x4, "9508af87"}}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0x12}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x800004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000199c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="000326bd7000fedbdf250a0000000a0009000180c20000030000050029000000000008002b001f02000008000300", @ANYRES32=r7, @ANYBLOB="1c003400000808000938eedd0a38476d93eebd566adb000600", @ANYBLOB="1fa20136f3698327f631ca1cbe1b74b5b1dcd31aeeece5d5fe7388e02dd710eb07ba92b048d6cc53ca638f615fb2f7d608d14508a5dc1ba861917be5a98db28c81f56539fc696d70610baccb55e753a9b4e419385a8f29c762891c9bb147dd410cef8ee8c268b83340c9f19b37ca50141f6cc7206bb5c415fe607640a6d73fa233aab614b20815b9047f5384e49e793d9643204e7a45206e044712b6952e559d154416972656da85a1df58a5c2fce729e42e0f2d46078eaece3443236cb6fbd87c1852e210808cdb2d310aa28fa335dc18", @ANYBLOB="0800340005000000050033000000000008002b0004130000"], 0x60}}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 883.777654ms ago: executing program 2 (id=4001): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x3a, 0x39, 0x0, 0x0) 790.349058ms ago: executing program 2 (id=4002): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x40044581, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000000100000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xa2, &(0x7f00000002c0)=""/162}, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x5, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x202, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 712.2571ms ago: executing program 4 (id=4003): r0 = memfd_create(&(0x7f00000006c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6\x02\x00\x00\x00A\xc5\xb8_\xd4\x18,\fus\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b0\xc3\x93;\xcc\x14\x02\xc4\xfd{\xbb-\x80\xbf\xab\xbf\xd2\xd3\xe0Cf\xb7\x7f\x93X\'\xf5/\xf9cY\x828\xa2\x00_\xb0#w\xae\xb8L\xeb\xa1\xecF\xbd\xf0\x91$s\xd8\x80\x1a\xc4\xe5=_b\x99\xf9\x84(\xcb,Y\xe6\xf0\x13\x15J\x9f,\xa5\xf2.A\x00\x00S\x94\xe7\x05no\xee\x8b\xb0ciB\x82\t9*\a\x88\xfe\xca\xcb\xe2G\x00\xa9;q\x0f\xb4\xfa\x8e\v\xf7\xc7\x86>wHw]=rW\x01\xe3\xdb\x10G-\xf7\xacD\xd7\xfb\xa0\x96\x85u\xddDv\x9c\x8b\xab\xe3F\x1d\xd2C\xdc\x1f\x80\x005\'y8a\xd3s_\xa6\b\x90\xab\xc9_\xc9\xcb;z\xcc\x9d5\xd2j\x1d\xd9\xe1\xcb\x1c\x156\xc5\xf2d\xfe\x0er\x01\xcdyF\xc1H\r\x94\xa9\x89P|\xcff\x9e\x03\xa4:\x04\v\xfe\x04\x02.\x9e\xf5~\x00\xf2TL\xac\x87<)\x02\xbaq\xae\x87\x1a\xc0\xe5\x90', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x8001) mmap(&(0x7f00001c3000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800008, 0x2) 558.411144ms ago: executing program 0 (id=4005): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x0) 493.815194ms ago: executing program 3 (id=4006): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x3c}}, 0x0) 450.9886ms ago: executing program 0 (id=4007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xb, 0x8400, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000017c0)={r1, &(0x7f0000000000)="f6", 0x0}, 0x20) 347.214216ms ago: executing program 0 (id=4008): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@local, r1}, 0x14) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 287.186965ms ago: executing program 0 (id=4009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x9c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x9c}}, 0x0) 189.64062ms ago: executing program 0 (id=4010): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000100f300000000002400000008000200", @ANYRES32=r1], 0x1c}}, 0x0) 168.773503ms ago: executing program 1 (id=4011): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000100), 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2}}}}}}, 0x0) 131.790929ms ago: executing program 3 (id=4012): r0 = inotify_init1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="e6", 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 63.169739ms ago: executing program 0 (id=4013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ptrace$peeksig(0x4209, r0, &(0x7f00000003c0)={0x1, 0x0, 0x3}, &(0x7f0000019840)=[{}, {}, {}]) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6b00330080000000ffffffffffff080211"], 0x88}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x90, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @broadcast}, 0x0, @default, 0x0, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x7, {0xb7, 0xfa, 0x4, "9508af87"}}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0x12}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x800004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000199c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="000326bd7000fedbdf250a0000000a0009000180c20000030000050029000000000008002b001f02000008000300", @ANYRES32=r7, @ANYBLOB="1c003400000808000938eedd0a38476d93eebd566adb000600", @ANYBLOB="1fa20136f3698327f631ca1cbe1b74b5b1dcd31aeeece5d5fe7388e02dd710eb07ba92b048d6cc53ca638f615fb2f7d608d14508a5dc1ba861917be5a98db28c81f56539fc696d70610baccb55e753a9b4e419385a8f29c762891c9bb147dd410cef8ee8c268b83340c9f19b37ca50141f6cc7206bb5c415fe607640a6d73fa233aab614b20815b9047f5384e49e793d9643204e7a45206e044712b6952e559d154416972656da85a1df58a5c2fce729e42e0f2d46078eaece3443236cb6fbd87c1852e210808cdb2d310aa28fa335dc18", @ANYBLOB="0800340005000000050033000000000008002b0004130000"], 0x60}}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 0s ago: executing program 3 (id=4014): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) epoll_create1(0x0) eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) io_setup(0x6, 0x0) socket$rds(0x15, 0x5, 0x0) io_submit(0x0, 0x0, &(0x7f0000001340)) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="07011400012989290e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_setup(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0", @ANYRES32, @ANYRES64, @ANYRESHEX=0x0], 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x2) dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x354) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): map and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 419.948870][ T4422] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 419.952151][ T4422] EXT4-fs (loop0): This should not happen!! Data will be lost [ 419.952151][ T4422] [ 419.990163][ T4422] EXT4-fs (loop0): Total free blocks count 0 [ 419.991942][ T4422] EXT4-fs (loop0): Free/Dirty block details [ 420.014048][ T4422] EXT4-fs (loop0): free_blocks=2415919104 [ 420.015606][ T4422] EXT4-fs (loop0): dirty_blocks=32 [ 420.016979][ T4422] EXT4-fs (loop0): Block reservation details [ 420.018586][ T4422] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 420.113466][ T7639] EXT4-fs (loop0): unmounting filesystem. [ 420.676971][T11937] loop2: detected capacity change from 0 to 40427 [ 420.699535][T11937] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 420.701615][T11937] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 420.708702][T11937] F2FS-fs (loop2): invalid crc value [ 420.726930][T11937] F2FS-fs (loop2): Found nat_bits in checkpoint [ 420.755615][T11937] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 420.757694][T11937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 420.796979][T11939] loop1: detected capacity change from 0 to 40427 [ 420.801238][T11939] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 420.803838][T11939] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 420.812346][T11939] F2FS-fs (loop1): invalid crc value [ 420.826385][T11939] F2FS-fs (loop1): Found nat_bits in checkpoint [ 420.837099][ T7543] syz-executor: attempt to access beyond end of device [ 420.837099][ T7543] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 420.853356][T11939] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 420.855283][T11939] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 420.857992][T11970] netlink: 892 bytes leftover after parsing attributes in process `syz.3.2207'. [ 420.899313][ T7786] syz-executor: attempt to access beyond end of device [ 420.899313][ T7786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 421.721479][T11980] loop2: detected capacity change from 0 to 2048 [ 421.815256][T11980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 421.958289][ T4447] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 421.962654][ T4447] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 421.965839][ T4447] EXT4-fs (loop2): This should not happen!! Data will be lost [ 421.965839][ T4447] [ 421.968228][ T4447] EXT4-fs (loop2): Total free blocks count 0 [ 421.970048][ T4447] EXT4-fs (loop2): Free/Dirty block details [ 421.971717][ T4447] EXT4-fs (loop2): free_blocks=2415919104 [ 421.973628][ T4447] EXT4-fs (loop2): dirty_blocks=32 [ 421.974899][ T4447] EXT4-fs (loop2): Block reservation details [ 421.976445][ T4447] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 421.980932][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 422.184180][T12004] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2220'. [ 422.449328][T12017] loop2: detected capacity change from 0 to 2048 [ 422.507788][T12017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 422.573430][ T1592] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 422.577680][ T1592] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 422.584362][ T1592] EXT4-fs (loop2): This should not happen!! Data will be lost [ 422.584362][ T1592] [ 422.592426][ T1592] EXT4-fs (loop2): Total free blocks count 0 [ 422.593648][T12003] loop3: detected capacity change from 0 to 40427 [ 422.597310][ T1592] EXT4-fs (loop2): Free/Dirty block details [ 422.598924][ T1592] EXT4-fs (loop2): free_blocks=2415919104 [ 422.600451][ T1592] EXT4-fs (loop2): dirty_blocks=32 [ 422.601866][ T1592] EXT4-fs (loop2): Block reservation details [ 422.603548][T12003] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 422.605465][T12003] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 422.608714][ T1592] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 422.610720][T12003] F2FS-fs (loop3): invalid crc value [ 422.614619][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 422.633585][T12003] F2FS-fs (loop3): Found nat_bits in checkpoint [ 422.673598][T12003] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 422.675520][T12003] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 422.717743][ T7737] syz-executor: attempt to access beyond end of device [ 422.717743][ T7737] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 422.826154][T12002] loop1: detected capacity change from 0 to 40427 [ 422.839053][T12002] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 422.846459][T12002] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 422.859046][T12002] F2FS-fs (loop1): invalid crc value [ 422.879709][T12002] F2FS-fs (loop1): Found nat_bits in checkpoint [ 422.956745][T12002] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 422.958713][T12002] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 423.168095][ T7786] syz-executor: attempt to access beyond end of device [ 423.168095][ T7786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 423.621549][T12047] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2233'. [ 424.069620][T12054] loop4: detected capacity change from 0 to 2048 [ 424.160132][T12054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 424.258001][ T4441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 424.262451][ T4441] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 424.281883][ T4441] EXT4-fs (loop4): This should not happen!! Data will be lost [ 424.281883][ T4441] [ 424.302667][ T4441] EXT4-fs (loop4): Total free blocks count 0 [ 424.304201][ T4441] EXT4-fs (loop4): Free/Dirty block details [ 424.305696][ T4441] EXT4-fs (loop4): free_blocks=2415919104 [ 424.307308][ T4441] EXT4-fs (loop4): dirty_blocks=32 [ 424.308663][ T4441] EXT4-fs (loop4): Block reservation details [ 424.310284][ T4441] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 424.354829][ T7607] EXT4-fs (loop4): unmounting filesystem. [ 424.494014][T12058] loop3: detected capacity change from 0 to 40427 [ 424.505936][T12058] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 424.512383][T12058] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 424.524354][T12058] F2FS-fs (loop3): invalid crc value [ 424.544493][T12058] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.594091][T12058] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 424.596455][T12058] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.647860][ T7737] syz-executor: attempt to access beyond end of device [ 424.647860][ T7737] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 424.871867][T12069] loop2: detected capacity change from 0 to 40427 [ 424.887252][T12069] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 424.892631][T12069] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 424.905548][T12069] F2FS-fs (loop2): invalid crc value [ 424.925001][T12069] F2FS-fs (loop2): Found nat_bits in checkpoint [ 424.952992][T12069] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 424.955001][T12069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 424.993511][ T7543] syz-executor: attempt to access beyond end of device [ 424.993511][ T7543] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 425.023008][T12090] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2248'. [ 425.932460][T12114] loop2: detected capacity change from 0 to 2048 [ 426.068686][T12114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 426.146254][ T4425] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 426.150476][ T4425] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 426.160326][ T4425] EXT4-fs (loop2): This should not happen!! Data will be lost [ 426.160326][ T4425] [ 426.176514][ T4425] EXT4-fs (loop2): Total free blocks count 0 [ 426.178123][ T4425] EXT4-fs (loop2): Free/Dirty block details [ 426.179638][ T4425] EXT4-fs (loop2): free_blocks=2415919104 [ 426.211647][ T4425] EXT4-fs (loop2): dirty_blocks=32 [ 426.217794][ T4425] EXT4-fs (loop2): Block reservation details [ 426.219266][ T4425] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 426.237772][T12122] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2262'. [ 426.241431][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 426.341907][T12118] loop0: detected capacity change from 0 to 40427 [ 426.356271][T12118] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 426.358256][T12118] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 426.393618][T12118] F2FS-fs (loop0): invalid crc value [ 426.411744][T12118] F2FS-fs (loop0): Found nat_bits in checkpoint [ 426.443879][T12118] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 426.445684][T12118] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 426.478802][ T7639] syz-executor: attempt to access beyond end of device [ 426.478802][ T7639] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 426.637098][T12154] loop3: detected capacity change from 0 to 2048 [ 426.807213][T12154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 426.972152][ T4441] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 426.977964][ T4441] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 426.994093][ T4441] EXT4-fs (loop3): This should not happen!! Data will be lost [ 426.994093][ T4441] [ 427.011519][ T4441] EXT4-fs (loop3): Total free blocks count 0 [ 427.022373][ T4441] EXT4-fs (loop3): Free/Dirty block details [ 427.032861][ T4441] EXT4-fs (loop3): free_blocks=2415919104 [ 427.043143][ T4441] EXT4-fs (loop3): dirty_blocks=32 [ 427.048837][ T4441] EXT4-fs (loop3): Block reservation details [ 427.057962][ T4441] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 427.071926][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 427.650271][T12167] netlink: 892 bytes leftover after parsing attributes in process `syz.3.2277'. [ 427.791499][T12181] loop0: detected capacity change from 0 to 4096 [ 427.796110][T12190] loop3: detected capacity change from 0 to 2048 [ 427.891579][T12190] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 427.971328][ T184] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 427.975698][ T184] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 427.978868][ T184] EXT4-fs (loop3): This should not happen!! Data will be lost [ 427.978868][ T184] [ 427.983837][ T184] EXT4-fs (loop3): Total free blocks count 0 [ 427.985370][ T184] EXT4-fs (loop3): Free/Dirty block details [ 427.999056][ T184] EXT4-fs (loop3): free_blocks=2415919104 [ 428.000518][ T184] EXT4-fs (loop3): dirty_blocks=32 [ 428.005818][ T184] EXT4-fs (loop3): Block reservation details [ 428.007292][ T184] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 428.011526][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 428.996054][T12222] netlink: 860 bytes leftover after parsing attributes in process `syz.4.2297'. [ 429.153732][T12234] loop1: detected capacity change from 0 to 2048 [ 429.196498][T12234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 429.264194][ T4441] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 429.276821][ T4441] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 429.280110][ T4441] EXT4-fs (loop1): This should not happen!! Data will be lost [ 429.280110][ T4441] [ 429.282437][ T4441] EXT4-fs (loop1): Total free blocks count 0 [ 429.305618][ T4441] EXT4-fs (loop1): Free/Dirty block details [ 429.308190][ T4441] EXT4-fs (loop1): free_blocks=2415919104 [ 429.309643][ T4441] EXT4-fs (loop1): dirty_blocks=32 [ 429.310904][ T4441] EXT4-fs (loop1): Block reservation details [ 429.312422][ T4441] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 429.340312][ T7786] EXT4-fs (loop1): unmounting filesystem. [ 429.396337][T12218] loop3: detected capacity change from 0 to 32768 [ 429.445779][T12218] XFS (loop3): Mounting V5 Filesystem [ 429.533944][T12218] XFS (loop3): Ending clean mount [ 429.677809][T12253] loop1: detected capacity change from 0 to 64 [ 429.680594][T12253] hfs: invalid gid -1 [ 429.682125][T12253] hfs: unable to parse mount options [ 429.719599][ T7737] XFS (loop3): Unmounting Filesystem [ 429.763826][T12235] loop4: detected capacity change from 0 to 32768 [ 429.772858][T12235] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2301 (12235) [ 429.784460][T12235] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 429.789803][T12235] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 429.800425][T12235] BTRFS info (device loop4): using free space tree [ 429.845669][ T27] audit: type=1326 audit(429.821:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c942228 code=0x7ffc0000 [ 429.849242][T12237] loop0: detected capacity change from 0 to 40427 [ 429.854486][T12237] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 429.856573][T12237] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 429.869497][ T27] audit: type=1326 audit(429.841:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=235 compat=0 ip=0xffff8c942228 code=0x7ffc0000 [ 429.896562][ T27] audit: type=1326 audit(429.871:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c942228 code=0x7ffc0000 [ 429.933791][T12237] F2FS-fs (loop0): Found nat_bits in checkpoint [ 429.970268][T12237] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 429.972267][T12237] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 430.227551][T12235] BTRFS info (device loop4): enabling ssd optimizations [ 430.370249][ T7607] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 430.951841][T12299] loop2: detected capacity change from 0 to 2048 [ 430.965604][T12298] netlink: 860 bytes leftover after parsing attributes in process `syz.0.2311'. [ 430.993703][T12299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 431.027543][ T1592] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 431.031822][ T1592] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 431.051808][ T1592] EXT4-fs (loop2): This should not happen!! Data will be lost [ 431.051808][ T1592] [ 431.061915][ T1592] EXT4-fs (loop2): Total free blocks count 0 [ 431.072695][ T1592] EXT4-fs (loop2): Free/Dirty block details [ 431.074306][ T1592] EXT4-fs (loop2): free_blocks=2415919104 [ 431.075716][ T1592] EXT4-fs (loop2): dirty_blocks=32 [ 431.077008][ T1592] EXT4-fs (loop2): Block reservation details [ 431.078587][ T1592] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 431.112958][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 431.201233][T12315] loop2: detected capacity change from 0 to 64 [ 431.214143][T12315] hfs: invalid gid -1 [ 431.215175][T12315] hfs: unable to parse mount options [ 431.578834][T12309] loop1: detected capacity change from 0 to 32768 [ 431.641103][T12309] XFS (loop1): Mounting V5 Filesystem [ 431.726775][T12309] XFS (loop1): Ending clean mount [ 431.746146][T12311] loop4: detected capacity change from 0 to 40427 [ 431.758750][T12317] loop2: detected capacity change from 0 to 32768 [ 431.763972][T12317] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2322 (12317) [ 431.771267][T12311] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 431.781335][T12317] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 431.782825][T12311] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 431.784168][T12317] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 431.788760][T12317] BTRFS info (device loop2): using free space tree [ 431.804353][T12311] F2FS-fs (loop4): invalid crc value [ 431.825357][T12311] F2FS-fs (loop4): Found nat_bits in checkpoint [ 431.841695][T12314] loop0: detected capacity change from 0 to 40427 [ 431.844621][T12314] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 431.846605][T12314] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 431.847444][ T7786] XFS (loop1): Unmounting Filesystem [ 431.884370][T12311] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 431.901072][T12311] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 431.903988][T12311] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 431.906099][T12314] F2FS-fs (loop0): Found nat_bits in checkpoint [ 431.944962][ T7607] syz-executor: attempt to access beyond end of device [ 431.944962][ T7607] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 431.983512][T12314] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 431.985538][T12314] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 431.994866][T12317] BTRFS info (device loop2): enabling ssd optimizations [ 432.046957][ T7543] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 432.328529][T12357] netlink: 860 bytes leftover after parsing attributes in process `syz.0.2327'. [ 432.519519][T12363] loop2: detected capacity change from 0 to 1764 [ 432.935429][T12375] loop2: detected capacity change from 0 to 64 [ 432.939851][T12375] hfs: invalid gid -1 [ 432.940909][T12375] hfs: unable to parse mount options [ 433.034865][T12377] loop0: detected capacity change from 0 to 2048 [ 433.089755][T12381] device hsr_slave_0 left promiscuous mode [ 433.122390][T12377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 433.134695][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.136597][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.193536][T12381] device hsr_slave_1 left promiscuous mode [ 433.341674][ T184] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 433.347706][ T184] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 433.355899][ T184] EXT4-fs (loop0): This should not happen!! Data will be lost [ 433.355899][ T184] [ 433.373042][ T184] EXT4-fs (loop0): Total free blocks count 0 [ 433.374624][ T184] EXT4-fs (loop0): Free/Dirty block details [ 433.376296][ T184] EXT4-fs (loop0): free_blocks=2415919104 [ 433.377820][ T184] EXT4-fs (loop0): dirty_blocks=32 [ 433.379115][ T184] EXT4-fs (loop0): Block reservation details [ 433.391482][ T184] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 433.399315][ T7639] EXT4-fs (loop0): unmounting filesystem. [ 433.818209][T12387] loop2: detected capacity change from 0 to 32768 [ 433.888906][T12391] loop3: detected capacity change from 0 to 32768 [ 433.897468][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 433.899951][T12391] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2337 (12391) [ 433.921518][T12391] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 433.925375][T12387] XFS (loop2): Mounting V5 Filesystem [ 433.929554][T12391] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 433.943270][T12391] BTRFS info (device loop3): using free space tree [ 434.048370][T12387] XFS (loop2): Ending clean mount [ 434.158617][ T7543] XFS (loop2): Unmounting Filesystem [ 434.165835][T12391] BTRFS info (device loop3): enabling ssd optimizations [ 434.211323][T12428] loop0: detected capacity change from 0 to 1764 [ 434.215536][ T7737] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 434.462307][T12436] loop0: detected capacity change from 0 to 64 [ 434.464916][T12436] hfs: invalid gid -1 [ 434.465973][T12436] hfs: unable to parse mount options [ 434.488240][T12437] loop4: detected capacity change from 0 to 2048 [ 434.534206][T12415] loop1: detected capacity change from 0 to 40427 [ 434.537139][T12415] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 434.539107][T12415] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 434.547389][T12437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 434.661405][T12415] F2FS-fs (loop1): Found nat_bits in checkpoint [ 434.787446][ T4422] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 434.793918][ T4422] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 434.797164][ T4422] EXT4-fs (loop4): This should not happen!! Data will be lost [ 434.797164][ T4422] [ 434.799643][ T4422] EXT4-fs (loop4): Total free blocks count 0 [ 434.801241][ T4422] EXT4-fs (loop4): Free/Dirty block details [ 434.889424][ T4422] EXT4-fs (loop4): free_blocks=2415919104 [ 434.891122][ T4422] EXT4-fs (loop4): dirty_blocks=32 [ 434.894112][ T4422] EXT4-fs (loop4): Block reservation details [ 434.895797][ T4422] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 434.904007][T12415] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 434.906509][T12415] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 434.940871][ T7607] EXT4-fs (loop4): unmounting filesystem. [ 435.224723][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 435.260955][T12459] device hsr0 entered promiscuous mode [ 435.299889][T12459] device hsr_slave_0 left promiscuous mode [ 435.353081][T12459] device hsr_slave_1 left promiscuous mode [ 435.950593][T12474] loop1: detected capacity change from 0 to 1764 [ 436.027598][ T7750] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.222840][T12469] loop0: detected capacity change from 0 to 32768 [ 436.279060][T12469] XFS (loop0): Mounting V5 Filesystem [ 436.286720][T12472] loop2: detected capacity change from 0 to 32768 [ 436.296303][T12472] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2355 (12472) [ 436.340273][T12472] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 436.343576][T12472] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 436.345990][T12472] BTRFS info (device loop2): using free space tree [ 436.387710][T12469] XFS (loop0): Ending clean mount [ 436.475174][ T7639] XFS (loop0): Unmounting Filesystem [ 436.525623][T12472] BTRFS info (device loop2): enabling ssd optimizations [ 436.541194][T12501] loop3: detected capacity change from 0 to 2048 [ 436.598915][T12501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 436.612998][ T7543] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 436.686329][ T4441] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 436.690733][ T4441] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 436.712222][ T4441] EXT4-fs (loop3): This should not happen!! Data will be lost [ 436.712222][ T4441] [ 436.721805][ T4441] EXT4-fs (loop3): Total free blocks count 0 [ 436.739005][ T4441] EXT4-fs (loop3): Free/Dirty block details [ 436.740739][ T4441] EXT4-fs (loop3): free_blocks=2415919104 [ 436.754005][ T4441] EXT4-fs (loop3): dirty_blocks=32 [ 436.755361][ T4441] EXT4-fs (loop3): Block reservation details [ 436.756790][ T4441] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 436.770608][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 436.895702][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'. [ 438.193846][T12541] loop4: detected capacity change from 0 to 1764 [ 438.339577][T12530] loop0: detected capacity change from 0 to 40427 [ 438.349467][T12530] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 438.356028][T12530] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 438.389470][T12530] F2FS-fs (loop0): Found nat_bits in checkpoint [ 438.443272][T12530] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 438.445284][T12530] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 438.937716][T12553] loop0: detected capacity change from 0 to 2048 [ 439.014146][T12553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 439.174170][ T9] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 439.189894][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 439.212600][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 439.212600][ T9] [ 439.215087][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 439.216639][ T9] EXT4-fs (loop0): Free/Dirty block details [ 439.218112][ T9] EXT4-fs (loop0): free_blocks=2415919104 [ 439.219473][ T9] EXT4-fs (loop0): dirty_blocks=32 [ 439.220771][ T9] EXT4-fs (loop0): Block reservation details [ 439.222147][ T9] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 439.265075][ T7639] EXT4-fs (loop0): unmounting filesystem. [ 439.614140][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'. [ 441.336537][T12597] loop2: detected capacity change from 0 to 2048 [ 441.405606][T12597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 441.534346][ T4447] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 441.538204][ T4447] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 441.541376][ T4447] EXT4-fs (loop2): This should not happen!! Data will be lost [ 441.541376][ T4447] [ 441.551685][ T4447] EXT4-fs (loop2): Total free blocks count 0 [ 441.557465][ T4447] EXT4-fs (loop2): Free/Dirty block details [ 441.558959][ T4447] EXT4-fs (loop2): free_blocks=2415919104 [ 441.560332][ T4447] EXT4-fs (loop2): dirty_blocks=32 [ 441.561585][ T4447] EXT4-fs (loop2): Block reservation details [ 441.587988][ T4447] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 441.593589][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 441.643204][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 441.657974][T12585] loop1: detected capacity change from 0 to 40427 [ 441.697773][T12585] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 441.699836][T12585] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 441.733782][T12585] F2FS-fs (loop1): Found nat_bits in checkpoint [ 441.774346][T12585] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 441.776158][T12585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 444.531646][T12637] loop4: detected capacity change from 0 to 2048 [ 444.610968][T12637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 444.702299][ T4447] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 444.706884][ T4447] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 444.709997][ T4447] EXT4-fs (loop4): This should not happen!! Data will be lost [ 444.709997][ T4447] [ 444.752553][ T4447] EXT4-fs (loop4): Total free blocks count 0 [ 444.754242][ T4447] EXT4-fs (loop4): Free/Dirty block details [ 444.755713][ T4447] EXT4-fs (loop4): free_blocks=2415919104 [ 444.757105][ T4447] EXT4-fs (loop4): dirty_blocks=32 [ 444.758414][ T4447] EXT4-fs (loop4): Block reservation details [ 444.759873][ T4447] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 444.785684][ T7607] EXT4-fs (loop4): unmounting filesystem. [ 444.934822][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 446.116542][T12653] loop2: detected capacity change from 0 to 40427 [ 446.138451][T12653] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 446.140405][T12653] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 446.204632][T12653] F2FS-fs (loop2): Found nat_bits in checkpoint [ 446.292739][T12653] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 446.294635][T12653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 447.271774][T12680] loop1: detected capacity change from 0 to 2048 [ 447.400793][T12680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 447.565456][ T4447] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 447.569456][ T4447] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 447.612712][ T4447] EXT4-fs (loop1): This should not happen!! Data will be lost [ 447.612712][ T4447] [ 447.615411][ T4447] EXT4-fs (loop1): Total free blocks count 0 [ 447.616975][ T4447] EXT4-fs (loop1): Free/Dirty block details [ 447.618596][ T4447] EXT4-fs (loop1): free_blocks=2415919104 [ 447.620081][ T4447] EXT4-fs (loop1): dirty_blocks=32 [ 447.621476][ T4447] EXT4-fs (loop1): Block reservation details [ 447.662691][ T4447] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 447.744079][ T7786] EXT4-fs (loop1): unmounting filesystem. [ 447.971525][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 449.371538][T12698] loop4: detected capacity change from 0 to 40427 [ 449.397662][T12698] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 449.399805][T12698] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 449.473110][T12698] F2FS-fs (loop4): Found nat_bits in checkpoint [ 449.513082][T12698] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 449.515100][T12698] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 450.781151][T12715] loop2: detected capacity change from 0 to 2048 [ 451.072282][T12715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 451.268512][ T184] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 451.274449][ T184] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 451.277748][ T184] EXT4-fs (loop2): This should not happen!! Data will be lost [ 451.277748][ T184] [ 451.280260][ T184] EXT4-fs (loop2): Total free blocks count 0 [ 451.281816][ T184] EXT4-fs (loop2): Free/Dirty block details [ 451.336322][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2427'. [ 451.336750][ T184] EXT4-fs (loop2): free_blocks=2415919104 [ 451.352563][ T184] EXT4-fs (loop2): dirty_blocks=32 [ 451.353936][ T184] EXT4-fs (loop2): Block reservation details [ 451.355643][ T184] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 451.404319][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 453.259623][T12743] loop1: detected capacity change from 0 to 40427 [ 453.287268][T12743] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 453.292985][T12743] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 453.324752][T12743] F2FS-fs (loop1): Found nat_bits in checkpoint [ 453.370927][T12743] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 453.373651][T12743] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 455.056690][T12766] loop2: detected capacity change from 0 to 2048 [ 455.111500][T12766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 455.156658][ T9] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 455.160928][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 455.165413][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 455.165413][ T9] [ 455.179355][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 455.184494][ T9] EXT4-fs (loop2): Free/Dirty block details [ 455.186003][ T9] EXT4-fs (loop2): free_blocks=2415919104 [ 455.187503][ T9] EXT4-fs (loop2): dirty_blocks=32 [ 455.209300][ T9] EXT4-fs (loop2): Block reservation details [ 455.210831][ T9] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 455.234005][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 455.269939][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2439'. [ 458.974238][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2451'. [ 459.080868][T12809] loop2: detected capacity change from 0 to 2048 [ 459.201197][T12809] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 459.253256][ T9] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 459.257403][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 459.260333][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 459.260333][ T9] [ 459.277946][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 459.279513][ T9] EXT4-fs (loop2): Free/Dirty block details [ 459.280953][ T9] EXT4-fs (loop2): free_blocks=2415919104 [ 459.282345][ T9] EXT4-fs (loop2): dirty_blocks=32 [ 459.315093][ T9] EXT4-fs (loop2): Block reservation details [ 459.316677][ T9] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 459.336297][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 460.614383][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 463.756542][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 468.427094][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'. [ 471.840445][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 471.947016][T12900] loop2: detected capacity change from 0 to 40427 [ 471.964148][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 471.990323][T12900] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 471.992359][T12900] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 472.052720][T12900] F2FS-fs (loop2): Found nat_bits in checkpoint [ 472.103795][T12900] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 472.105837][T12900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 473.319807][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 473.937983][ T27] audit: type=1326 audit(473.911:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0742228 code=0x7ffc0000 [ 473.946302][ T27] audit: type=1326 audit(473.921:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0742228 code=0x7ffc0000 [ 473.967323][T12957] loop1: detected capacity change from 0 to 256 [ 473.991241][ T27] audit: type=1326 audit(473.941:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0742228 code=0x7ffc0000 [ 474.002572][ T27] audit: type=1326 audit(473.941:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb0742228 code=0x7ffc0000 [ 474.036260][ T27] audit: type=1326 audit(473.941:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0742228 code=0x7ffc0000 [ 474.041568][ T27] audit: type=1326 audit(473.941:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0742228 code=0x7ffc0000 [ 474.083601][ T27] audit: type=1326 audit(473.941:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0742228 code=0x7ffc0000 [ 474.089138][ T27] audit: type=1326 audit(473.941:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb0742228 code=0x7ffc0000 [ 474.136818][ T27] audit: type=1326 audit(473.941:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb074225c code=0x7ffc0000 [ 474.142319][ T27] audit: type=1326 audit(473.941:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb0740ae0 code=0x7ffc0000 [ 474.315031][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 474.348702][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2510'. [ 474.438389][T12951] loop0: detected capacity change from 0 to 40427 [ 474.471059][T12951] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 474.473460][T12951] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 474.494384][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 474.532867][T12951] F2FS-fs (loop0): Found nat_bits in checkpoint [ 474.586500][T12951] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 474.589790][T12951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 474.974355][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.995670][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.049922][T12991] binder: Bad value for 'stats' [ 475.363411][T12970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.584296][T12996] loop4: detected capacity change from 0 to 512 [ 475.609531][T12995] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 475.611706][T12995] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 475.632616][ T7750] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 475.908104][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2523'. [ 476.464085][T13022] loop1: detected capacity change from 0 to 256 [ 477.050961][T13030] loop0: detected capacity change from 0 to 512 [ 477.065556][T13028] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 477.081495][T13028] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 477.493101][T13010] loop4: detected capacity change from 0 to 40427 [ 477.503724][T13010] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 477.506318][T13010] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 477.514798][T13010] F2FS-fs (loop4): Found nat_bits in checkpoint [ 477.529408][T13010] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 477.531287][T13010] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 477.762703][T12287] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 477.784496][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 477.905558][T13053] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2541'. [ 478.001043][T13059] cgroup: No subsys list or none specified [ 478.003030][T12287] usb 1-1: Using ep0 maxpacket: 32 [ 478.162911][T12287] usb 1-1: unable to get BOS descriptor or descriptor too short [ 478.243038][T12287] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 478.245803][T12287] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 478.322937][T12287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.326153][T12287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.328324][T12287] usb 1-1: SerialNumber: syz [ 478.353295][T13033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.674603][T13033] binder: Bad value for 'stats' [ 478.824764][T13066] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 478.836906][T13066] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 478.851381][T13033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.861875][T13068] loop3: detected capacity change from 0 to 512 [ 479.134439][T13072] usb usb9: usbfs: process 13072 (syz.3.2549) did not claim interface 0 before use [ 479.181780][T13062] loop2: detected capacity change from 0 to 40427 [ 479.191275][T13062] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 479.193910][T13062] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 479.204026][T13072] loop3: detected capacity change from 0 to 4096 [ 479.206629][T13072] ntfs3: Unknown parameter '^uêžïçy8wÎüÏ9¿{sç{ιgîý®Óüv]šwNJJJ""EÒ"1RI*9Ǥß>GÅNéè¿MôÌü¯oÚÐ'mž^h˵“×Ù:Néö”¾I ÛÍ>ß«|`»¿' [ 479.231001][T13062] F2FS-fs (loop2): Found nat_bits in checkpoint [ 479.248433][T13062] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 479.250233][T13062] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 479.259184][ T9181] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 479.495799][T13092] capability: warning: `syz.3.2556' uses 32-bit capabilities (legacy support in use) [ 479.552891][T12287] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 479.559293][T12287] usb 1-1: USB disconnect, device number 20 [ 480.097806][T13116] loop2: detected capacity change from 0 to 512 [ 480.141449][T13112] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 480.143765][T13112] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 480.163595][ T7750] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 481.434204][T13109] loop4: detected capacity change from 0 to 40427 [ 481.451638][T13109] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 481.459377][T13109] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 481.490502][T13109] F2FS-fs (loop4): Found nat_bits in checkpoint [ 481.515467][T13118] loop0: detected capacity change from 0 to 32768 [ 481.529203][T13109] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 481.531355][T13109] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 481.586450][T13118] XFS (loop0): Mounting V5 Filesystem [ 481.592415][T13130] loop2: detected capacity change from 0 to 32768 [ 481.687714][T13130] XFS (loop2): Mounting V5 Filesystem [ 481.696708][T13159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.698971][T13118] XFS (loop0): Ending clean mount [ 481.701923][T13159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.710734][T13159] binder: Bad value for 'stats' [ 481.748805][T13130] XFS (loop2): Ending clean mount [ 481.806176][ T7639] XFS (loop0): Unmounting Filesystem [ 481.821780][ T7543] XFS (loop2): Unmounting Filesystem [ 482.430341][T13178] loop0: detected capacity change from 0 to 512 [ 482.450652][T13171] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 482.475893][T13171] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 486.309661][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 486.345199][T13194] Bluetooth: MGMT ver 1.22 [ 486.551529][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.551832][T13204] loop1: detected capacity change from 0 to 2048 [ 486.562003][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.585874][T13210] binder: Bad value for 'stats' [ 486.604152][T13204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 486.642963][ T7786] EXT4-fs (loop1): unmounting filesystem. [ 486.836501][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 488.970243][T13217] loop4: detected capacity change from 0 to 40427 [ 489.001996][T13217] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 489.005210][T13236] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2606'. [ 489.025816][T13217] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 489.085081][T13217] F2FS-fs (loop4): Found nat_bits in checkpoint [ 489.216020][T13217] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 489.217999][T13217] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 489.539306][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.541709][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.562767][T13261] binder: Bad value for 'stats' [ 491.779908][T13296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.803963][T13296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.002059][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 492.117950][T13303] loop0: detected capacity change from 0 to 1024 [ 493.083974][ T4339] hfsplus: b-tree write err: -5, ino 4 [ 493.105948][T13312] netlink: 'syz.2.2635': attribute type 4 has an invalid length. [ 493.124567][T13276] loop3: detected capacity change from 0 to 40427 [ 493.141037][T13314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.143621][T13276] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 493.145559][T13276] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 493.146866][T13314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.290035][T13276] F2FS-fs (loop3): Found nat_bits in checkpoint [ 493.306386][T13276] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 493.308386][T13276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 494.575312][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.577008][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.834494][T13348] loop1: detected capacity change from 0 to 1024 [ 497.456631][ T4441] hfsplus: b-tree write err: -5, ino 4 [ 497.891074][T13350] loop4: detected capacity change from 0 to 40427 [ 497.922667][T13350] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 497.931401][T13350] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 497.941363][T13350] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 499.009900][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 499.461790][T13390] loop4: detected capacity change from 0 to 1024 [ 501.943431][ T4339] hfsplus: b-tree write err: -5, ino 4 [ 503.362180][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 503.513587][T13424] loop1: detected capacity change from 0 to 1024 [ 503.546364][T13400] loop4: detected capacity change from 0 to 40427 [ 503.574423][T13400] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 503.576523][T13400] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 503.716695][T13400] F2FS-fs (loop4): Found nat_bits in checkpoint [ 504.085398][T13400] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 504.088005][T13400] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 504.511695][ T184] hfsplus: b-tree write err: -5, ino 4 [ 508.252096][T13467] loop2: detected capacity change from 0 to 40427 [ 508.263775][T13467] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 508.265797][T13467] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 508.276104][T13469] loop1: detected capacity change from 0 to 1024 [ 508.317478][T13467] F2FS-fs (loop2): Found nat_bits in checkpoint [ 508.503032][T13467] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 508.505070][T13467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 509.323157][ T4438] hfsplus: b-tree write err: -5, ino 4 [ 509.725256][T13481] netlink: 624 bytes leftover after parsing attributes in process `syz.2.2696'. [ 511.905732][T13513] loop2: detected capacity change from 0 to 1024 [ 511.920917][T13515] loop3: detected capacity change from 0 to 1024 [ 511.973335][T13512] netlink: 624 bytes leftover after parsing attributes in process `syz.0.2708'. [ 512.003497][T13515] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 512.005349][T13515] hfsplus: xattr searching failed [ 512.030637][T13515] syz.3.2711: attempt to access beyond end of device [ 512.030637][T13515] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 512.148869][T13515] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 512.151548][T13515] syz.3.2711: attempt to access beyond end of device [ 512.151548][T13515] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 512.172970][T13515] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 513.138355][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.150702][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.170289][T13507] loop4: detected capacity change from 0 to 40427 [ 513.200884][T13507] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 513.203002][T13507] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 513.230436][T13507] F2FS-fs (loop4): Found nat_bits in checkpoint [ 513.258010][T13507] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 513.259960][T13507] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 514.113970][T13550] loop1: detected capacity change from 0 to 1024 [ 514.140731][T13550] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 514.142317][T13550] hfsplus: xattr searching failed [ 514.144647][T13551] loop2: detected capacity change from 0 to 1024 [ 514.168215][T13551] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 514.169817][T13551] hfsplus: xattr searching failed [ 514.177415][T13551] syz.2.2724: attempt to access beyond end of device [ 514.177415][T13551] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 514.180931][T13551] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 514.191112][T13551] syz.2.2724: attempt to access beyond end of device [ 514.191112][T13551] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 514.197047][T13551] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 514.204370][T13548] netlink: 624 bytes leftover after parsing attributes in process `syz.3.2722'. [ 515.005907][T13575] loop3: detected capacity change from 0 to 512 [ 515.148023][T13575] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2734: Parent and EA inode have the same ino 15 [ 515.161745][T13575] EXT4-fs (loop3): Remounting filesystem read-only [ 515.163874][T13575] EXT4-fs (loop3): 1 orphan inode deleted [ 515.165368][T13575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 515.200002][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 515.269782][T13579] netlink: 'syz.2.2736': attribute type 72 has an invalid length. [ 515.277255][T13579] netlink: 'syz.2.2736': attribute type 8 has an invalid length. [ 515.382045][T13568] loop1: detected capacity change from 0 to 40427 [ 515.400883][T13568] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 515.425886][T13568] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 515.439664][T13568] F2FS-fs (loop1): Found nat_bits in checkpoint [ 515.461004][T13568] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 515.463146][T13568] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 515.465847][T13587] loop2: detected capacity change from 0 to 1024 [ 516.238763][T13587] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 516.240475][T13587] hfsplus: xattr searching failed [ 516.317818][T13595] loop0: detected capacity change from 0 to 1024 [ 516.361481][T13595] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 516.370781][T13595] hfsplus: xattr searching failed [ 516.381077][T13595] syz.0.2739: attempt to access beyond end of device [ 516.381077][T13595] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 516.386475][T13595] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 516.388667][T13595] syz.0.2739: attempt to access beyond end of device [ 516.388667][T13595] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 516.413901][T13595] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 516.423692][T13603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2745'. [ 516.730338][T13616] loop0: detected capacity change from 0 to 512 [ 516.796496][T13614] netlink: 'syz.3.2747': attribute type 72 has an invalid length. [ 516.807068][T13616] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2748: Parent and EA inode have the same ino 15 [ 516.813113][T13614] netlink: 'syz.3.2747': attribute type 8 has an invalid length. [ 516.828911][T13616] EXT4-fs (loop0): Remounting filesystem read-only [ 516.830775][T13616] EXT4-fs (loop0): 1 orphan inode deleted [ 516.862773][T13616] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 517.019708][ T7639] EXT4-fs (loop0): unmounting filesystem. [ 519.617950][T13631] loop0: detected capacity change from 0 to 16 [ 519.629014][T13633] loop1: detected capacity change from 0 to 1024 [ 519.632246][T13631] erofs: (device loop0): mounted with root inode @ nid 36. [ 519.724391][T13639] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2757'. [ 519.735278][T13639] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2757'. [ 519.738707][T13639] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2757'. [ 519.748184][T13641] loop0: detected capacity change from 0 to 1024 [ 519.751692][T13633] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 519.756157][T13633] hfsplus: xattr searching failed [ 519.822229][T13641] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 519.828507][T13641] hfsplus: xattr searching failed [ 519.837997][T13641] syz.0.2758: attempt to access beyond end of device [ 519.837997][T13641] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 519.852893][T13641] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 519.859154][T13650] loop3: detected capacity change from 0 to 512 [ 519.863307][T13641] syz.0.2758: attempt to access beyond end of device [ 519.863307][T13641] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 519.871134][T13646] netlink: 'syz.2.2760': attribute type 72 has an invalid length. [ 519.880103][T13646] netlink: 'syz.2.2760': attribute type 8 has an invalid length. [ 519.883055][T13650] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2762: Parent and EA inode have the same ino 15 [ 519.886423][T13650] EXT4-fs (loop3): Remounting filesystem read-only [ 519.888130][T13650] EXT4-fs (loop3): 1 orphan inode deleted [ 519.889640][T13650] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 519.891670][T13641] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 519.944403][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 523.834753][T13684] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2773'. [ 523.837477][T13684] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2773'. [ 523.845820][T13687] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2771'. [ 524.144056][T13694] loop1: detected capacity change from 0 to 512 [ 524.185407][T13691] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2775'. [ 524.212395][T13694] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2778: Parent and EA inode have the same ino 15 [ 524.219387][T13694] EXT4-fs (loop1): Remounting filesystem read-only [ 524.221333][T13694] EXT4-fs (loop1): 1 orphan inode deleted [ 524.231398][T13694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 524.334624][ T7786] EXT4-fs (loop1): unmounting filesystem. [ 525.262801][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 525.493605][T13736] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2793'. [ 529.986057][T13776] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2807'. [ 539.046212][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.102186][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.850127][T13932] usb usb8: usbfs: process 13932 (syz.0.2865) did not claim interface 0 before use [ 540.925673][T13936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.928062][T13936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.937719][T13935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.940096][T13935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.067123][T14063] loop3: detected capacity change from 0 to 512 [ 555.086401][T14063] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 555.089602][T14063] EXT4-fs (loop3): filesystem is read-only [ 555.115564][T14063] EXT4-fs (loop3): filesystem is read-only [ 555.117120][T14063] EXT4-fs (loop3): orphan cleanup on readonly fs [ 555.118805][T14063] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.2914: bad orphan inode 16 [ 555.132847][T14063] ext4_test_bit(bit=15, block=3) = 0 [ 555.134213][T14063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 555.164887][T14063] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 3: comm syz.3.2914: lblock 0 mapped to illegal pblock 3 (length 1) [ 555.243424][T14072] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 3: comm syz.3.2914: lblock 0 mapped to illegal pblock 3 (length 1) [ 555.322208][T14063] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 3: comm syz.3.2914: lblock 0 mapped to illegal pblock 3 (length 1) [ 555.366590][T14063] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 3: comm syz.3.2914: lblock 0 mapped to illegal pblock 3 (length 1) [ 555.473407][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 556.022064][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.025381][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.248754][T14080] loop1: detected capacity change from 0 to 32768 [ 557.493349][T14103] loop2: detected capacity change from 0 to 2048 [ 557.591921][T14093] loop0: detected capacity change from 0 to 32768 [ 557.746115][T14093] add_index: next_index = 0. Resetting! [ 557.762867][T14103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 557.830869][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 558.724518][T14118] loop1: detected capacity change from 0 to 32768 [ 564.014562][T14174] loop3: detected capacity change from 0 to 32768 [ 572.180335][T14290] loop0: detected capacity change from 0 to 256 [ 572.223408][T14290] exFAT-fs (loop0): bogus data start sector [ 572.231955][T14290] exFAT-fs (loop0): failed to read boot sector [ 572.242616][T14290] exFAT-fs (loop0): failed to recognize exfat type [ 572.788530][T14311] loop2: detected capacity change from 0 to 512 [ 572.798902][T14311] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 572.831410][T14311] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 572.843245][T14311] EXT4-fs (loop2): 1 truncate cleaned up [ 572.845050][T14311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 576.648377][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 577.495873][T14348] loop4: detected capacity change from 0 to 512 [ 577.517874][T14348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 577.571802][T14348] EXT4-fs (loop4): 1 truncate cleaned up [ 577.575586][T14348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 581.478866][ T7607] EXT4-fs (loop4): unmounting filesystem. [ 581.637724][T14371] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 582.001136][T14389] loop3: detected capacity change from 0 to 512 [ 582.007056][T14389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 582.031576][T14389] EXT4-fs (loop3): 1 truncate cleaned up [ 582.033303][T14389] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 585.742086][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 585.829389][T14421] 9pnet_virtio: no channels available for device syz [ 586.007562][T14422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.020618][T14441] tmpfs: Unknown parameter 'n' [ 587.113648][ T4238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.117974][ T4238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.121135][ T4238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.125349][ T4238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.133010][ T4238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 587.135138][ T4238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.173131][T14447] loop3: detected capacity change from 0 to 512 [ 587.274087][T14447] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 587.304557][T14447] EXT4-fs (loop3): 1 truncate cleaned up [ 587.306116][T14447] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 587.312347][T14442] chnl_net:caif_netlink_parms(): no params data found [ 588.499717][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 588.622382][ T4431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.721296][T14442] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.724085][T14442] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.726742][T14442] device bridge_slave_0 entered promiscuous mode [ 588.744472][ T4431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.747082][T14467] netlink: zone id is out of range [ 588.748472][T14467] netlink: del zone limit has 4 unknown bytes [ 588.772846][T14442] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.774664][T14442] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.782353][T14442] device bridge_slave_1 entered promiscuous mode [ 588.954020][ T4431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.982884][T14482] loop3: detected capacity change from 0 to 512 [ 588.986683][T14442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.991275][T14442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.011292][T14476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.033684][T14442] team0: Port device team_slave_0 added [ 589.053126][T14484] 9pnet_virtio: no channels available for device syz [ 589.058014][T14442] team0: Port device team_slave_1 added [ 589.088545][T14442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.090546][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.102744][T14442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.121151][T14442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.125796][T14482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 589.132079][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.147566][T14442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.197781][T14482] EXT4-fs (loop3): 1 truncate cleaned up [ 589.199533][T14482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 589.371715][ T4238] Bluetooth: hci0: command tx timeout [ 589.447821][T14442] device hsr_slave_0 entered promiscuous mode [ 589.701069][T14442] device hsr_slave_1 entered promiscuous mode [ 590.169181][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 590.241831][ T4431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.033537][T14521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.363423][T14539] netlink: 3988 bytes leftover after parsing attributes in process `syz.0.3093'. [ 591.472788][ T4238] Bluetooth: hci0: command tx timeout [ 591.651091][T14442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 591.845759][T14442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 591.897280][T14442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 591.966808][T14442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 592.914234][T14581] trusted_key: encrypted_key: master key parameter '' is invalid [ 592.955833][ T4431] device hsr_slave_0 left promiscuous mode [ 593.017761][ T4431] device hsr_slave_1 left promiscuous mode [ 593.093173][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.095024][ T4431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.101181][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.108595][ T4431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.129368][ T4431] device bridge_slave_1 left promiscuous mode [ 593.131148][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.163658][ T4431] device bridge_slave_0 left promiscuous mode [ 593.165424][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.282799][ T4431] device veth1_macvtap left promiscuous mode [ 593.284579][ T4431] device veth0_macvtap left promiscuous mode [ 593.286820][ T4431] device veth1_vlan left promiscuous mode [ 593.288518][ T4431] device veth0_vlan left promiscuous mode [ 593.471119][ T4431] team0 (unregistering): Port device team_slave_1 removed [ 593.480561][ T4431] team0 (unregistering): Port device team_slave_0 removed [ 593.487981][ T4431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.530933][ T4431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.543557][ T4236] Bluetooth: hci0: command tx timeout [ 593.659238][ T4431] bond0 (unregistering): Released all slaves [ 593.791785][T14589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.839513][T14442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.855861][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 593.858144][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 593.869286][T14442] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.874805][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 593.877366][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 593.879743][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.881501][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.907509][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 593.910038][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 593.912912][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.915292][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.917119][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.919266][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 593.921975][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 593.944485][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.947888][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.957308][T14442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.962610][T14442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.980829][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 593.983440][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 593.986021][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.988721][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.991211][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.994373][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.997101][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.001772][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.323555][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.325961][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.420028][T14442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.594762][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.597847][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.720056][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.723604][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.726673][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.729502][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.743250][T14442] device veth0_vlan entered promiscuous mode [ 594.795527][T14442] device veth1_vlan entered promiscuous mode [ 594.935828][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.938975][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.954546][T14442] device veth0_macvtap entered promiscuous mode [ 595.010181][T14442] device veth1_macvtap entered promiscuous mode [ 595.138232][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.143822][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.153700][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.179123][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.200430][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.212215][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.215023][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.217686][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.232616][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.235326][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.237800][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.240371][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.272640][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.275431][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.287593][T14442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.291756][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 595.294515][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 595.297123][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.299904][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.305292][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.309781][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.312340][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.315123][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.317525][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.320058][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.323299][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.325827][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.328289][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.330809][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.351051][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.353803][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.356203][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.358828][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.391908][T14442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.509257][T12512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 595.512438][T12512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.518431][T14442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.531252][T14442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.542826][T14442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.545061][T14442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.614745][ T4236] Bluetooth: hci0: command tx timeout [ 595.777956][T14647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.807009][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.809268][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.814980][T12512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 595.927167][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.929634][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.967370][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 597.141448][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'. [ 597.144068][T14693] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3150'. [ 597.303355][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 597.513282][T14721] syz.3.3165 (pid 14721) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 597.537185][T14721] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 597.595867][T14721] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 599.081859][T14766] UBIFS error (pid: 14766): cannot open "", error -22 [ 599.380430][T14779] 9pnet_virtio: no channels available for device syz [ 601.255586][T14850] 9pnet_virtio: no channels available for device syz [ 602.689826][T14909] fuse: Bad value for 'fd' [ 602.697953][T14909] 9pnet_virtio: no channels available for device syz [ 603.990986][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'. [ 604.044596][T14963] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3268'. [ 604.047240][T14963] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 605.192361][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'. [ 605.237928][T14999] 9pnet_virtio: no channels available for device syz [ 607.181025][T15024] tmpfs: Bad value for 'nr_inodes' [ 607.644923][T15057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3312'. [ 607.897651][T15061] tipc: Failed to obtain node identity [ 607.904378][T15061] tipc: Enabling of bearer rejected, failed to enable media [ 617.453518][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.454991][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.402931][T15301] capability: warning: `syz.0.3418' uses deprecated v2 capabilities in a way that may be insecure [ 618.413472][T15301] netlink: 'syz.0.3418': attribute type 21 has an invalid length. [ 618.415514][T15301] IPv6: NLM_F_CREATE should be specified when creating new route [ 618.427799][T15303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.437992][T15303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.573335][T15308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3420'. [ 618.575823][T15308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3420'. [ 618.579773][T15308] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.602965][T15308] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.604736][T15308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.690227][T15310] tipc: Started in network mode [ 618.691511][T15310] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 618.693920][T15310] tipc: Enabled bearer , priority 10 [ 618.708768][T15310] tipc: Resetting bearer [ 618.841969][T15310] tipc: Disabling bearer [ 619.226804][T15334] netlink: 'syz.4.3433': attribute type 21 has an invalid length. [ 619.228897][T15334] IPv6: NLM_F_CREATE should be specified when creating new route [ 620.473681][T15371] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3438'. [ 620.476300][T15351] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3438'. [ 623.299193][T15457] loop3: detected capacity change from 0 to 16 [ 623.334341][T15457] erofs: (device loop3): mounted with root inode @ nid 36. [ 623.693984][T15451] loop2: detected capacity change from 0 to 32768 [ 623.702377][T15451] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 623.705210][T15451] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 623.754887][T15451] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 623.771120][ T4022] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 623.773441][ T4022] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 623.877202][ T4022] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 103ms [ 623.890042][ T4022] gfs2: fsid=syz:syz.0: jid=0: Done [ 623.892411][T15451] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 624.270050][T15451] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 624.270050][T15451] bh = 2049 (type: exp=14, found=8) [ 624.270050][T15451] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1406 [ 624.285056][T15451] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 624.287520][T15451] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 624.289703][T15451] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 624.555009][T15451] gfs2: fsid=syz:syz.0: File system withdrawn [ 624.556588][T15451] CPU: 1 PID: 15451 Comm: syz.2.3469 Not tainted 6.1.94-syzkaller #0 [ 624.558612][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 624.561206][T15451] Call trace: [ 624.562033][T15451] dump_backtrace+0x1c8/0x1f4 [ 624.563240][T15451] show_stack+0x2c/0x3c [ 624.564373][T15451] dump_stack_lvl+0x108/0x170 [ 624.565607][T15451] dump_stack+0x1c/0x5c [ 624.566695][T15451] gfs2_withdraw+0xeec/0x1310 [ 624.567937][T15451] gfs2_metatype_check_ii+0x8c/0xac [ 624.569279][T15451] gfs2_quota_init+0xc50/0xee4 [ 624.570564][T15451] gfs2_make_fs_rw+0x360/0x4b0 [ 624.571862][T15451] gfs2_reconfigure+0x5d8/0xaa8 [ 624.573053][T15451] reconfigure_super+0x318/0x7a4 [ 624.574325][T15451] path_mount+0xc70/0xe5c [ 624.575417][T15451] __arm64_sys_mount+0x45c/0x594 [ 624.576707][T15451] invoke_syscall+0x98/0x2c0 [ 624.577909][T15451] el0_svc_common+0x138/0x258 [ 624.579174][T15451] do_el0_svc+0x64/0x218 [ 624.580245][T15451] el0_svc+0x58/0x168 [ 624.581331][T15451] el0t_64_sync_handler+0x84/0xf0 [ 624.582617][T15451] el0t_64_sync+0x18c/0x190 [ 624.663375][T15451] gfs2: unable to remount read-write [ 625.876349][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.879913][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.979398][T15520] loop3: detected capacity change from 0 to 512 [ 626.058149][T15520] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 626.087504][T15520] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 626.090038][T15520] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.3498: Corrupt directory, running e2fsck is recommended [ 626.130304][T15520] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 626.141642][T15520] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.3498: corrupted in-inode xattr [ 626.159997][T15520] EXT4-fs (loop3): Remounting filesystem read-only [ 626.169603][T15520] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.3498: couldn't read orphan inode 15 (err -117) [ 626.183073][T15520] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 626.219286][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.222849][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.225644][T15519] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 626.228572][T15519] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 626.231026][T15519] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.3498: Corrupt directory, running e2fsck is recommended [ 626.255735][T15519] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 626.258693][T15519] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 626.261220][T15519] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.3498: Corrupt directory, running e2fsck is recommended [ 626.273974][T15519] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 3: comm syz.3.3498: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 626.308514][T15519] EXT4-fs (loop3): Remounting filesystem read-only [ 629.093663][ T7737] EXT4-fs (loop3): unmounting filesystem. [ 629.955117][T15575] loop2: detected capacity change from 0 to 256 [ 630.501911][ T4236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.506173][ T4236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.509032][ T4236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.511603][ T4236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.530671][ T4236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 630.533778][ T4236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.683385][T14406] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 630.802045][T15589] loop1: detected capacity change from 0 to 256 [ 630.862086][T15583] chnl_net:caif_netlink_parms(): no params data found [ 631.069574][T15583] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.073893][T15583] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.076412][T15583] device bridge_slave_0 entered promiscuous mode [ 631.972749][T15583] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.974543][T15583] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.990937][T15583] device bridge_slave_1 entered promiscuous mode [ 632.105755][T15583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.174269][T15583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.319133][T15583] team0: Port device team_slave_0 added [ 632.344933][T15583] team0: Port device team_slave_1 added [ 632.463104][T15583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.477950][T15583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.527988][T15583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.572718][ T4236] Bluetooth: hci5: command tx timeout [ 632.602955][T15583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.604759][T15583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.622596][T15583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.740232][T15583] device hsr_slave_0 entered promiscuous mode [ 632.784520][T15583] device hsr_slave_1 entered promiscuous mode [ 632.822315][T15583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.824350][T15583] Cannot create hsr debugfs directory [ 632.981932][T15633] loop2: detected capacity change from 0 to 256 [ 633.029370][T15612] loop1: detected capacity change from 0 to 32768 [ 633.037406][T15612] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 633.049544][T15612] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 633.055147][T15583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.066319][T15612] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 633.078592][ T4283] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 633.080394][ T4283] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 633.133523][ T4283] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 53ms [ 633.135550][ T4283] gfs2: fsid=syz:syz.0: jid=0: Done [ 633.136958][T15612] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 634.027391][T15583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.180934][T15612] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 635.180934][T15612] bh = 2049 (type: exp=14, found=8) [ 635.180934][T15612] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1406 [ 635.196372][T15612] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 635.198450][T15612] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 635.201731][T15612] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 635.207887][ T4238] Bluetooth: hci5: command tx timeout [ 635.227653][T15612] gfs2: fsid=syz:syz.0: File system withdrawn [ 635.229178][T15612] CPU: 1 PID: 15612 Comm: syz.1.3528 Not tainted 6.1.94-syzkaller #0 [ 635.231328][T15612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 635.233943][T15612] Call trace: [ 635.234733][T15612] dump_backtrace+0x1c8/0x1f4 [ 635.235971][T15612] show_stack+0x2c/0x3c [ 635.237101][T15612] dump_stack_lvl+0x108/0x170 [ 635.238337][T15612] dump_stack+0x1c/0x5c [ 635.239456][T15612] gfs2_withdraw+0xeec/0x1310 [ 635.240689][T15612] gfs2_metatype_check_ii+0x8c/0xac [ 635.242092][T15612] gfs2_quota_init+0xc50/0xee4 [ 635.243407][T15612] gfs2_make_fs_rw+0x360/0x4b0 [ 635.244650][T15612] gfs2_reconfigure+0x5d8/0xaa8 [ 635.245819][T15612] reconfigure_super+0x318/0x7a4 [ 635.247068][T15612] path_mount+0xc70/0xe5c [ 635.248215][T15612] __arm64_sys_mount+0x45c/0x594 [ 635.249520][T15612] invoke_syscall+0x98/0x2c0 [ 635.250662][T15612] el0_svc_common+0x138/0x258 [ 635.251933][T15612] do_el0_svc+0x64/0x218 [ 635.253013][T15612] el0_svc+0x58/0x168 [ 635.254088][T15612] el0t_64_sync_handler+0x84/0xf0 [ 635.255432][T15612] el0t_64_sync+0x18c/0x190 [ 635.295149][T15612] gfs2: unable to remount read-write [ 635.361873][T15583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.251975][ T4238] Bluetooth: hci5: command tx timeout [ 637.333283][ T4438] tipc: Left network mode [ 637.344001][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.370355][T15583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.375427][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.855890][T15583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 637.914408][T15583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.730896][T15583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.877912][T15583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 639.292702][ T4236] Bluetooth: hci5: command tx timeout [ 639.815668][T15583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.828514][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.830845][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.840535][T15583] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.845392][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 639.847895][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.850452][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.852304][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.882042][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 639.884562][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 639.887082][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.889545][T12513] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.891402][T12513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.904447][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 639.925535][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.928391][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.931568][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.937990][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.940687][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.958970][T15583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 639.961565][T15583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.968014][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.970606][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.973459][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.983937][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.986735][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 640.004684][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 640.450394][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.453208][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.472654][T15583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.536957][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.539688][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.721445][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 640.724196][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 640.728700][T15583] device veth0_vlan entered promiscuous mode [ 640.739022][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.741436][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.755462][T15583] device veth1_vlan entered promiscuous mode [ 640.823146][ T4438] device hsr_slave_0 left promiscuous mode [ 640.862736][ T4438] device hsr_slave_1 left promiscuous mode [ 640.922839][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.924786][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.931886][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.935561][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.954704][ T4438] device bridge_slave_1 left promiscuous mode [ 640.956337][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.994449][ T4438] device bridge_slave_0 left promiscuous mode [ 640.996154][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.158670][ T4438] device veth1_macvtap left promiscuous mode [ 641.160349][ T4438] device veth0_macvtap left promiscuous mode [ 641.162086][ T4438] device veth1_vlan left promiscuous mode [ 641.164386][ T4438] device veth0_vlan left promiscuous mode [ 641.362814][T15731] loop3: detected capacity change from 0 to 256 [ 641.600127][ T4438] team0 (unregistering): Port device team_slave_1 removed [ 641.608588][ T4438] team0 (unregistering): Port device team_slave_0 removed [ 642.007259][ T4438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.438287][ T4438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.222910][ T4438] bond0 (unregistering): Released all slaves [ 643.573422][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 643.576097][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 643.578718][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 643.581342][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 643.591792][T15583] device veth0_macvtap entered promiscuous mode [ 643.598329][T15583] device veth1_macvtap entered promiscuous mode [ 643.640144][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.653168][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.655731][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.658295][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.678699][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.687232][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.689879][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.701385][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.710613][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.714714][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.720680][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.727583][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.730130][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.737727][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.748390][T15583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.751066][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 643.754031][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 643.756549][T12513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 643.764562][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.767901][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.780952][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.800655][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.808860][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.811571][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.818986][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.821611][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.832609][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.835369][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.842827][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.845559][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.847988][T15583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.861069][T15583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.868621][T15583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.870923][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 643.874293][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 643.884243][T15583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.886574][T15583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.896527][T15583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.898883][T15583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.993791][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.996038][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.001926][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 644.042020][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.044608][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.054122][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 644.506697][T15767] loop3: detected capacity change from 0 to 256 [ 644.597613][T15767] FAT-fs (loop3): Directory bread(block 64) failed [ 644.599645][T15767] FAT-fs (loop3): Directory bread(block 65) failed [ 644.601279][T15767] FAT-fs (loop3): Directory bread(block 66) failed [ 644.606481][T15769] loop2: detected capacity change from 0 to 256 [ 644.618398][T15767] FAT-fs (loop3): Directory bread(block 67) failed [ 644.620249][T15767] FAT-fs (loop3): Directory bread(block 68) failed [ 644.628525][T15767] FAT-fs (loop3): Directory bread(block 69) failed [ 644.630420][T15767] FAT-fs (loop3): Directory bread(block 70) failed [ 644.632004][T15767] FAT-fs (loop3): Directory bread(block 71) failed [ 644.637075][T15767] FAT-fs (loop3): Directory bread(block 72) failed [ 644.638959][T15767] FAT-fs (loop3): Directory bread(block 73) failed [ 648.857086][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.871658][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.037326][T15802] loop2: detected capacity change from 0 to 512 [ 649.255001][T15802] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 649.257840][T15802] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 649.260484][T15802] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.3587: Corrupt directory, running e2fsck is recommended [ 649.265435][T15802] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 649.267689][T15802] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.3587: corrupted in-inode xattr [ 649.271095][T15802] EXT4-fs (loop2): Remounting filesystem read-only [ 649.277209][T15802] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.3587: couldn't read orphan inode 15 (err -117) [ 649.312625][T15802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 649.336987][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.339400][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.382166][T15794] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 649.391830][T15794] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 649.412168][T15794] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.3587: Corrupt directory, running e2fsck is recommended [ 649.439942][T15794] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 649.453489][T15794] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 649.456081][T15794] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.3587: Corrupt directory, running e2fsck is recommended [ 649.459435][T15794] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 3: comm syz.2.3587: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 650.267059][T15794] EXT4-fs (loop2): Remounting filesystem read-only [ 651.267256][ T7543] EXT4-fs (loop2): unmounting filesystem. [ 653.277813][T15871] netlink: 'syz.0.3617': attribute type 10 has an invalid length. [ 653.279932][T15871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3617'. [ 653.299135][T15871] bridge0: port 3(syz_tun) entered blocking state [ 653.303232][T15871] bridge0: port 3(syz_tun) entered disabled state [ 653.313773][T15871] device syz_tun entered promiscuous mode [ 653.317552][T15871] bridge0: port 3(syz_tun) entered blocking state [ 653.320699][T15871] bridge0: port 3(syz_tun) entered forwarding state [ 653.339407][T15873] netlink: 'syz.2.3619': attribute type 33 has an invalid length. [ 653.365656][T15876] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3619'. [ 653.409829][T15874] bridge0: port 3(syz_tun) entered disabled state [ 653.475420][T15874] device syz_tun left promiscuous mode [ 653.477154][T15874] bridge0: port 3(syz_tun) entered disabled state [ 653.985308][T15890] device team_slave_0 entered promiscuous mode [ 653.987362][T15890] device team_slave_1 entered promiscuous mode [ 654.013439][T15890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 654.049569][T15890] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 654.356035][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 654.357879][ T27] audit: type=1107 audit(654.321:34): pid=15892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 654.357879][ T27] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 656.047290][ T27] audit: type=1107 audit(656.021:35): pid=15924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 656.047290][ T27] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 658.246210][ T27] audit: type=1107 audit(658.221:36): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 658.246210][ T27] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 658.403286][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 660.577279][ T27] audit: type=1107 audit(660.551:37): pid=15991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 660.577279][ T27] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 678.894020][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.895677][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.230660][T16246] loop3: detected capacity change from 0 to 64 [ 679.294501][T16246] MINIX-fs: bad superblock or unable to read bitmaps [ 679.630069][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'. [ 679.756566][T16261] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.759231][T16261] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.761543][T16261] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.764053][T16261] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.972664][T16261] device vxlan0 entered promiscuous mode [ 680.047465][T16266] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3762'. [ 680.068492][T16266] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3762'. [ 680.087623][T16228] loop0: detected capacity change from 0 to 32768 [ 680.127878][T16228] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.3749 (16228) [ 680.223361][T16228] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 680.226669][T16228] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 680.229046][T16228] BTRFS info (device loop0): using free space tree [ 680.381699][T16275] netlink: 'syz.3.3763': attribute type 12 has an invalid length. [ 680.434496][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.447440][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.519233][T16228] BTRFS info (device loop0): enabling ssd optimizations [ 680.553133][T15583] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 681.214468][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'. [ 682.065966][T16310] loop0: detected capacity change from 0 to 32768 [ 682.090101][T16310] find_entry called with index = 0 [ 682.091493][T16310] find_entry called with index = 0 [ 682.113098][T16310] find_entry called with index >= next_index [ 682.114638][T16310] find_entry called with index >= next_index [ 682.116148][T16310] find_entry called with index >= next_index [ 682.170590][T16311] loop3: detected capacity change from 0 to 40427 [ 682.239052][T16311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 682.293707][T16311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 682.330464][ T7737] syz-executor: attempt to access beyond end of device [ 682.330464][ T7737] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 682.817848][T16325] loop1: detected capacity change from 0 to 32768 [ 682.835383][T16325] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.3778 (16325) [ 682.870669][T16325] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 682.882841][T16325] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 682.885227][T16325] BTRFS info (device loop1): using free space tree [ 682.908581][T16330] loop2: detected capacity change from 0 to 32768 [ 683.026879][T16034] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 683.285360][T16325] BTRFS info (device loop1): enabling ssd optimizations [ 683.345595][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3789'. [ 683.411115][T16375] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.413590][T16375] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.415965][T16375] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.418301][T16375] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.525907][T14442] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 683.544868][T16375] device vxlan0 entered promiscuous mode [ 683.932749][T16034] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 683.935511][T16034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.937590][T16034] usb 1-1: Product: syz [ 683.938610][T16034] usb 1-1: Manufacturer: syz [ 683.939751][T16034] usb 1-1: SerialNumber: syz [ 683.963811][T16034] usb 1-1: config 0 descriptor?? [ 684.166747][T16378] loop2: detected capacity change from 0 to 32768 [ 684.205907][T16378] find_entry called with index = 0 [ 684.207237][T16378] find_entry called with index = 0 [ 684.207743][T16034] usb 1-1: USB disconnect, device number 21 [ 684.230551][T16378] find_entry called with index >= next_index [ 684.232325][T16378] find_entry called with index >= next_index [ 684.233945][T16378] find_entry called with index >= next_index [ 684.527950][T16381] loop1: detected capacity change from 0 to 40427 [ 684.543892][T16381] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 684.545621][T16381] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 684.558993][T16381] F2FS-fs (loop1): invalid crc value [ 684.579113][T16381] F2FS-fs (loop1): Found nat_bits in checkpoint [ 684.609071][T16395] loop3: detected capacity change from 0 to 32768 [ 684.625173][T16381] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 684.649354][T16381] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 684.651311][T16381] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 684.666818][T16381] syz.1.3791: attempt to access beyond end of device [ 684.666818][T16381] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 684.759187][T14442] syz-executor: attempt to access beyond end of device [ 684.759187][T14442] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 685.793508][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3806'. [ 685.798064][T16422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.800283][T16422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.802805][T16422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.804981][T16422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.879880][T16422] device vxlan0 entered promiscuous mode [ 686.593136][T16432] loop0: detected capacity change from 0 to 32768 [ 686.659407][T16432] find_entry called with index = 0 [ 686.660932][T16432] find_entry called with index = 0 [ 686.692828][T16432] find_entry called with index >= next_index [ 686.694446][T16432] find_entry called with index >= next_index [ 686.695826][T16432] find_entry called with index >= next_index [ 686.698416][T16434] loop1: detected capacity change from 0 to 40427 [ 686.716712][T16434] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 686.718520][T16434] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 686.750832][T16434] F2FS-fs (loop1): invalid crc value [ 686.787879][T16434] F2FS-fs (loop1): Found nat_bits in checkpoint [ 686.843791][T16434] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 686.873529][T16434] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 686.875407][T16434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 686.935357][T16434] syz.1.3811: attempt to access beyond end of device [ 686.935357][T16434] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 687.213314][T14442] syz-executor: attempt to access beyond end of device [ 687.213314][T14442] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 687.540490][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3824'. [ 688.218054][T16460] loop3: detected capacity change from 0 to 32768 [ 688.221786][T16460] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.3822 (16460) [ 688.254166][T16460] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 688.256864][T16460] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 688.269988][T16460] BTRFS info (device loop3): using free space tree [ 688.512601][T16460] BTRFS info (device loop3): enabling ssd optimizations [ 688.612763][ T7737] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 688.827025][T16480] loop2: detected capacity change from 0 to 32768 [ 689.820367][T16513] loop2: detected capacity change from 0 to 40427 [ 689.869326][T16513] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 689.871005][T16513] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 689.884528][T16513] F2FS-fs (loop2): invalid crc value [ 689.906409][T16513] F2FS-fs (loop2): Found nat_bits in checkpoint [ 689.946594][T16513] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 689.963114][T16513] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 689.965015][T16513] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 690.016078][T16513] syz.2.3835: attempt to access beyond end of device [ 690.016078][T16513] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 690.094290][ T7543] syz-executor: attempt to access beyond end of device [ 690.094290][ T7543] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 692.589354][T16544] loop1: detected capacity change from 0 to 32768 [ 693.681674][T16559] loop1: detected capacity change from 0 to 40427 [ 693.700834][T16559] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 693.721105][T16559] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 693.724503][T16559] F2FS-fs (loop1): invalid crc value [ 693.792921][T16559] F2FS-fs (loop1): Found nat_bits in checkpoint [ 693.853016][T16559] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 693.865640][T16559] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 693.867514][T16559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 693.917197][T14442] syz-executor: attempt to access beyond end of device [ 693.917197][T14442] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 696.247360][T16587] loop2: detected capacity change from 0 to 32768 [ 697.837970][T16599] loop3: detected capacity change from 0 to 40427 [ 697.952915][T16599] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 697.954944][T16599] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 697.988662][T16599] F2FS-fs (loop3): invalid crc value [ 698.030528][T16599] F2FS-fs (loop3): Found nat_bits in checkpoint [ 698.124615][T16599] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 698.205120][T16599] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 698.206984][T16599] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 698.374200][ T7737] syz-executor: attempt to access beyond end of device [ 698.374200][ T7737] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 702.592393][T16654] loop1: detected capacity change from 0 to 40427 [ 702.595874][T16654] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 702.597595][T16654] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 702.612327][T16654] F2FS-fs (loop1): invalid crc value [ 702.666588][T16654] F2FS-fs (loop1): Found nat_bits in checkpoint [ 702.699782][T16654] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 702.727504][T16654] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 702.729381][T16654] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 702.782356][T14442] syz-executor: attempt to access beyond end of device [ 702.782356][T14442] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 707.806390][T16709] loop2: detected capacity change from 0 to 40427 [ 707.846995][T16709] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 707.848788][T16709] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 707.862160][T16709] F2FS-fs (loop2): invalid crc value [ 707.908988][T16709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 707.951128][T16709] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 707.968480][T16709] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 707.970348][T16709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 708.013986][T16709] syz.2.3904: attempt to access beyond end of device [ 708.013986][T16709] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 708.078287][ T7543] syz-executor: attempt to access beyond end of device [ 708.078287][ T7543] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 710.379547][T16739] loop2: detected capacity change from 0 to 32768 [ 711.347635][T16746] loop2: detected capacity change from 0 to 40427 [ 711.369406][T16746] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 711.371079][T16746] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 711.394624][T16746] F2FS-fs (loop2): invalid crc value [ 711.450469][T16746] F2FS-fs (loop2): Found nat_bits in checkpoint [ 711.482887][T16746] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 711.533127][T16746] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 711.535064][T16746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 711.627175][ T7543] syz-executor: attempt to access beyond end of device [ 711.627175][ T7543] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 711.693722][ T4236] Bluetooth: hci0: command 0x0406 tx timeout [ 714.391785][T16779] loop1: detected capacity change from 0 to 32768 [ 716.616030][T16791] loop2: detected capacity change from 0 to 40427 [ 716.639305][T16791] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 716.641100][T16791] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 716.647287][T16791] F2FS-fs (loop2): invalid crc value [ 716.680690][T16791] F2FS-fs (loop2): Found nat_bits in checkpoint [ 716.725165][T16791] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 716.753237][T16791] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 716.755132][T16791] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 716.832710][ T7543] syz-executor: attempt to access beyond end of device [ 716.832710][ T7543] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 720.421141][T16835] loop3: detected capacity change from 0 to 40427 [ 720.443713][T16835] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 720.445596][T16835] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 720.481269][T16835] F2FS-fs (loop3): invalid crc value [ 720.542784][T16835] F2FS-fs (loop3): Found nat_bits in checkpoint [ 720.576325][T16835] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 720.585126][T16835] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 720.587033][T16835] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 720.673219][ T7737] syz-executor: attempt to access beyond end of device [ 720.673219][ T7737] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 724.340108][T16873] loop0: detected capacity change from 0 to 32768 [ 724.380032][T16873] find_entry called with index = 0 [ 724.381325][T16873] find_entry called with index = 0 [ 726.528963][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 727.949186][T16911] loop3: detected capacity change from 0 to 32768 [ 727.980657][T16911] find_entry called with index = 0 [ 727.999319][T16911] find_entry called with index = 0 [ 728.508838][T16914] loop2: detected capacity change from 0 to 40427 [ 728.533543][T16914] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 728.535374][T16914] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 728.543106][T16914] F2FS-fs (loop2): invalid crc value [ 728.574251][T16914] F2FS-fs (loop2): Found nat_bits in checkpoint [ 728.604907][T16914] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 728.616835][T16914] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 728.618597][T16914] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 729.783183][T16947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3988'. [ 729.933060][T16955] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 729.986125][T16960] ptrace attach of "./syz-executor exec"[7543] was attempted by "./syz-executor exec"[16960] [ 730.389263][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3995'. [ 730.516902][T16957] loop3: detected capacity change from 0 to 32768 [ 730.590684][ T27] audit: type=1326 audit(730.561:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa942228 code=0x7ffc0000 [ 730.599443][ T27] audit: type=1326 audit(730.581:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=433 compat=0 ip=0xffffaa942228 code=0x7ffc0000 [ 730.611740][ T27] audit: type=1326 audit(730.581:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa942228 code=0x7ffc0000 [ 730.747152][T16958] loop1: detected capacity change from 0 to 40427 [ 730.762225][T16958] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 730.771044][T16958] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 730.787955][T16958] F2FS-fs (loop1): invalid crc value [ 730.813793][T16958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 730.862324][T16958] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 730.878098][T16958] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 730.879806][T16958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 731.231925][T17005] skb len=10633 headroom=168 headlen=10633 tailroom=5263 [ 731.231925][T17005] mac=(168,0) net=(168,20) trans=188 [ 731.231925][T17005] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 731.231925][T17005] csum(0x350e2a31 ip_summed=3 complete_sw=0 valid=0 level=0) [ 731.231925][T17005] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 731.240521][T17005] dev name=veth0 feat=0x000061164fdd19e9 [ 731.241971][T17005] skb linear: 00000000: 45 02 29 89 c8 8a 00 00 0f 2f 19 8a ac 14 14 18 [ 731.244275][T17005] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 731.246489][T17005] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 731.248653][T17005] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 731.250973][T17005] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 731.253185][T17005] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 731.255482][T17005] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.257721][T17005] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.259958][T17005] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.262140][T17005] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.264453][T17005] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.266733][T17005] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.268981][T17005] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.271149][T17005] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.273407][T17005] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.275637][T17005] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.277833][T17005] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.280074][T17005] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.282376][T17005] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 731.284609][T17005] ------------[ cut here ]------------ [ 731.286043][T17005] offset (10633) >= skb_headlen() (10633) [ 731.288072][T17005] WARNING: CPU: 1 PID: 17005 at net/core/dev.c:3305 skb_checksum_help+0x55c/0x64c [ 731.290445][T17005] Modules linked in: [ 731.291426][T17005] CPU: 1 PID: 17005 Comm: syz.3.4014 Not tainted 6.1.94-syzkaller #0 [ 731.293425][T17005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 731.295973][T17005] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 731.298007][T17005] pc : skb_checksum_help+0x55c/0x64c [ 731.299405][T17005] lr : skb_checksum_help+0x558/0x64c [ 731.300758][T17005] sp : ffff80001def6aa0 [ 731.301790][T17005] x29: ffff80001def6ac0 x28: 1fffe000204ee2b0 x27: dfff800000000000 [ 731.303807][T17005] x26: 0000000000002989 x25: 0000000000002989 x24: 0000000000002989 [ 731.305851][T17005] x23: ffff0001027715d8 x22: ffff000102771570 x21: ffff000102771500 [ 731.307874][T17005] x20: 00000000ffffffea x19: 0000000000002989 x18: ffff80001def5e20 [ 731.309863][T17005] x17: 0000000000000000 x16: ffff8000120adb00 x15: 0000000000000002 [ 731.311987][T17005] x14: 00000000ffffffff x13: 000000000000b7c8 x12: 0000000000040000 [ 731.313979][T17005] x11: 000000000001b4cf x10: ffff800022bf9000 x9 : ccaa39459f233200 [ 731.315929][T17005] x8 : ccaa39459f233200 x7 : 000000000000b7c8 x6 : 000000000000b790 [ 731.318048][T17005] x5 : ffff80001def6398 x4 : ffff80001591ad08 x3 : ffff80000834dd4c [ 731.320124][T17005] x2 : 0000000000000001 x1 : 0000000000000200 x0 : 0000000000000000 [ 731.322130][T17005] Call trace: [ 731.322956][T17005] skb_checksum_help+0x55c/0x64c [ 731.324231][T17005] ip_do_fragment+0x1bc/0x1b14 [ 731.325504][T17005] ip_fragment+0x11c/0x308 [ 731.326678][T17005] __ip_finish_output+0x280/0x458 [ 731.327984][T17005] ip_finish_output+0x40/0x268 [ 731.329173][T17005] ip_output+0x330/0x49c [ 731.330319][T17005] ip_local_out+0x120/0x160 [ 731.331469][T17005] iptunnel_xmit+0x40c/0x8ec [ 731.332622][T17005] ip_tunnel_xmit+0x19a0/0x28bc [ 731.333795][T17005] ipgre_xmit+0x70c/0xab0 [ 731.334927][T17005] dev_hard_start_xmit+0x25c/0x9a4 [ 731.336235][T17005] __dev_queue_xmit+0x186c/0x38d8 [ 731.337543][T17005] dev_queue_xmit+0x24/0x34 [ 731.338719][T17005] packet_sendmsg+0x36f0/0x4cd8 [ 731.339968][T17005] ____sys_sendmsg+0x55c/0x848 [ 731.341209][T17005] __sys_sendmsg+0x26c/0x33c [ 731.342365][T17005] __arm64_sys_sendmsg+0x80/0x94 [ 731.343641][T17005] invoke_syscall+0x98/0x2c0 [ 731.344855][T17005] el0_svc_common+0x138/0x258 [ 731.346038][T17005] do_el0_svc+0x64/0x218 [ 731.347192][T17005] el0_svc+0x58/0x168 [ 731.348228][T17005] el0t_64_sync_handler+0x84/0xf0 [ 731.349521][T17005] el0t_64_sync+0x18c/0x190 [ 731.350736][T17005] irq event stamp: 1443 [ 731.351789][T17005] hardirqs last enabled at (1442): [] __up_console_sem+0xb4/0x100 [ 731.354344][T17005] hardirqs last disabled at (1443): [] el1_dbg+0x24/0x80 [ 731.356704][T17005] softirqs last enabled at (756): [] local_bh_enable+0x10/0x34 [ 731.359063][T17005] softirqs last disabled at (898): [] local_bh_disable+0x10/0x34 [ 731.361560][T17005] ---[ end trace 0000000000000000 ]--- [ 740.343131][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.344868][ T2049] ieee802154 phy1 wpan1: encryption failed: -22