last executing test programs: 6m0.158855994s ago: executing program 0 (id=336): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'sh\x00'}, 0x2c) 5m59.644012909s ago: executing program 0 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b7040000000000008500000015"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m59.230484271s ago: executing program 0 (id=342): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000100)=""/161, 0xa1}], 0x2) tkill(r6, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00'/20, @ANYRES32=r9, @ANYBLOB="0c0001800500030002000000"], 0x24}, 0x1, 0x0, 0x0, 0x300440c0}, 0x4000) connect$bt_rfcomm(r7, &(0x7f00000000c0)={0x1f, @none, 0x9}, 0xa) 5m55.828549079s ago: executing program 0 (id=351): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 5m54.098670148s ago: executing program 0 (id=361): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x3) 5m52.974119865s ago: executing program 0 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f000001a400)={0x6, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x2, 0x6, 0x100, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @ldst={0x3, 0x3, 0x4, 0x0, 0xa, 0x100, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0xfff, 0xda, &(0x7f000001a240)=""/218, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f000001a340)={0x3, 0xc, 0x8, 0xa}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f000001a380)=[{0x3, 0x5, 0x5, 0x7}, {0x0, 0x3, 0x5, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x4, 0x4, 0x2}, {0x5, 0x4, 0x6, 0x3}], 0x10, 0x2, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x8) 5m51.565169003s ago: executing program 32 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f000001a400)={0x6, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x2, 0x6, 0x100, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @ldst={0x3, 0x3, 0x4, 0x0, 0xa, 0x100, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0xfff, 0xda, &(0x7f000001a240)=""/218, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f000001a340)={0x3, 0xc, 0x8, 0xa}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f000001a380)=[{0x3, 0x5, 0x5, 0x7}, {0x0, 0x3, 0x5, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x4, 0x4, 0x2}, {0x5, 0x4, 0x6, 0x3}], 0x10, 0x2, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x8) 5m43.48930135s ago: executing program 5 (id=404): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, 0x0, 0x0) 5m39.826047053s ago: executing program 5 (id=412): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x911) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r4 = epoll_create1(0x0) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)) 5m38.630614768s ago: executing program 5 (id=417): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b00", 0xc, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5m38.427640785s ago: executing program 5 (id=418): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 5m37.501648178s ago: executing program 5 (id=422): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 5m36.164691409s ago: executing program 5 (id=424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) mremap(&(0x7f00000b3000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000112000/0x1000)=nil) 5m35.642811502s ago: executing program 33 (id=424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) mremap(&(0x7f00000b3000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000112000/0x1000)=nil) 3m37.206080264s ago: executing program 6 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000380)="c8ea", &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r1}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) 3m36.60609414s ago: executing program 6 (id=1061): dup(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3m36.158489514s ago: executing program 6 (id=1067): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x502, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m34.11729296s ago: executing program 6 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000600)='./file1\x00', 0x103942, 0x36cb6ec6cb24f419) sendfile(r1, r0, 0x0, 0x80000000) 3m33.831063511s ago: executing program 6 (id=1087): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x60) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) 3m33.493853547s ago: executing program 6 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000440)="001c39a1f31fdc4d714a3743c80fe039966796c5980fd8a3d7409cb03b7639671ac19f2da1cdbfc6cbfc0dafa23532a54900ed8cbd4c2a45e95f720bb5beaa7f484dbf25142ce1c039e62a008acb7b11f1255d1730e6c0d719e4c2c9043ecb9943ec98bb8f49111c848bc86e291dc364ae1f8f777dd6a43aaf9fa62b228b6ed2849c9a1391529c4a4dcc6daec184209affbd3ca821", 0x95}], 0x1, 0xc4e, 0x2, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() madvise(&(0x7f0000206000/0x4000)=nil, 0x4000, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 3m17.020858734s ago: executing program 34 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000440)="001c39a1f31fdc4d714a3743c80fe039966796c5980fd8a3d7409cb03b7639671ac19f2da1cdbfc6cbfc0dafa23532a54900ed8cbd4c2a45e95f720bb5beaa7f484dbf25142ce1c039e62a008acb7b11f1255d1730e6c0d719e4c2c9043ecb9943ec98bb8f49111c848bc86e291dc364ae1f8f777dd6a43aaf9fa62b228b6ed2849c9a1391529c4a4dcc6daec184209affbd3ca821", 0x95}], 0x1, 0xc4e, 0x2, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() madvise(&(0x7f0000206000/0x4000)=nil, 0x4000, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 1m15.119181582s ago: executing program 3 (id=1765): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x162, "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"}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000082505a5a440000000010109024400010100001b09040000030206000005241a"], 0x0) syz_emit_ethernet(0x2ce, 0x0, 0x0) 1m11.635087745s ago: executing program 3 (id=1773): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket(0x2000000000000021, 0x2, 0x10000000000002) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x30bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1m11.269164118s ago: executing program 3 (id=1777): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1m10.994208322s ago: executing program 3 (id=1780): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m8.928276604s ago: executing program 3 (id=1786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000100)=0x1000000, 0x4) 58.700120568s ago: executing program 3 (id=1814): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 57.212179963s ago: executing program 35 (id=1814): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 18.757636989s ago: executing program 9 (id=1942): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000c05"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 14.93105828s ago: executing program 9 (id=1950): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 14.88207734s ago: executing program 8 (id=1951): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f"], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x1, 0x2, 0x2, 0x7fffffff, 0x85f, 0x9, 0x7, 0x500, 0x3, 0x2000, 0xfffffffb, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 13.358556295s ago: executing program 7 (id=1955): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce160", 0x7f}, {0x0}, {&(0x7f0000002880)="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", 0x10e}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3e", 0x5b}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec482", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 12.842560256s ago: executing program 7 (id=1959): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000002880)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cbf8fbaaec9647b07d0a4965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee425367bc33b71054226beb00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896ed56473baf984a067b1b8773017042c903de1c421991e68995f58d3465ec4e7d734b375c04d5ba90d06cf30a05e802b63ce2ff861f27d6ded13918f0c33169c6bca92fa8b8cccc944946434358e5a0193a91a73794fc72", 0xd7}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e661725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a4678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200000062635399677c089645ecee7fdddf4f74", 0xe2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000", 0x7a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e0", 0xa9}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004ad", 0x5d}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 12.012668551s ago: executing program 7 (id=1961): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="61636c2c6e6f696e74722c6174696d655f7175616e74756d3d30303030303030303030303030303030303030372c6c6f63616c666c6f636b732c6c6f63616c616c6c6f633d30303030303030303030303030303030303030332c6c6f63616c666c6f636b732c696e74722c6865617274626561743d6e6f6e652c0024855616ead4c7dc9e9da093713b0e6a6e67e1af8e4f5d7cbff1185218b41bcefa2f4f41b8212051258a0a6168526c8eef9d759bbb36a4b49ff8042320899ca9b6e9fa68a0abe364e0e2d46408f18da37d557aa1ebb8aa29451a584f1980dc477bd97f6a0446b8957872e51c2adf98e1acff806babdc9d58bc06d6d0b19476862cebe64cafa5a069852602786f40bf6a1bf7594e171d16ced9409b168ef591c2f5b676a2eb18e8a3b91275fd4467aea2037bd9790e240137bc7c80cc99e9dd662a5f"], 0x5, 0x4430, &(0x7f0000000240)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x2000) sendfile(r0, r0, 0x0, 0x800000009) 11.66202397s ago: executing program 4 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'ip6tnl0\x00'}}, 0x1e) 11.344517604s ago: executing program 8 (id=1966): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x800}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdir(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000880)) 10.28227712s ago: executing program 4 (id=1968): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') 9.567817635s ago: executing program 8 (id=1970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000180)=0x200000000) 9.418102444s ago: executing program 4 (id=1971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000200)=0x1000) 9.316483487s ago: executing program 9 (id=1973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x20040054) 9.190138432s ago: executing program 8 (id=1974): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000002880)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cbf8fbaaec9647b07d0a4965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee425367bc33b71054226beb00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896ed56473baf984a067b1b8773017042c903de1c421991e68995f58d3465ec4e7d734b375c04d5ba90d06cf30a05e802b63ce2ff861f27d6ded13918f0c33169c6bca92fa8b8cccc944946434358e5a0193a91a73794fc72", 0xd7}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e661725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a4678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200000062635399677c089645ecee7fdddf4f74", 0xe2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000", 0x7a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e0", 0xa9}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004ad", 0x5d}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 7.390147797s ago: executing program 7 (id=1977): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) 7.336429388s ago: executing program 4 (id=1978): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f"], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x1, 0x2, 0x2, 0x7fffffff, 0x85f, 0x9, 0x7, 0x500, 0x3, 0x2000, 0xfffffffb, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 7.292140668s ago: executing program 8 (id=1979): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x80005, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1, 0x0, 0x20007fffffff}, 0x18) exit(0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x3f, &(0x7f00000000c0)=0xa) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$hfs(&(0x7f0000001740), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f00000004c0)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836352c63726561746f723df0e007ba2c6469725f756d61736b3d30303030303030303030303030303030303030303030352c6469725f756d61736b3d30303030303030303030303030303030303030303030342c706172743d3078303030303030303030303030303030362c00725b841ff18a058915ec6999a1cec1e300e26b71985209f2f9735b4624aabf646f453ab27eccfe4ac64acaa865ced046361ece34bb1dc37979ab8447dba3bf25d70f926a218a4fef9634778135b1723fb20cf8793a8330b843bcb5b1f14f1c7c8e21cd47f15c34c1a0460262ed748b8a840fbf5740f96540011f"], 0x11, 0x2b6, &(0x7f0000000200)="$eJzs3U9rE0EYx/HfbNI22lK3tiJ4rBb0Ilov4iUieRGeRG0iFENFrfjnVMWTiN69+xZ8EV4U34CePPkC6mllZifZJLvZTUOTber3Aw2b7D47z2T/zDyBsgLw37rV+Pn52m/7Z6SKKtK7G1IgqSZVJZ3R2dqznd3t3Xarmbejiouwf0ZxpElts7XTygq1cS7CC+27qpZ6P8NkRFF081fZSaB07urPEEgL/up062tTzyzf6zHj9g45j1lj9rWvF1ouOw8AQLn8+B/4cX7Jz9+DQNrww/6RHP/HtV92AhMX5a7tGf9dlRUZe3xPuVVJvedKOLs+6FSJo7Q8N/B+XvGZ1TfBNEVVpcslOPFgu926vPWo3Qz0RnWvZ7M199qMT92OgmzXM2rTHCP03WTPKBddH+ZsHzbj/J9L6st/dcwWx2a+mu/mjgn1Sc3u/K8aGXuY3JEKB45UnP+V4Xt0vQztVvK3jXq9HvRtsuIaOedb8Ap6WcuuSNQ5o1bU/wNBWJSnizo9EBX37mpB1Gpm1Gbn3ZCotb4o25vu2Ty8vUkzH8xts64/+qJGz/w/sPltKPfKTK4asxEPBe4bj/szn91c1e0zTI0c6cul+y0uDEv9b/49DQfwXvd1XctPX756WGm3W0/swr2MhcdL3U/m3kqZ25S8oL3kkwVFTmrjzqA0zcQuHeoO7f2jcGN7lR2Jg3KsFxrfpnsilbFQ8v0JU5Ec9LIzQUnsvMvE9V9Sr1TjyZ59CTPn6SP+EOD3GNk5dreCS2KjeEYu6eSBKrjF4RVcuuZK1Yyu5jp/Uboweouhz/OYMA390F1+/wcAAAAAAAAAAAAAAAAAAJg10/h3grL7CAAAAAAAAAAAAAAAAAAAAADArOs+/1ed5/9qtOf/Dj6K5TCf//txRzz/F5i8fwEAAP//FZd8vg==") 7.261556705s ago: executing program 9 (id=1980): openat$nvram(0xffffffffffffff9c, 0x0, 0x4c0000, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) 6.282545223s ago: executing program 1 (id=1983): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000440)="aa151bc190ed26ae24b58bf7f337e5ece2bb45a27a1789c59efeb2698308efad07fb4fc151b08575454918bebdca4588aa03ddd8befa8d542e032d4eb7578c764e1f89b84571ba59042b8c2543ef16a825fa83f5947f02dc9a7d201b60938b4d385cbd10c71bf75e35a96eae6eedc62b4995d87cc54c8e50b13e1307e6252b1d600c8fa7977b4cd89c87bad9d4e29721fe41d79ad471902c3da1e2bfd11f592f02fe2be251f326a3c72f14c81bc4149885e3a37b2ce34e02903006b0a4d8c5a25a50e1e59e8a9383eaaeea7854f3570049", 0xd1}, {&(0x7f00000005c0)="f34d729e81", 0x5}], 0x2) 5.029948424s ago: executing program 2 (id=1984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d40)=@newtfilter={0x38, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) 5.017161777s ago: executing program 8 (id=1985): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.378567031s ago: executing program 1 (id=1986): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0x0, &(0x7f0000004080), 0x1, 0x76f, &(0x7f0000002080)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141142, 0x1) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) pwritev2(r0, &(0x7f0000000240), 0x0, 0x1400, 0x0, 0xc) 4.293961735s ago: executing program 7 (id=1987): r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902120001000000000904000000ef"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x20000004) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0xe, 0x0, &(0x7f0000000900)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syz_open_dev$media(0x0, 0x400, 0x100000) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x500, 0x810, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) 3.50215948s ago: executing program 4 (id=1988): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, 0x0) 3.350782691s ago: executing program 2 (id=1989): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff7b}) 3.329668502s ago: executing program 9 (id=1990): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4430, &(0x7f0000000240)="$eJzs3c9PHNcdAPA3A67BtV1wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXNYLrG2ShbVgiXLwgdws5RQphygHK5Fy42RxyNX5E3LJ0TlbSg65RIpkhWh3Z2FndldsEAux8/kcGOb9Zr8zb98chhcnKg+W1nJLa7nCSq68cG/tQu7tcml9uRjiQ9K2/2OH1z/d6cV1ctTX3i/ZzctX/3vnQgifL375Ynt7eztU9Ye2xpp+/+7bRwvNx4Y4U6fabvvWDsobIYSzLeOq6gsh/P+zEKIQwqUkbTI5DoYQToV63p1H793NHdBonj4vXsy/nHu8NX5+dvPJVue/PQrho9Lv/nZ/+es/9o1/9ZcD6h4AAAAAAAAAAAAAAAAAgFfc9K2bt/8zOhaeRaF/M2p9X3c6OXZ6P3b7wPyh938sAAAAAAAAAAAAAAAAAAAA/Eztvv+fi860ef9/KjlOdKi//a/ej5Hemfn3zakro2PJ/u9RS/7fk6RvLvWF4Tb7vmf3f7+Uqd9+//fWfvarMb5Gv0MhikdS53E8MhLCJ8nG7+eiE3GpvFb5673y+srigQ3jlZWOf333/lR0kg39u43/ZKb93u///9uWq6l6fvfgLrHXWjr+fR3Lffpu1FX8L2fqHUb82b90/PtraYPNBSbqE0A1/u/37x3/qUz7vYr/6RBCLqqONZeaAaprmGp6p/UKaen4H6ulpabO5IPsdP9/n4n/lUz7RzX/b2S/iGgrHf9f1dIGUiV27//heO/7/2qm/aOIf3X8G77/u5KO//F6Yn+qSO2T7Hb+n86036v4346TcZ6OUlfAZlRP7/T/6khLx3+gJX/3+S/uav13LVP/sJ7/Gv02nv8a0/+fo/rzH+2l4z/YsVy39/9Mpl6v5/+J2vqP/UrH/0QtLb12Hqr97Db+s5n2exX/2qpkoBH/3fnkh+P19I+t/7qSjv+v64lxc4mN2s/a+i/ae/1/PdP+Uaz/quPfiHvb6+siHf+THctV4/9FF9//NzL1muLfurg4IKPW+vuWjv+pjuVq9//A3vGfy9Tr9f3/p142DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAKmEyOQyEaSp/H8chICJeT83PhRDRfWMzPl8oLb62FMJWk58KZ6H6pPF8o5ZdWyovFfKFUKi+EcCXJPxsGorVSuZJfLjy8utPWYPSgWFitzBcLlRDCdJL++3Cq0db8UmW58DCEcG0n7zdxefXhg8JKfnFp9Z+jo6OjYWZnDMNR8Z1KcaVS772eG8LsTt2hqGlwtezrO2M5Gb1ZXl9dKZRq6Tea6pTKC4VSU525JO+DMBxVVtdXFgqVYr5Uvt/o7yhNJMepmVv/u3VjrCX/blQ/Th7usAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4iZ6N/+PDEEJ//SwOIUw0fonalX/6vHgx/3Lu8db4+dnNJ1svOpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ed24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsEvHKA0EURiA34yF2nkMq2W3s11RRAtXBE+gx/AwehQv4R1SpEibIgSSWQibXdgmqb6veTA/M+/BPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//9kGHvg=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, 0x0, 0x0, 0x2000) sendfile(r0, r0, 0x0, 0x800000009) 2.646273965s ago: executing program 1 (id=1991): r0 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0xb, 0x0, 0x7, {0x7, 0x23, 0xda7, 0x80004}}) 2.212807687s ago: executing program 2 (id=1992): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000002880)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cbf8fbaaec9647b07d0a4965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee425367bc33b71054226beb00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896ed56473baf984a067b1b8773017042c903de1c421991e68995f58d3465ec4e7d734b375c04d5ba90d06cf30a05e802b63ce2ff861f27d6ded13918f0c33169c6bca92fa8b8cccc944946434358e5a0193a91a73794fc72", 0xd7}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e661725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a4678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200000062635399677c089645ecee7fdddf4f74", 0xe2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000", 0x7a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e0", 0xa9}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004ad", 0x5d}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.030789031s ago: executing program 1 (id=1993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x20040054) 1.974377152s ago: executing program 4 (id=1994): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 1.740592974s ago: executing program 2 (id=1995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r0 = open$dir(0x0, 0x100, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$vivid(0x0, 0x0, 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) 1.476792861s ago: executing program 2 (id=1996): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 1.431288794s ago: executing program 1 (id=1997): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x6, r2}) recvfrom$phonet(r5, &(0x7f0000000300)=""/77, 0x4d, 0x60, &(0x7f0000000280)={0x23, 0x6, 0x35, 0x42}, 0x10) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x23b) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000003}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.010395952s ago: executing program 9 (id=1998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0x11, 0x148, 0x0, 0x0, 0x270, 0x2a8, 0x2a8, 0x270, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x2, 0x4, [0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e20, 0x4e21, 0x4e22, 0x4e24, 0x4e22, 0x4e24, 0x4e23, 0x4e20, 0x4e22, 0x4e24], [0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xe0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@limit={{0x48}, {0x9, 0xffffffff, 0x8, 0x316b, 0x9, 0x8, 0xaa}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 281.121417ms ago: executing program 2 (id=1999): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x451, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f0000000180), 0x43) 136.991322ms ago: executing program 7 (id=2000): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f"], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x1, 0x2, 0x2, 0x7fffffff, 0x85f, 0x9, 0x7, 0x500, 0x3, 0x2000, 0xfffffffb, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 0s ago: executing program 1 (id=2001): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x7) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x7df1e32c, 0x18}, 0xc) landlock_restrict_self(r1, 0x0) socket$inet(0x10, 0x3, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x10002, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050004"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): 0003: pen parameters not found [ 334.665471][ T5909] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 335.212264][ T5855] Bluetooth: hci1: command tx timeout [ 335.434011][ T5850] usb 5-1: USB disconnect, device number 6 [ 335.738832][ T9478] chnl_net:caif_netlink_parms(): no params data found [ 335.992587][ T53] bridge_slave_1: left allmulticast mode [ 336.013172][ T53] bridge_slave_1: left promiscuous mode [ 336.036483][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.075156][ T53] bridge_slave_0: left allmulticast mode [ 336.123688][ T53] bridge_slave_0: left promiscuous mode [ 336.162474][ T9537] misc userio: Can't change port type on an already running userio instance [ 336.188711][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.978659][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 337.240226][ T9518] loop2: detected capacity change from 0 to 32768 [ 337.281024][ T5855] Bluetooth: hci1: command tx timeout [ 337.339578][ T9518] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_write_sumit": -EINTR [ 337.339752][ T9518] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 337.466685][ T9518] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 338.338337][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.391529][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.428895][ T53] bond0 (unregistering): Released all slaves [ 338.469563][ T9543] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1209'. [ 338.522600][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'. [ 339.382255][ T9584] loop3: detected capacity change from 0 to 40427 [ 340.000899][ T9584] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 340.010505][ T9584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 340.280448][ T5855] Bluetooth: hci1: command tx timeout [ 340.879890][ T9584] F2FS-fs (loop3): invalid crc value [ 340.889554][ T9584] F2FS-fs (loop3): Found nat_bits in checkpoint [ 340.953470][ T9588] loop2: detected capacity change from 0 to 32768 [ 340.958090][ T9584] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 340.968485][ T9584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 340.971567][ T9588] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1224 (9588) [ 341.006695][ T9588] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 341.017706][ T9588] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 341.027058][ T9588] BTRFS info (device loop2): using free-space-tree [ 341.147520][ T9588] BTRFS info (device loop2): rebuilding free space tree [ 341.192341][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.209813][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.236085][ T9478] bridge_slave_0: entered allmulticast mode [ 341.283781][ T9478] bridge_slave_0: entered promiscuous mode [ 341.319786][ T9588] BTRFS warning (device loop2): get dev_stats failed, device not found [ 341.336016][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.392090][ T5849] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 341.396969][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.409983][ T9478] bridge_slave_1: entered allmulticast mode [ 341.436723][ T9478] bridge_slave_1: entered promiscuous mode [ 341.759844][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.814337][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.971569][ T53] hsr_slave_0: left promiscuous mode [ 342.009531][ T53] hsr_slave_1: left promiscuous mode [ 342.011690][ T9624] loop7: detected capacity change from 0 to 2048 [ 342.035610][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.100585][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.136300][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.186128][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.201580][ T9624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.326618][ T5855] Bluetooth: hci1: command tx timeout [ 342.357426][ T29] audit: type=1800 audit(1740890725.327:15): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1232" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 342.380711][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 342.430398][ T53] veth1_macvtap: left promiscuous mode [ 342.470242][ T53] veth0_macvtap: left promiscuous mode [ 342.491081][ T53] veth1_vlan: left promiscuous mode [ 342.521073][ T53] veth0_vlan: left promiscuous mode [ 342.701545][ T8098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.215721][ T9645] loop7: detected capacity change from 0 to 32768 [ 343.458905][ T53] team0 (unregistering): Port device team_slave_1 removed [ 343.509435][ T53] team0 (unregistering): Port device team_slave_0 removed [ 344.188487][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 344.216972][ T9647] vlan2: entered allmulticast mode [ 344.266710][ T9478] team0: Port device team_slave_0 added [ 344.309357][ T9478] team0: Port device team_slave_1 added [ 344.500262][ T9657] loop8: detected capacity change from 0 to 7 [ 344.537527][ T9657] Dev loop8: unable to read RDB block 7 [ 344.556506][ T9657] loop8: AHDI p1 p3 p4 [ 344.565506][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.587709][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.620943][ T9657] loop8: partition table partially beyond EOD, truncated [ 344.635855][ T9657] loop8: p1 start 975770946 is beyond EOD, truncated [ 344.663129][ T9657] loop8: p3 start 6514546 is beyond EOD, truncated [ 344.690959][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.803322][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.843274][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.956330][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.856213][ T9669] ceph: No mds server is up or the cluster is laggy [ 345.871066][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 345.908168][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 346.179162][ T9478] hsr_slave_0: entered promiscuous mode [ 346.230596][ T9478] hsr_slave_1: entered promiscuous mode [ 346.257788][ T9478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.289474][ T9478] Cannot create hsr debugfs directory [ 346.403268][ T53] IPVS: stop unused estimator thread 0... [ 346.440512][ T5907] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 346.524314][ T9688] loop3: detected capacity change from 0 to 1024 [ 346.551336][ T9688] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 346.588182][ T9688] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 346.630436][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 346.651884][ T9688] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 346.668633][ T5907] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 346.676713][ T5907] usb 3-1: config 0 has no interface number 0 [ 346.705837][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1253'. [ 346.719549][ T5907] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 346.758376][ T9688] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.1252: unexpected bad inode w/o EXT4_IGET_BAD [ 346.771863][ T5907] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 346.807264][ T9478] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 346.824408][ T9688] EXT4-fs (loop3): no journal found [ 346.829952][ T9688] EXT4-fs (loop3): can't get journal size [ 346.836404][ T5907] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 346.849936][ T9478] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 346.850329][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 346.886200][ T9478] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 346.897833][ T9688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.924276][ T9478] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 346.930779][ T5907] usb 3-1: Product: syz [ 346.935945][ T5907] usb 3-1: SerialNumber: syz [ 346.961709][ T5907] usb 3-1: config 0 descriptor?? [ 346.973187][ T5907] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 347.021453][ T5907] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input29 [ 347.103327][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.147731][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.203746][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 347.216457][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.244233][ T9699] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1254'. [ 347.300843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.308024][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.336719][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.343939][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.470169][ T9478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.504959][ T9478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.645449][ T5903] usb 3-1: USB disconnect, device number 10 [ 347.721131][ T5903] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 347.936547][ T5144] Bluetooth: hci1: command 0x0405 tx timeout [ 348.272507][ T9478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.523515][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 348.609719][ T9737] misc userio: Can't change port type on an already running userio instance [ 349.446412][ T9742] loop7: detected capacity change from 0 to 32768 [ 350.322457][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1271'. [ 351.194195][ T9478] veth0_vlan: entered promiscuous mode [ 351.247335][ T9478] veth1_vlan: entered promiscuous mode [ 351.342821][ T9478] veth0_macvtap: entered promiscuous mode [ 351.380558][ T9478] veth1_macvtap: entered promiscuous mode [ 351.431037][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.472373][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.505174][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.519714][ T9767] loop3: detected capacity change from 0 to 4096 [ 351.530040][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.573265][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.590385][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.604165][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.645562][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.677016][ T9776] netlink: 'syz.2.1281': attribute type 9 has an invalid length. [ 351.685174][ T9776] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1281'. [ 351.727161][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.771788][ T9778] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.788394][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.844864][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.989828][ T9774] loop4: detected capacity change from 0 to 40427 [ 352.010901][ T9774] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 352.019244][ T9774] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 352.030888][ T9774] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 352.042249][ T9774] F2FS-fs (loop4): Found nat_bits in checkpoint [ 352.091741][ T9774] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 352.098849][ T9774] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 352.186658][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.206921][ T9767] NILFS (loop3): bad btree root (ino=12): level = 7, flags = 0xff, nchildren = 0 [ 352.245973][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.263922][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.276739][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.288910][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.305932][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.326726][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.356376][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.374920][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.401142][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.413240][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.438262][ T9478] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.449841][ T9478] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.489809][ T9478] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.509136][ T9478] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.839467][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.968849][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.078187][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.088898][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.190154][ T9795] overlayfs: missing 'lowerdir' [ 353.246146][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 354.155072][ T9812] loop2: detected capacity change from 0 to 32768 [ 354.216318][ T9812] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 354.318359][ T29] audit: type=1800 audit(1740890737.277:16): pid=9812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1289" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 354.642766][ T9818] loop8: detected capacity change from 0 to 40427 [ 354.655933][ T9818] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff [ 354.657349][ T5849] ocfs2: Unmounting device (7,2) on (node local) [ 354.664464][ T9818] F2FS-fs (loop8): heap/no_heap options were deprecated [ 354.705627][ T9818] F2FS-fs (loop8): invalid crc value [ 354.737963][ T9818] F2FS-fs (loop8): Found nat_bits in checkpoint [ 354.817276][ T9818] F2FS-fs (loop8): Start checkpoint disabled! [ 354.846445][ T9818] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 355.143929][ T9836] netlink: 'syz.4.1297': attribute type 9 has an invalid length. [ 355.152358][ T9836] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1297'. [ 355.725444][ T9831] loop3: detected capacity change from 0 to 2048 [ 355.788166][ T6099] kworker/u8:12: attempt to access beyond end of device [ 355.788166][ T6099] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 355.832018][ T6099] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 355.841842][ T6099] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 355.852174][ T9831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.994105][ T29] audit: type=1800 audit(1740890738.957:17): pid=9831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1296" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 356.190057][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.254295][ T9849] loop4: detected capacity change from 0 to 2048 [ 356.376774][ T9849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.491220][ T29] audit: type=1800 audit(1740890739.457:18): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1303" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 356.781282][ T5903] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 357.042472][ T5903] usb 8-1: Using ep0 maxpacket: 16 [ 357.059057][ T5903] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 357.084195][ T9864] loop2: detected capacity change from 0 to 4096 [ 357.139148][ T5903] usb 8-1: config 0 has no interface number 0 [ 357.197295][ T5903] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 357.222503][ T5903] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 357.248963][ T5903] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 357.272457][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 357.300923][ T5903] usb 8-1: Product: syz [ 357.313580][ T5903] usb 8-1: SerialNumber: syz [ 357.327028][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.352532][ T5903] usb 8-1: config 0 descriptor?? [ 357.417337][ T5903] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 357.491064][ T5903] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input31 [ 357.603854][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 357.776936][ T9879] loop8: detected capacity change from 0 to 2048 [ 358.037737][ T9886] netlink: 'syz.1.1316': attribute type 9 has an invalid length. [ 358.070374][ T9886] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1316'. [ 358.102768][ T5850] usb 8-1: USB disconnect, device number 6 [ 358.125342][ T9881] loop4: detected capacity change from 0 to 40427 [ 358.230608][ T9881] F2FS-fs (loop4): invalid crc value [ 358.246806][ T9879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.260981][ T5850] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 358.290821][ T9881] F2FS-fs (loop4): Found nat_bits in checkpoint [ 358.367226][ T9881] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 358.415448][ T9889] f2fs_ckpt-7:4: attempt to access beyond end of device [ 358.415448][ T9889] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 358.432876][ T9889] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 358.721345][ T9879] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 358.869388][ T9879] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 336 with error 28 [ 358.977702][ T9879] EXT4-fs (loop8): This should not happen!! Data will be lost [ 358.977702][ T9879] [ 359.049233][ T9879] EXT4-fs (loop8): Total free blocks count 0 [ 359.090524][ T9879] EXT4-fs (loop8): Free/Dirty block details [ 359.127132][ T9879] EXT4-fs (loop8): free_blocks=2415919104 [ 359.157590][ T9879] EXT4-fs (loop8): dirty_blocks=352 [ 359.160354][ T9898] loop3: detected capacity change from 0 to 65536 [ 359.192253][ T9879] EXT4-fs (loop8): Block reservation details [ 359.198421][ T9879] EXT4-fs (loop8): i_reserved_data_blocks=22 [ 359.281572][ T9898] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 359.350118][ T9916] overlayfs: missing 'lowerdir' [ 359.407472][ T9898] XFS (loop3): Ending clean mount [ 359.415863][ T9898] XFS (loop3): Quotacheck needed: Please wait. [ 359.513934][ T9898] XFS (loop3): Quotacheck: Done. [ 359.527398][ T9898] 9pnet_fd: p9_fd_create_tcp (9898): problem connecting socket to 127.0.0.1 [ 359.619127][ T5841] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 359.693289][ T35] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 359.710495][ T5907] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 359.860424][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 359.871276][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.879309][ T5907] usb 3-1: config 0 has no interface number 0 [ 359.887903][ T5907] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.909452][ T5907] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.927027][ T5907] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 359.944546][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.963428][ T5907] usb 3-1: config 0 descriptor?? [ 360.935137][ T9931] loop8: detected capacity change from 0 to 40427 [ 360.940551][ T5903] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 360.950440][ T5907] uclogic 0003:28BD:0071.0004: pen parameters not found [ 360.957440][ T5907] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 360.967545][ T9931] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 360.975375][ T9931] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 360.992363][ T9931] F2FS-fs (loop8): invalid crc value [ 361.016669][ T5907] usb 3-1: USB disconnect, device number 11 [ 361.035178][ T9931] F2FS-fs (loop8): Found nat_bits in checkpoint [ 361.117995][ T9931] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 361.122703][ T5903] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.125310][ T9931] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 361.202858][ T5903] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 361.250140][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.272703][ T9945] overlayfs: failed to clone upperpath [ 361.281460][ T5903] usb 8-1: config 0 descriptor?? [ 361.345303][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 361.430820][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 361.436929][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 361.524432][ T9947] ceph: No mds server is up or the cluster is laggy [ 361.706071][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 361.725941][ T5903] pwc: recv_control_msg error -71 req 02 val 2700 [ 361.758742][ T5903] pwc: recv_control_msg error -71 req 02 val 2c00 [ 361.797172][ T9960] overlayfs: missing 'lowerdir' [ 361.816269][ T5903] pwc: recv_control_msg error -71 req 04 val 1000 [ 361.837915][ T5903] pwc: recv_control_msg error -71 req 04 val 1300 [ 361.856998][ T5903] pwc: recv_control_msg error -71 req 04 val 1400 [ 361.879014][ T5903] pwc: recv_control_msg error -71 req 02 val 2000 [ 361.891736][ T5903] pwc: recv_control_msg error -71 req 02 val 2100 [ 361.898692][ T5903] pwc: recv_control_msg error -71 req 04 val 1500 [ 361.921898][ T5903] pwc: recv_control_msg error -71 req 02 val 2500 [ 361.943297][ T5903] pwc: recv_control_msg error -71 req 02 val 2400 [ 361.971908][ T5903] pwc: recv_control_msg error -71 req 02 val 2600 [ 362.001091][ T5903] pwc: recv_control_msg error -71 req 02 val 2900 [ 362.026540][ T5903] pwc: recv_control_msg error -71 req 02 val 2800 [ 362.067196][ T5903] pwc: recv_control_msg error -71 req 04 val 1100 [ 362.097275][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 362.486128][ T5903] pwc: Registered as video103. [ 362.524593][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32 [ 362.640703][ T5903] usb 8-1: USB disconnect, device number 7 [ 362.859528][ T9970] loop4: detected capacity change from 0 to 32768 [ 364.016860][ T9984] loop4: detected capacity change from 0 to 40427 [ 364.036229][ T9984] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 364.044078][ T9984] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 364.056572][ T9984] F2FS-fs (loop4): invalid crc value [ 364.204978][ T9984] F2FS-fs (loop4): Found nat_bits in checkpoint [ 364.232819][ T9995] overlayfs: statfs failed on './file0' [ 364.322509][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1337'. [ 365.214319][ T9984] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 365.224023][ T9984] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 365.307171][T10002] netlink: 'syz.1.1353': attribute type 9 has an invalid length. [ 365.315831][T10002] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1353'. [ 365.641352][ T5908] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 365.802156][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.842854][ T5908] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 365.864498][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.893474][ T5908] usb 3-1: config 0 descriptor?? [ 365.915272][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 366.279160][T10008] loop7: detected capacity change from 0 to 32768 [ 366.364242][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 366.390164][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 366.444114][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 366.489859][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 366.525690][ T5908] pwc: recv_control_msg error -32 req 04 val 1300 [ 366.551047][T10018] loop4: detected capacity change from 0 to 32768 [ 366.570957][ T5908] pwc: recv_control_msg error -71 req 04 val 1400 [ 366.610033][ T5908] pwc: recv_control_msg error -71 req 02 val 2000 [ 366.655282][ T5908] pwc: recv_control_msg error -71 req 02 val 2100 [ 366.711304][ T5908] pwc: recv_control_msg error -71 req 04 val 1500 [ 366.742729][ T5908] pwc: recv_control_msg error -71 req 02 val 2500 [ 366.772110][ T5908] pwc: recv_control_msg error -71 req 02 val 2400 [ 366.799761][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 366.834012][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 366.868797][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 367.011074][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 367.022249][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 367.029833][ T5908] pwc: Registered as video103. [ 367.036659][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 367.049878][ T5908] usb 3-1: USB disconnect, device number 12 [ 367.139362][T10029] overlayfs: failed to clone upperpath [ 367.664215][T10043] netlink: 'syz.2.1371': attribute type 9 has an invalid length. [ 367.672619][T10043] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1371'. [ 368.414535][T10049] Bluetooth: MGMT ver 1.23 [ 368.449919][T10049] overlayfs: missing 'lowerdir' [ 368.518632][T10049] loop7: detected capacity change from 0 to 256 [ 368.531445][T10049] vfat: Unknown parameter '0xffffffffffffffff' [ 368.947165][T10053] loop2: detected capacity change from 0 to 40427 [ 369.034729][T10053] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 369.043546][T10053] F2FS-fs (loop2): heap/no_heap options were deprecated [ 369.053529][T10053] F2FS-fs (loop2): invalid crc value [ 369.055073][T10057] loop8: detected capacity change from 0 to 32768 [ 369.074333][T10053] F2FS-fs (loop2): Found nat_bits in checkpoint [ 369.140461][T10053] F2FS-fs (loop2): Start checkpoint disabled! [ 369.149080][T10053] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 369.961319][T10066] lo: entered promiscuous mode [ 369.969935][T10066] lo: entered allmulticast mode [ 369.976579][T10066] tunl0: entered promiscuous mode [ 369.999477][T10066] tunl0: entered allmulticast mode [ 370.014586][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 370.032368][T10066] gre0: entered promiscuous mode [ 370.055453][T10066] gre0: entered allmulticast mode [ 370.056179][T10036] loop4: detected capacity change from 0 to 40427 [ 370.066590][T10066] gretap0: entered promiscuous mode [ 370.080031][T10066] gretap0: entered allmulticast mode [ 370.092164][T10066] erspan0: entered promiscuous mode [ 370.097644][T10066] erspan0: entered allmulticast mode [ 370.106759][T10036] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 370.179838][T10036] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 370.231609][T10066] ip_vti0: entered promiscuous mode [ 370.242609][T10066] ip_vti0: entered allmulticast mode [ 370.244485][T10036] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 370.253675][T10066] ip6_vti0: entered promiscuous mode [ 370.270651][T10066] ip6_vti0: entered allmulticast mode [ 370.285602][T10066] sit0: entered promiscuous mode [ 370.300540][T10066] sit0: entered allmulticast mode [ 370.312289][T10066] ip6tnl0: entered promiscuous mode [ 370.328016][T10066] ip6tnl0: entered allmulticast mode [ 370.335846][T10036] F2FS-fs (loop4): Found nat_bits in checkpoint [ 370.341525][T10066] ip6gre0: entered promiscuous mode [ 370.356296][T10066] ip6gre0: entered allmulticast mode [ 370.370590][T10066] syz_tun: entered promiscuous mode [ 370.390722][T10066] syz_tun: entered allmulticast mode [ 370.409227][T10066] ip6gretap0: entered promiscuous mode [ 370.428350][T10066] ip6gretap0: entered allmulticast mode [ 370.438094][T10066] bridge0: entered promiscuous mode [ 370.450702][T10066] bridge0: entered allmulticast mode [ 370.465628][T10066] vcan0: entered promiscuous mode [ 370.488705][T10066] vcan0: entered allmulticast mode [ 370.512379][T10066] bond0: entered promiscuous mode [ 370.520058][T10036] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 370.538866][T10036] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 370.562417][T10066] bond_slave_0: entered promiscuous mode [ 370.601251][T10066] bond_slave_1: entered promiscuous mode [ 370.609490][T10066] bond0: entered allmulticast mode [ 370.636041][T10066] bond_slave_0: entered allmulticast mode [ 370.646476][T10076] loop2: detected capacity change from 0 to 4096 [ 370.664819][T10066] bond_slave_1: entered allmulticast mode [ 370.709253][T10080] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.717074][T10066] team0: entered promiscuous mode [ 370.829796][T10066] team_slave_0: entered promiscuous mode [ 370.844782][T10066] team_slave_1: entered promiscuous mode [ 370.878623][T10066] team0: entered allmulticast mode [ 370.912224][T10066] team_slave_0: entered allmulticast mode [ 370.918016][T10066] team_slave_1: entered allmulticast mode [ 370.970786][T10066] dummy0: entered promiscuous mode [ 370.975973][T10066] dummy0: entered allmulticast mode [ 371.033769][T10066] nlmon0: entered promiscuous mode [ 371.090582][T10066] nlmon0: entered allmulticast mode [ 371.160612][T10066] caif0: entered promiscuous mode [ 371.173975][T10066] caif0: entered allmulticast mode [ 371.188829][T10066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.497921][T10096] overlayfs: missing 'lowerdir' [ 371.639604][T10096] loop3: detected capacity change from 0 to 256 [ 371.685382][T10096] vfat: Unknown parameter '0xffffffffffffffff' [ 372.137367][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 372.675163][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 372.703041][T10130] ceph: No mds server is up or the cluster is laggy [ 373.533567][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 373.751062][T10139] loop2: detected capacity change from 0 to 4096 [ 373.850438][T10144] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.171255][T10145] loop8: detected capacity change from 0 to 32768 [ 374.258271][T10145] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 374.275274][ T29] audit: type=1800 audit(1740890757.247:19): pid=10145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1406" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 374.390183][ T9478] ocfs2: Unmounting device (7,8) on (node local) [ 374.769688][T10158] loop7: detected capacity change from 0 to 32768 [ 374.844934][T10158] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 374.893838][ T29] audit: type=1800 audit(1740890757.867:20): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1412" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 375.434235][T10179] loop3: detected capacity change from 0 to 128 [ 375.455975][ T8098] ocfs2: Unmounting device (7,7) on (node local) [ 375.837031][T10180] loop8: detected capacity change from 0 to 32768 [ 376.208984][T10192] overlayfs: statfs failed on './file0' [ 376.217928][T10193] loop3: detected capacity change from 0 to 512 [ 376.323333][T10193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 376.411449][T10193] System zones: 1-12 [ 376.440774][T10193] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1425: Directory hole found for htree index block 0 [ 376.561951][T10193] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 376.642660][T10193] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1425: Directory hole found for htree index block 0 [ 376.756321][T10193] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 376.834741][T10193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.926482][T10193] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 377.036147][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.141155][ T8] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 377.324519][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 377.343461][T10222] input: syz0 as /devices/virtual/input/input34 [ 377.352512][ T8] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 377.361113][ T8] usb 8-1: config 0 has no interface number 0 [ 377.383206][ T8] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 377.407883][ T8] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 377.449889][ T8] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 377.851682][T10228] loop8: detected capacity change from 0 to 40427 [ 377.860073][T10228] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff [ 377.868640][T10228] F2FS-fs (loop8): heap/no_heap options were deprecated [ 377.883131][ T8] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 377.897030][T10228] F2FS-fs (loop8): invalid crc value [ 377.908034][ T8] usb 8-1: Product: syz [ 377.915975][ T8] usb 8-1: SerialNumber: syz [ 377.931477][T10228] F2FS-fs (loop8): Found nat_bits in checkpoint [ 377.989381][T10228] F2FS-fs (loop8): Start checkpoint disabled! [ 377.997708][T10228] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 378.052405][ T8] usb 8-1: config 0 descriptor?? [ 378.062552][ T8] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 378.073251][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input35 [ 378.301075][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 378.436444][T10242] vlan2: entered allmulticast mode [ 378.466169][T10242] bond0: entered allmulticast mode [ 378.486924][T10242] bond_slave_0: entered allmulticast mode [ 378.493935][T10242] bond_slave_1: entered allmulticast mode [ 378.539084][T10242] bond0: left allmulticast mode [ 378.545195][T10242] bond_slave_0: left allmulticast mode [ 378.551281][T10242] bond_slave_1: left allmulticast mode [ 378.725161][ T5903] usb 8-1: USB disconnect, device number 8 [ 378.831782][ T5903] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 379.011285][T10255] overlayfs: statfs failed on './file0' [ 379.218309][T10260] loop4: detected capacity change from 0 to 4096 [ 379.538753][ T8] libceph: connect (1)[c::]:6789 error -101 [ 379.562925][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 379.724601][T10271] ceph: No mds server is up or the cluster is laggy [ 379.977849][ T8] libceph: connect (1)[c::]:6789 error -101 [ 380.003500][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 380.633865][T10280] loop8: detected capacity change from 0 to 40427 [ 380.652269][T10280] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff [ 380.660806][T10280] F2FS-fs (loop8): heap/no_heap options were deprecated [ 380.670019][T10280] F2FS-fs (loop8): invalid crc value [ 380.751572][T10280] F2FS-fs (loop8): Found nat_bits in checkpoint [ 380.811361][T10280] F2FS-fs (loop8): Start checkpoint disabled! [ 380.843252][T10288] vlan2: entered allmulticast mode [ 380.848995][T10288] bond0: entered allmulticast mode [ 380.884104][T10280] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 380.911105][T10288] bond_slave_1: entered allmulticast mode [ 381.008009][T10288] bond0: left allmulticast mode [ 381.024161][T10288] bond_slave_1: left allmulticast mode [ 382.164941][T10315] overlayfs: failed to clone upperpath [ 382.243376][ T29] audit: type=1804 audit(1740890765.197:21): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1476" name="/" dev="pidfs" ino=10314 res=1 errno=0 [ 383.011760][T10328] loop8: detected capacity change from 0 to 40427 [ 383.023585][T10328] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff [ 383.032200][T10328] F2FS-fs (loop8): heap/no_heap options were deprecated [ 383.052592][T10328] F2FS-fs (loop8): invalid crc value [ 383.062591][T10328] F2FS-fs (loop8): Found nat_bits in checkpoint [ 383.073993][T10338] vlan2: entered allmulticast mode [ 383.104292][T10338] bond0: entered allmulticast mode [ 383.121366][T10328] F2FS-fs (loop8): Start checkpoint disabled! [ 383.136466][T10338] bond_slave_0: entered allmulticast mode [ 383.137126][T10328] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 383.159530][T10338] bond_slave_1: entered allmulticast mode [ 383.224943][T10338] bond0: left allmulticast mode [ 383.229948][T10338] bond_slave_0: left allmulticast mode [ 383.240409][T10338] bond_slave_1: left allmulticast mode [ 383.286022][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.295318][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.317243][ T2337] pvrusb2: request_firmware fatal error with code=-110 [ 383.350631][ T2337] pvrusb2: Failure uploading firmware1 [ 383.376493][ T2337] pvrusb2: Device initialization was not successful. [ 383.406107][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 383.436644][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 383.780341][T10346] loop3: detected capacity change from 0 to 40427 [ 383.788035][T10346] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 383.795866][T10346] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 383.806117][T10346] F2FS-fs (loop3): invalid crc value [ 383.814572][T10346] F2FS-fs (loop3): Found nat_bits in checkpoint [ 383.877868][ T936] pvrusb2: Device being rendered inoperable [ 383.884140][T10346] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 383.891271][T10346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 384.802980][T10373] netlink: 'syz.1.1500': attribute type 4 has an invalid length. [ 385.707598][T10389] loop3: detected capacity change from 0 to 40427 [ 385.719065][T10389] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 385.720775][T10394] vlan2: entered allmulticast mode [ 385.726898][T10389] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 385.753586][T10389] F2FS-fs (loop3): invalid crc value [ 385.771482][T10394] bond0: entered allmulticast mode [ 385.783713][T10389] F2FS-fs (loop3): Found nat_bits in checkpoint [ 385.848280][T10389] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 385.856473][T10389] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 385.871258][T10394] bond_slave_0: entered allmulticast mode [ 385.890650][T10394] bond_slave_1: entered allmulticast mode [ 386.045081][T10394] bond0: left allmulticast mode [ 386.050019][T10394] bond_slave_0: left allmulticast mode [ 386.090109][T10394] bond_slave_1: left allmulticast mode [ 386.364447][T10371] loop2: detected capacity change from 0 to 40427 [ 386.382376][T10371] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 386.410470][T10371] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 386.419397][T10404] loop7: detected capacity change from 0 to 32768 [ 386.459400][T10404] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 386.494682][ T29] audit: type=1800 audit(1740890769.467:22): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1512" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 386.572006][T10371] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 386.616369][T10371] F2FS-fs (loop2): Found nat_bits in checkpoint [ 386.676847][ T8098] ocfs2: Unmounting device (7,7) on (node local) [ 386.930473][T10371] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 386.937724][T10371] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 387.022888][T10371] syz.2.1499: attempt to access beyond end of device [ 387.022888][T10371] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 387.190412][T10371] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 389.167420][T10473] loop7: detected capacity change from 0 to 4096 [ 389.180388][ T5906] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 389.233440][T10477] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.398357][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 389.423324][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.450366][ T5906] usb 3-1: config 0 has no interface number 0 [ 389.469572][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.493168][T10443] loop8: detected capacity change from 0 to 32768 [ 389.501474][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.539977][ T5906] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 389.549940][T10443] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1523 (10443) [ 389.601011][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.650365][T10443] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 389.661451][ T5906] usb 3-1: config 0 descriptor?? [ 389.695093][T10443] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 389.707815][T10443] BTRFS info (device loop8): using free-space-tree [ 389.857232][T10443] BTRFS info (device loop8): rebuilding free space tree [ 390.278656][T10521] overlayfs: failed to clone upperpath [ 390.285771][ T5906] uclogic 0003:28BD:0071.0005: pen parameters not found [ 390.324914][ T9478] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 390.340502][ T5906] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 390.494975][ T8] usb 3-1: USB disconnect, device number 13 [ 391.223038][T10534] ceph: No mds server is up or the cluster is laggy [ 391.250685][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 391.261922][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 392.960564][T10549] loop2: detected capacity change from 0 to 40427 [ 392.989923][T10549] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 393.034720][T10549] F2FS-fs (loop2): invalid crc value [ 393.052826][T10549] F2FS-fs (loop2): Found nat_bits in checkpoint [ 393.118722][T10549] F2FS-fs (loop2): Start checkpoint disabled! [ 393.130596][T10549] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 393.144981][T10554] loop3: detected capacity change from 0 to 40427 [ 393.196072][T10554] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 393.205410][T10554] F2FS-fs (loop3): heap/no_heap options were deprecated [ 393.214321][T10554] F2FS-fs (loop3): invalid crc value [ 393.250563][T10554] F2FS-fs (loop3): Found nat_bits in checkpoint [ 393.320341][T10554] F2FS-fs (loop3): Start checkpoint disabled! [ 393.338573][T10554] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 393.341258][T10549] syz.2.1551: attempt to access beyond end of device [ 393.341258][T10549] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 393.397013][T10549] syz.2.1551: attempt to access beyond end of device [ 393.397013][T10549] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 394.320483][ T5144] Bluetooth: hci1: command 0x0405 tx timeout [ 394.816598][ T12] kworker/u8:1: attempt to access beyond end of device [ 394.816598][ T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 394.889658][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 394.927644][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 395.208886][T10583] sctp: [Deprecated]: syz.7.1563 (pid 10583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.208886][T10583] Use struct sctp_sack_info instead [ 395.263451][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 395.287661][T10585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1562'. [ 395.845382][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 396.023108][T10601] ceph: No mds server is up or the cluster is laggy [ 396.740979][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 397.875718][T10624] loop3: detected capacity change from 0 to 2048 [ 397.913242][T10634] loop8: detected capacity change from 0 to 24 [ 397.953848][T10634] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 397.992925][T10624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.041360][T10634] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 398.108417][ T29] audit: type=1800 audit(1740890781.067:23): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1575" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 398.129530][T10641] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 398.373065][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.752149][T10653] loop8: detected capacity change from 0 to 4096 [ 399.811368][T10653] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 400.265007][T10674] loop3: detected capacity change from 0 to 256 [ 400.347342][T10674] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 401.455546][T10680] loop7: detected capacity change from 0 to 32768 [ 401.462834][T10680] btrfs: Deprecated parameter 'usebackuproot' [ 401.468945][T10680] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 401.626979][T10680] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1592 (10680) [ 401.663210][T10680] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 401.673443][T10680] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 401.682034][T10680] BTRFS info (device loop7): using free-space-tree [ 401.911667][T10680] BTRFS info (device loop7): rebuilding free space tree [ 402.020453][ T5908] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 402.409335][T10702] loop8: detected capacity change from 0 to 40427 [ 402.445757][T10702] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x7 [ 402.456320][T10702] F2FS-fs (loop8): invalid crc value [ 402.464648][T10702] F2FS-fs (loop8): Found nat_bits in checkpoint [ 402.553497][T10702] F2FS-fs (loop8): Start checkpoint disabled! [ 402.561797][T10702] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 402.690495][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 402.723571][ T5908] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 402.756908][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.803182][ T5908] usb 5-1: Product: syz [ 402.807419][ T5908] usb 5-1: Manufacturer: syz [ 402.840355][ T5908] usb 5-1: SerialNumber: syz [ 402.871423][ T5908] usb 5-1: config 0 descriptor?? [ 403.139226][ T29] audit: type=1800 audit(1740890786.087:24): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1592" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 403.220633][ T5908] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 403.243870][T10697] loop2: detected capacity change from 0 to 131072 [ 403.260718][T10697] F2FS-fs (loop2): invalid crc value [ 403.311325][T10697] F2FS-fs (loop2): Found nat_bits in checkpoint [ 403.373671][T10697] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 403.401925][ T3517] kworker/u8:10: attempt to access beyond end of device [ 403.401925][ T3517] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 403.431677][ T3517] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 403.439910][ T3517] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 403.591190][ T8098] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 405.656009][ T5909] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 406.010153][T10740] loop7: detected capacity change from 0 to 32768 [ 406.087518][ T5908] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 406.108569][ T5908] usb 5-1: USB disconnect, device number 7 [ 406.117985][ T5909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.134065][ T5909] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 406.157268][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.172971][T10740] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 406.231285][ T5909] usb 9-1: config 0 descriptor?? [ 406.253262][ T5909] pwc: Askey VC010 type 2 USB webcam detected. [ 406.338516][ T8098] ocfs2: Unmounting device (7,7) on (node local) [ 406.651694][ T5909] pwc: recv_control_msg error -32 req 02 val 2b00 [ 406.679082][ T5909] pwc: recv_control_msg error -32 req 02 val 2700 [ 406.692961][ T5909] pwc: recv_control_msg error -32 req 02 val 2c00 [ 406.723197][ T5909] pwc: recv_control_msg error -32 req 04 val 1000 [ 406.744127][ T5909] pwc: recv_control_msg error -32 req 04 val 1300 [ 406.974217][ T5909] pwc: recv_control_msg error -71 req 02 val 2000 [ 407.217863][ T5909] pwc: recv_control_msg error -71 req 02 val 2100 [ 407.526700][T10766] loop3: detected capacity change from 0 to 1024 [ 408.209335][ T5909] pwc: recv_control_msg error -71 req 04 val 1500 [ 408.233564][ T5909] pwc: recv_control_msg error -71 req 02 val 2500 [ 408.279361][ T5909] pwc: recv_control_msg error -71 req 02 val 2400 [ 408.289826][T10763] hfsplus: xattr exists yet [ 408.296935][ T5909] pwc: recv_control_msg error -71 req 02 val 2600 [ 408.338681][ T5909] pwc: recv_control_msg error -71 req 02 val 2900 [ 408.367329][ T5909] pwc: recv_control_msg error -71 req 02 val 2800 [ 408.405401][ T5909] pwc: recv_control_msg error -71 req 04 val 1100 [ 408.565904][ T5909] pwc: recv_control_msg error -71 req 04 val 1200 [ 408.573620][ T5909] pwc: Registered as video103. [ 408.579789][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 408.600117][ T5909] usb 9-1: USB disconnect, device number 2 [ 408.928267][T10782] loop3: detected capacity change from 0 to 512 [ 408.980669][T10782] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 409.022442][T10782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0102] [ 409.043217][T10782] EXT4-fs (loop3): orphan cleanup on readonly fs [ 409.078931][T10782] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #11: comm syz.3.1621: attempt to clear invalid blocks 1024 len 1 [ 409.208257][T10774] loop7: detected capacity change from 0 to 4096 [ 409.215112][T10782] EXT4-fs (loop3): Remounting filesystem read-only [ 409.231810][T10782] EXT4-fs (loop3): 1 truncate cleaned up [ 409.238595][T10782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 409.286468][T10774] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 409.383029][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 411.220551][ T936] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 411.910459][ T936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.933084][ T936] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 411.966684][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.992976][ T936] usb 3-1: config 0 descriptor?? [ 412.007020][ T936] pwc: Askey VC010 type 2 USB webcam detected. [ 412.055599][T10816] loop7: detected capacity change from 0 to 1024 [ 412.176446][T10816] hfsplus: xattr searching failed [ 412.192257][T10816] hfsplus: xattr searching failed [ 412.441905][ T936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 412.742098][ T936] pwc: recv_control_msg error -32 req 02 val 2700 [ 412.849954][ T936] pwc: recv_control_msg error -32 req 02 val 2c00 [ 412.994870][ T936] pwc: recv_control_msg error -32 req 04 val 1000 [ 413.035118][ T936] pwc: recv_control_msg error -32 req 04 val 1300 [ 413.287474][ T936] pwc: recv_control_msg error -71 req 02 val 2000 [ 413.314747][ T936] pwc: recv_control_msg error -71 req 02 val 2100 [ 413.721840][ T936] pwc: recv_control_msg error -71 req 04 val 1500 [ 413.749895][ T936] pwc: recv_control_msg error -71 req 02 val 2500 [ 413.778778][ T936] pwc: recv_control_msg error -71 req 02 val 2400 [ 414.050511][T10832] loop7: detected capacity change from 0 to 40427 [ 414.102006][T10832] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x7 [ 414.102020][ T936] pwc: recv_control_msg error -71 req 02 val 2600 [ 414.104147][ T936] pwc: recv_control_msg error -71 req 02 val 2900 [ 414.135114][T10832] F2FS-fs (loop7): invalid crc value [ 414.152290][T10832] F2FS-fs (loop7): Found nat_bits in checkpoint [ 414.231855][ T936] pwc: recv_control_msg error -71 req 02 val 2800 [ 414.257565][T10832] F2FS-fs (loop7): Start checkpoint disabled! [ 414.271802][T10832] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 414.290944][ T936] pwc: recv_control_msg error -71 req 04 val 1100 [ 414.300863][T10832] syz.7.1641: attempt to access beyond end of device [ 414.300863][T10832] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 414.345750][ T936] pwc: recv_control_msg error -71 req 04 val 1200 [ 414.407091][ T936] pwc: Registered as video103. [ 414.430833][ T936] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 414.516127][ T936] usb 3-1: USB disconnect, device number 14 [ 414.611042][ T12] kworker/u8:1: attempt to access beyond end of device [ 414.611042][ T12] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 414.640359][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 414.658693][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 415.825068][T10850] loop3: detected capacity change from 0 to 2048 [ 415.845826][T10852] vlan2: entered allmulticast mode [ 415.858635][T10852] bond0: entered allmulticast mode [ 415.890496][T10852] bond_slave_0: entered allmulticast mode [ 415.909837][T10850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.916724][T10852] bond_slave_1: entered allmulticast mode [ 415.960914][T10852] bond0: left allmulticast mode [ 415.998334][T10852] bond_slave_0: left allmulticast mode [ 416.032433][T10852] bond_slave_1: left allmulticast mode [ 416.697217][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.776665][T10866] loop7: detected capacity change from 0 to 8 [ 416.786455][T10866] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 416.985766][T10866] cramfs: Error -3 while decompressing! [ 416.991821][T10866] cramfs: ffffffff9a988702(639)->ffff888051d50000(4096) [ 416.998887][T10866] cramfs: bad data blocksize 4294966699 [ 417.005136][T10866] cramfs: Error -3 while decompressing! [ 417.010867][T10866] cramfs: ffffffff9a988702(639)->ffff888051d50000(4096) [ 417.059584][ T29] audit: type=1800 audit(1740890799.987:25): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1646" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 417.468157][T10838] loop2: detected capacity change from 0 to 40427 [ 417.516265][T10846] loop4: detected capacity change from 0 to 40427 [ 417.569942][T10846] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 417.636892][T10846] F2FS-fs (loop4): heap/no_heap options were deprecated [ 417.751783][T10846] F2FS-fs (loop4): invalid crc value [ 417.783886][T10846] F2FS-fs (loop4): Found nat_bits in checkpoint [ 418.336178][T10878] loop3: detected capacity change from 0 to 40427 [ 418.437474][T10878] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 418.461341][T10878] F2FS-fs (loop3): invalid crc value [ 418.851228][T10878] F2FS-fs (loop3): Found nat_bits in checkpoint [ 418.917488][T10878] F2FS-fs (loop3): Start checkpoint disabled! [ 418.928124][T10878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 419.104793][T10878] syz.3.1658: attempt to access beyond end of device [ 419.104793][T10878] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 419.164055][T10881] openvswitch: netlink: Multiple metadata blocks provided [ 419.194653][T10846] F2FS-fs (loop4): Start checkpoint disabled! [ 419.317942][T10881] bridge_slave_0: left allmulticast mode [ 419.336607][T10881] bridge_slave_0: left promiscuous mode [ 419.353636][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.821053][T10881] bridge_slave_1: left allmulticast mode [ 419.867478][T10881] bridge_slave_1: left promiscuous mode [ 419.868273][ T3467] kworker/u8:8: attempt to access beyond end of device [ 419.868273][ T3467] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 419.880576][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.055185][ T3467] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 420.086391][ T3467] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 420.101075][T10881] bond0: (slave bond_slave_0): Releasing backup interface [ 420.164144][T10881] bond0: (slave bond_slave_1): Releasing backup interface [ 420.281106][T10881] team0: Port device team_slave_0 removed [ 420.354872][T10881] team0: Port device team_slave_1 removed [ 420.379177][T10893] loop8: detected capacity change from 0 to 4096 [ 420.390194][T10881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.540498][T10881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.550572][T10893] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 420.653632][T10881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.034601][T10881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.281342][T10881] bond1: (slave veth3): Releasing active interface [ 421.399181][T10900] vlan2: entered allmulticast mode [ 421.411403][T10900] bond0: entered allmulticast mode [ 421.416569][T10900] bond_slave_1: entered allmulticast mode [ 421.502022][T10902] loop2: detected capacity change from 0 to 2048 [ 421.559179][T10900] bond0: left allmulticast mode [ 421.564614][T10900] bond_slave_1: left allmulticast mode [ 421.616891][T10902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.050989][ T5908] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 422.360082][T10916] loop8: detected capacity change from 0 to 64 [ 422.901132][ T5908] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.931521][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.952964][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.972754][ T5908] usb 5-1: config 0 descriptor?? [ 422.980224][ T5908] cp210x 5-1:0.0: cp210x converter detected [ 423.292969][T10923] input: syz0 as /devices/virtual/input/input38 [ 423.440901][ T5908] usb 5-1: cp210x converter now attached to ttyUSB0 [ 423.487403][ T5908] usb 5-1: USB disconnect, device number 8 [ 423.576386][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 423.638065][ T5908] cp210x 5-1:0.0: device disconnected [ 424.935548][T10936] loop4: detected capacity change from 0 to 128 [ 425.006895][T10936] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.081186][T10936] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 427.414399][T10945] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 428.183456][ T5845] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.872424][T10959] loop3: detected capacity change from 0 to 2048 [ 428.932248][T10959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.529309][T10977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.908480][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.670758][ T936] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 431.890899][ T936] usb 9-1: Using ep0 maxpacket: 16 [ 431.949570][ T936] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 432.015084][ T936] usb 9-1: config 0 has no interface number 0 [ 432.096576][ T936] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.220133][ T936] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 432.321325][ T936] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 432.350604][ T936] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 432.376505][ T936] usb 9-1: Product: syz [ 432.403877][ T936] usb 9-1: SerialNumber: syz [ 432.465788][ T936] usb 9-1: config 0 descriptor?? [ 432.486868][ T936] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 432.531786][ T936] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input39 [ 432.714800][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 433.107610][ T936] libceph: connect (1)[c::]:6789 error -101 [ 433.143567][ T936] libceph: mon0 (1)[c::]:6789 connect error [ 433.155906][ T5929] usb 9-1: USB disconnect, device number 3 [ 433.338031][T11006] ceph: No mds server is up or the cluster is laggy [ 433.406155][ T5929] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 433.817785][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 433.845159][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 434.306614][T11019] loop8: detected capacity change from 0 to 2048 [ 434.322546][T11021] loop2: detected capacity change from 0 to 8 [ 434.354015][T11021] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 434.386912][T11019] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.456022][T11021] cramfs: Error -3 while decompressing! [ 434.479167][T11017] netlink: set zone limit has 4 unknown bytes [ 434.479660][T11021] cramfs: ffffffff9a98c702(639)->ffff888056b29000(4096) [ 434.510097][ T29] audit: type=1800 audit(1740890817.477:26): pid=11019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1704" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 434.538106][T11021] cramfs: bad data blocksize 4294966699 [ 434.561181][T11021] cramfs: Error -3 while decompressing! [ 434.566775][T11021] cramfs: ffffffff9a98c702(639)->ffff888056b29000(4096) [ 434.587723][ T9478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.612293][ T29] audit: type=1800 audit(1740890817.587:27): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1705" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 434.969329][T11027] loop8: detected capacity change from 0 to 1024 [ 435.011809][T11027] EXT4-fs: Ignoring removed i_version option [ 435.049549][T11027] EXT4-fs: Ignoring removed bh option [ 435.130677][T11027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.441509][ T5144] Bluetooth: hci1: command 0x0405 tx timeout [ 437.073955][ T9478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.381519][T11049] loop2: detected capacity change from 0 to 1024 [ 437.402471][T11049] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 438.008573][T11049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.151046][T11049] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 438.207543][T11049] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.1715: missing EA_INODE flag [ 438.924729][T11063] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 439.177467][T11049] EXT4-fs (loop2): Remounting filesystem read-only [ 439.303176][ T29] audit: type=1800 audit(1740890822.257:28): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1715" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 439.566932][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.458811][T11085] loop3: detected capacity change from 0 to 2048 [ 441.671522][T11085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.770861][T11091] xt_CONNSECMARK: invalid mode: 0 [ 441.921204][ T29] audit: type=1800 audit(1740890824.887:29): pid=11085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1725" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 442.770870][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.794469][T11109] loop2: detected capacity change from 0 to 512 [ 442.904856][T11109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.950431][T11109] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 443.120012][ T29] audit: type=1804 audit(1740890826.037:30): pid=11113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1731" name="bus" dev="ramfs" ino=25791 res=1 errno=0 [ 444.364287][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.826153][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.833320][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.659494][T11134] loop7: detected capacity change from 0 to 1024 [ 445.734692][T11134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.753452][T11137] overlayfs: failed to resolve './file0': -2 [ 445.847770][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1740'. [ 446.069453][ T8098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.227434][T11148] loop7: detected capacity change from 0 to 512 [ 446.245650][T11148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.479188][T11153] netlink: 'syz.2.1744': attribute type 1 has an invalid length. [ 446.493894][T11148] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.613616][T11161] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 447.646394][T11153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.362237][T11161] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 448.399273][T11161] EXT4-fs (loop7): This should not happen!! Data will be lost [ 448.399273][T11161] [ 448.420852][T11161] EXT4-fs (loop7): Total free blocks count 0 [ 448.427590][T11161] EXT4-fs (loop7): Free/Dirty block details [ 448.427632][T11156] bond1: (slave gretap1): making interface the new active one [ 448.442071][T11161] EXT4-fs (loop7): free_blocks=65280 [ 448.447543][T11161] EXT4-fs (loop7): dirty_blocks=31 [ 448.469727][T11161] EXT4-fs (loop7): Block reservation details [ 448.500390][T11156] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 448.522557][T11161] EXT4-fs (loop7): i_reserved_data_blocks=31 [ 448.627899][T11162] : entered promiscuous mode [ 449.245515][T11175] loop3: detected capacity change from 0 to 8 [ 449.252490][T11175] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 449.505079][T11175] cramfs: Error -3 while decompressing! [ 449.512264][T11175] cramfs: ffffffff9a988702(639)->ffff88805516c000(4096) [ 449.519246][T11175] cramfs: bad data blocksize 4294966699 [ 449.525151][T11175] cramfs: Error -3 while decompressing! [ 449.530779][T11175] cramfs: ffffffff9a988702(639)->ffff88805516c000(4096) [ 449.615813][ T29] audit: type=1800 audit(1740890832.507:31): pid=11175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1746" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 450.192375][ T8098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.131090][T11194] overlayfs: failed to resolve './file0': -2 [ 451.401021][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 451.569513][T11176] loop8: detected capacity change from 0 to 40427 [ 451.790328][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 451.797387][ T5908] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.579666][T11215] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd7": -EINTR [ 452.887096][ T5908] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.914326][ T5908] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.927433][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 452.934330][ T5908] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 452.943844][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.952734][T11211] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1759'. [ 453.027753][ T5908] usb 5-1: config 0 descriptor?? [ 453.315521][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.452540][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.507965][T11222] loop7: detected capacity change from 0 to 8 [ 453.517055][T11222] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 453.555832][T11222] cramfs: Error -3 while decompressing! [ 453.561604][T11222] cramfs: ffffffff9a98c702(639)->ffff8880544b1000(4096) [ 453.569011][T11222] cramfs: bad data blocksize 4294966699 [ 453.574967][T11222] cramfs: Error -3 while decompressing! [ 453.580701][T11222] cramfs: ffffffff9a98c702(639)->ffff8880544b1000(4096) [ 453.650103][ T29] audit: type=1800 audit(1740890836.557:32): pid=11222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1762" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 454.431189][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 454.437266][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 454.486642][ T5908] usb 5-1: USB disconnect, device number 9 [ 455.595397][ T936] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 455.771705][ T936] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.812788][ T936] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.871476][ T936] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 455.935390][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 455.984918][ T936] usb 4-1: SerialNumber: syz [ 456.022188][ T936] cdc_ether 4-1:1.0: skipping garbage [ 456.097016][ T936] usb 4-1: bad CDC descriptors [ 456.108022][ T936] usb-storage 4-1:1.0: USB Mass Storage device detected [ 456.174439][ T936] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 456.640219][ T936] usb 4-1: USB disconnect, device number 11 [ 457.087568][T11253] overlayfs: failed to resolve './file0': -2 [ 457.200600][ T5144] Bluetooth: hci1: command 0x0405 tx timeout [ 457.247127][T11259] overlay: Bad value for 'upperdir' [ 458.533321][T11268] loop3: detected capacity change from 0 to 4096 [ 458.635280][T11268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.080959][T11268] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 459.363979][T11277] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 459.725115][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 459.982677][ T5144] Bluetooth: hci5: unexpected event for opcode 0x203d [ 459.993445][T11284] loop7: detected capacity change from 0 to 128 [ 460.897494][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 460.960672][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 461.013948][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 461.125151][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 461.270691][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 461.312958][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 461.393215][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 461.923785][T11305] overlay: Bad value for 'upperdir' [ 462.040854][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 462.129443][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 463.300700][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 463.408558][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 463.461723][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 463.596050][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 463.842607][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 463.960278][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 464.000369][ T5144] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 464.009562][ T5144] Bluetooth: hci5: Injecting HCI hardware error event [ 464.021022][ T5855] Bluetooth: hci5: hardware error 0x00 [ 464.073322][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 464.116042][T11323] loop7: detected capacity change from 0 to 4096 [ 464.126972][T11323] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 464.142027][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 464.258226][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 464.427597][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 464.568432][T11329] loop8: detected capacity change from 0 to 1024 [ 464.739725][ T5841] EXT4-fs error: 19 callbacks suppressed [ 464.739784][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 465.151081][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 465.340593][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 465.450711][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 465.591305][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 465.692970][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 465.714158][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.795950][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 465.889463][T11318] loop2: detected capacity change from 0 to 32768 [ 465.923172][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 466.031501][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3111: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 466.125164][ T5841] EXT4-fs warning: 8 callbacks suppressed [ 466.125191][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 466.176886][T11318] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 466.269361][ T5841] EXT4-fs error (device loop3): ext4_readdir:259: inode #12: block 80: comm syz-executor: path /317/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 466.322442][ T29] audit: type=1800 audit(1740890849.287:33): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1797" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 466.348904][ T5855] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 466.369219][T11335] loop8: detected capacity change from 0 to 40427 [ 466.384568][T11335] F2FS-fs (loop8): heap/no_heap options were deprecated [ 466.415879][T11335] F2FS-fs (loop8): invalid crc value [ 466.432662][T11335] F2FS-fs (loop8): Found nat_bits in checkpoint [ 466.448312][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 466.489423][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 466.502804][T11335] F2FS-fs (loop8): Start checkpoint disabled! [ 466.552623][T11335] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 466.574288][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 467.314678][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 467.546471][T11345] syz.8.1804 (11345): drop_caches: 2 [ 467.606332][ T5849] ocfs2: Unmounting device (7,2) on (node local) [ 467.644594][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 467.724424][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 468.169350][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 468.247095][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 468.309427][ T1145] kworker/u8:7: attempt to access beyond end of device [ 468.309427][ T1145] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 468.325749][ T5841] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 468.396410][ T1145] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 470.343791][T11363] loop2: detected capacity change from 0 to 128 [ 470.502271][T11363] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.610708][T11363] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 470.669565][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.253354][T11375] loop4: detected capacity change from 0 to 1024 [ 472.211932][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.252226][ T5849] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.117243][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.782892][T11384] loop4: detected capacity change from 0 to 1024 [ 474.403501][T11384] hfsplus: xattr searching failed [ 474.455564][T11384] hfsplus: xattr searching failed [ 474.974615][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.295526][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.306376][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.316229][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.334079][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.364068][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 475.386345][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.580902][T11417] loop8: detected capacity change from 0 to 1024 [ 477.440658][ T5855] Bluetooth: hci2: command tx timeout [ 477.451553][ T1145] bridge_slave_1: left allmulticast mode [ 477.457246][ T1145] bridge_slave_1: left promiscuous mode [ 477.540539][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.606518][ T1145] bridge_slave_0: left allmulticast mode [ 477.612748][ T1145] bridge_slave_0: left promiscuous mode [ 477.637540][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.520999][ T5855] Bluetooth: hci2: command tx timeout [ 479.669006][T11437] overlay: Bad value for 'upperdir' [ 480.150338][ T936] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 480.300580][ T936] usb 3-1: Using ep0 maxpacket: 8 [ 480.320342][ T936] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 480.347350][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.367043][ T936] usb 3-1: Product: syz [ 480.375801][ T936] usb 3-1: Manufacturer: syz [ 480.385156][ T936] usb 3-1: SerialNumber: syz [ 480.399827][ T936] usb 3-1: config 0 descriptor?? [ 480.433617][ T936] gspca_main: sq905-2.14.0 probing 2770:9120 [ 480.654093][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.755704][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.759889][ T936] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 480.781226][ T936] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 480.783010][ T1145] bond0 (unregistering): Released all slaves [ 480.802226][ T936] usb 3-1: USB disconnect, device number 15 [ 481.189109][T11450] loop8: detected capacity change from 0 to 1024 [ 481.374115][T11450] hfsplus: xattr searching failed [ 481.390342][T11405] chnl_net:caif_netlink_parms(): no params data found [ 481.605779][ T5855] Bluetooth: hci2: command tx timeout [ 482.464340][T11447] loop4: detected capacity change from 0 to 32768 [ 482.756334][T11447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1841 (11447) [ 482.831090][T11468] loop8: detected capacity change from 0 to 64 [ 483.343860][T11447] BTRFS error (device loop4): open_ctree failed: -4 [ 483.540622][ T1145] hsr_slave_0: left promiscuous mode [ 483.610555][ T1145] hsr_slave_1: left promiscuous mode [ 483.616526][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.680587][ T5855] Bluetooth: hci2: command tx timeout [ 483.689425][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.781168][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.788968][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.975509][ T1145] veth1_macvtap: left promiscuous mode [ 484.010334][ T1145] veth0_macvtap: left promiscuous mode [ 484.032141][ T1145] veth1_vlan: left promiscuous mode [ 484.050722][ T1145] veth0_vlan: left promiscuous mode [ 484.270392][ T5908] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 484.459800][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.490535][ T5908] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 484.503840][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.809109][ T5908] usb 3-1: config 0 descriptor?? [ 484.824197][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 485.648402][T11487] loop7: detected capacity change from 0 to 4096 [ 485.749074][T11487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.882873][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 485.892425][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 485.899400][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 485.910038][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 485.918587][T11487] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 485.927820][ T5908] pwc: recv_control_msg error -32 req 04 val 1300 [ 486.109374][ T8098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.149001][ T5908] pwc: recv_control_msg error -71 req 02 val 2000 [ 486.190353][ T5908] pwc: recv_control_msg error -71 req 02 val 2100 [ 486.227775][ T5908] pwc: recv_control_msg error -71 req 04 val 1500 [ 486.250451][ T5908] pwc: recv_control_msg error -71 req 02 val 2500 [ 486.280957][ T5908] pwc: recv_control_msg error -71 req 02 val 2400 [ 486.307703][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 486.320684][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 486.338068][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 486.374226][T11497] loop7: detected capacity change from 0 to 1024 [ 486.390673][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 486.419793][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 486.446855][ T5908] pwc: Registered as video103. [ 486.462866][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 486.488488][T11497] hfsplus: xattr searching failed [ 486.510824][T11497] hfsplus: xattr searching failed [ 486.522548][ T5908] usb 3-1: USB disconnect, device number 16 [ 486.598491][T11482] loop8: detected capacity change from 0 to 40427 [ 486.624893][T11482] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff [ 486.698966][T11482] F2FS-fs (loop8): heap/no_heap options were deprecated [ 486.746216][T11482] F2FS-fs (loop8): invalid crc value [ 486.824694][T11482] F2FS-fs (loop8): Found nat_bits in checkpoint [ 486.999528][T11501] overlayfs: failed to resolve './file1': -2 [ 487.110643][T11482] F2FS-fs (loop8): Start checkpoint disabled! [ 487.136022][T11482] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 487.230711][ T5850] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 487.380536][ T5850] usb 3-1: device descriptor read/64, error -71 [ 487.925501][T11517] loop7: detected capacity change from 0 to 1024 [ 487.958807][ T5850] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 488.420518][ T5850] usb 3-1: device descriptor read/64, error -71 [ 488.559097][ T5850] usb usb3-port1: attempt power cycle [ 488.803276][T11521] loop8: detected capacity change from 0 to 64 [ 488.920637][ T5850] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 489.000046][ T5850] usb 3-1: device descriptor read/8, error -71 [ 489.291085][ T5850] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 489.376134][ T5850] usb 3-1: device descriptor read/8, error -71 [ 489.501300][ T5850] usb usb3-port1: unable to enumerate USB device [ 489.562744][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 489.592158][ T5906] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 489.697968][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 489.729502][T11528] loop8: detected capacity change from 0 to 4096 [ 489.750395][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 489.758919][ T5906] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 489.798685][T11528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.818728][ T5906] usb 5-1: config 0 has no interface number 0 [ 489.835216][ T5906] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.893346][ T5906] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.937029][T11528] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 489.970934][ T5906] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 489.980033][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 489.996724][ T5906] usb 5-1: Product: syz [ 490.034595][ T5906] usb 5-1: SerialNumber: syz [ 490.064893][ T5906] usb 5-1: config 0 descriptor?? [ 490.084380][ T9478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.097455][ T5906] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 490.130203][ T5906] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input41 [ 490.915349][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 490.971155][T11537] input: syz0 as /devices/virtual/input/input42 [ 491.342365][ T5908] usb 5-1: USB disconnect, device number 10 [ 491.361677][ T5908] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 491.488452][T11515] vlan2: entered allmulticast mode [ 491.502951][T11515] bond0: entered allmulticast mode [ 491.552243][T11515] bond0: left allmulticast mode [ 491.697073][T11405] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.734937][T11405] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.765321][T11405] bridge_slave_0: entered allmulticast mode [ 491.791720][T11405] bridge_slave_0: entered promiscuous mode [ 491.810636][T11405] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.818073][T11405] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.839848][T11405] bridge_slave_1: entered allmulticast mode [ 491.853542][T11405] bridge_slave_1: entered promiscuous mode [ 492.012507][T11543] netem: change failed [ 492.041780][T11405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.069690][T11405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.287243][T11405] team0: Port device team_slave_0 added [ 492.301020][T11539] loop2: detected capacity change from 0 to 40427 [ 492.333147][T11539] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 492.350899][T11539] F2FS-fs (loop2): invalid crc value [ 492.358582][T11539] F2FS-fs (loop2): Found nat_bits in checkpoint [ 492.366631][T11405] team0: Port device team_slave_1 added [ 492.627590][T11539] F2FS-fs (loop2): Start checkpoint disabled! [ 492.638135][T11539] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 492.682464][T11539] syz.2.1872: attempt to access beyond end of device [ 492.682464][T11539] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 492.697537][T11405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.711154][T11539] syz.2.1872: attempt to access beyond end of device [ 492.711154][T11539] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 492.730506][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.799093][T11405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.869986][T11405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.888814][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.929272][T11561] loop7: detected capacity change from 0 to 512 [ 492.966734][T11561] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 492.977579][T11405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.036072][ T1145] IPVS: stop unused estimator thread 0... [ 493.068836][T11561] EXT4-fs (loop7): 1 truncate cleaned up [ 493.083550][T11567] vlan2: entered allmulticast mode [ 493.090093][ T62] kworker/u8:4: attempt to access beyond end of device [ 493.090093][ T62] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 493.106379][T11561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.127838][T11561] EXT4-fs error (device loop7): __ext4_iget:4984: inode #16: block 150994972: comm syz.7.1881: invalid block [ 493.153433][T11561] EXT4-fs (loop7): Remounting filesystem read-only [ 493.160079][ T62] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 493.169518][ T62] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 493.287384][ T8098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.313119][T11405] hsr_slave_0: entered promiscuous mode [ 493.319519][T11405] hsr_slave_1: entered promiscuous mode [ 493.547574][T11571] input: syz0 as /devices/virtual/input/input43 [ 493.681724][T11547] loop4: detected capacity change from 0 to 40427 [ 493.690437][ T936] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 493.773000][T11547] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 493.807962][T11547] F2FS-fs (loop4): heap/no_heap options were deprecated [ 493.853225][T11547] F2FS-fs (loop4): invalid crc value [ 493.866090][T11547] F2FS-fs (loop4): Found nat_bits in checkpoint [ 493.869048][T11405] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 493.872596][ T936] usb 9-1: Using ep0 maxpacket: 16 [ 493.904053][ T936] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 493.906172][T11405] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 493.919201][ T936] usb 9-1: config 0 has no interface number 0 [ 493.931011][ T936] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.957122][T11577] overlayfs: failed to clone upperpath [ 493.964989][T11405] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 493.981210][ T936] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 493.998904][T11405] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 494.001811][ T936] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 494.039126][ T936] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 494.060152][ T936] usb 9-1: Product: syz [ 494.070127][ T936] usb 9-1: SerialNumber: syz [ 494.081786][T11547] F2FS-fs (loop4): Start checkpoint disabled! [ 494.088926][ T936] usb 9-1: config 0 descriptor?? [ 494.091732][T11547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 494.102199][ T936] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 494.121022][ T936] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input44 [ 494.789096][T11405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.819205][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 494.877327][T11405] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.922002][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.929147][ T6166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.999199][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.006334][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.110766][ T7116] kworker/u8:16: attempt to access beyond end of device [ 495.110766][ T7116] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 495.136396][ T7116] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 495.163646][ T7116] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 495.244797][ T5850] usb 9-1: USB disconnect, device number 4 [ 495.273576][T11584] overlayfs: failed to resolve './file1': -2 [ 495.314809][ T5850] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 495.748770][T11405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.494978][T11598] overlay: Bad value for 'upperdir' [ 497.828497][T11405] veth0_vlan: entered promiscuous mode [ 497.874456][T11405] veth1_vlan: entered promiscuous mode [ 497.953276][T11405] veth0_macvtap: entered promiscuous mode [ 497.982493][T11405] veth1_macvtap: entered promiscuous mode [ 498.018746][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.039210][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.059885][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.085546][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.105746][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.126861][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.157366][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.184630][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.200419][ T5908] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 498.249762][T11405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.284366][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.320406][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.333714][T11623] input: syz0 as /devices/virtual/input/input45 [ 498.340951][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.359542][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.369869][ T5908] usb 5-1: device descriptor read/64, error -71 [ 498.400471][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.420787][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.435909][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.447026][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.464105][T11405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.508215][T11405] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.536301][T11405] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.571780][T11405] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.590400][T11405] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.610680][ T5908] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 498.643159][T11602] loop7: detected capacity change from 0 to 40427 [ 498.674968][T11602] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x7 [ 498.735218][T11616] loop8: detected capacity change from 0 to 32768 [ 498.750754][ T5908] usb 5-1: device descriptor read/64, error -71 [ 498.777650][T11602] F2FS-fs (loop7): invalid crc value [ 498.805884][T11616] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 498.820421][T11602] F2FS-fs (loop7): Found nat_bits in checkpoint [ 498.860008][T11616] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 498.882419][ T5908] usb usb5-port1: attempt power cycle [ 498.984492][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.999681][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.054552][T11602] F2FS-fs (loop7): Start checkpoint disabled! [ 499.066578][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.095746][T11602] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 499.103886][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.185105][T11602] syz.7.1894: attempt to access beyond end of device [ 499.185105][T11602] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 499.253894][T11635] syz.7.1894: attempt to access beyond end of device [ 499.253894][T11635] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 499.268006][ T5908] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 499.321831][ T5908] usb 5-1: device descriptor read/8, error -71 [ 499.404843][ T9478] ocfs2: Unmounting device (7,8) on (node local) [ 499.588272][ T5908] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 499.733636][ T5908] usb 5-1: device descriptor read/8, error -71 [ 499.995218][ T5908] usb usb5-port1: unable to enumerate USB device [ 500.250704][ T53] kworker/u8:3: attempt to access beyond end of device [ 500.250704][ T53] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 500.299017][ T53] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 500.316662][ T53] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 501.030951][T11652] overlay: Bad value for 'upperdir' [ 501.557433][T11659] loop8: detected capacity change from 0 to 1024 [ 502.767163][T11667] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1915'. [ 502.910609][T11644] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 503.068539][T11675] input: syz0 as /devices/virtual/input/input46 [ 503.082147][T11644] usb 5-1: device descriptor read/64, error -71 [ 503.443729][T11644] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 504.119765][T11644] usb 5-1: device descriptor read/64, error -71 [ 504.240827][T11644] usb usb5-port1: attempt power cycle [ 504.636608][T11644] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 505.111032][T11644] usb 5-1: device descriptor read/8, error -71 [ 505.341539][T11697] overlay: Bad value for 'upperdir' [ 505.350521][T11644] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 505.411939][T11644] usb 5-1: device descriptor read/8, error -71 [ 505.490606][ T936] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 505.700461][ T936] usb 10-1: device descriptor read/64, error -71 [ 505.705324][T11644] usb usb5-port1: unable to enumerate USB device [ 505.950424][ T936] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 506.130363][ T936] usb 10-1: device descriptor read/64, error -71 [ 506.171132][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.177462][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.294366][ T936] usb usb10-port1: attempt power cycle [ 506.629419][T11683] loop8: detected capacity change from 0 to 40427 [ 506.859067][T11713] loop4: detected capacity change from 0 to 1024 [ 507.660308][ T936] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 507.691325][T11715] loop2: detected capacity change from 0 to 8 [ 507.731585][ T936] usb 10-1: device descriptor read/8, error -71 [ 507.840162][T11715] SQUASHFS error: zlib decompression failed, data probably corrupt [ 507.848561][T11715] SQUASHFS error: Failed to read block 0x4e8: -5 [ 507.906309][T11715] SQUASHFS error: Failed to read block 0x6e6: -5 [ 507.913217][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 507.920713][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 507.927741][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 507.934320][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 507.941706][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 507.948943][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 507.955452][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 507.990269][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 507.997295][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.003896][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.011305][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.018456][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.025019][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.032410][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.039396][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.045911][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.055163][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.062375][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.068918][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.076322][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.114814][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.121382][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.128749][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.135895][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.142795][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.150156][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.157195][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.163740][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.171139][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.178130][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.185514][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.193569][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.200597][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.207073][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.265610][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.272714][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.279222][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.287442][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.295132][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.301670][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.309164][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.316022][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.322335][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.329663][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.336515][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.342769][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.350079][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.356971][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.363785][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.370356][ T29] audit: type=1800 audit(1740890890.827:34): pid=11715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1933" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 508.371094][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.398889][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.407858][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.410047][T11718] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.415183][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.415238][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.415307][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.415330][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.415384][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.415449][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.422770][T11718] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.429453][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.435796][T11718] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.442930][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.449659][T11718] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.455868][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.455891][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.464127][T11718] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.469973][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.470041][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.477253][T11718] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.484424][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.484497][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.493588][T11717] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.498742][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.506036][T11717] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.512772][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.512834][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.520159][T11717] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.526263][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.533616][T11717] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.540312][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.547121][T11717] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.553229][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.553303][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.560598][T11717] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.567825][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.567882][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.574795][T11714] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.581477][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.587560][T11714] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.596248][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.602742][T11714] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.609357][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.616151][T11714] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.623450][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.629816][T11714] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.637126][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.643873][T11714] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.692496][T11716] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.754063][T11716] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.754692][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.760967][T11716] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.767157][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.774392][T11716] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.774504][T11716] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.781731][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.788502][T11716] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.797293][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.816407][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.823740][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.830788][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.837052][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.844576][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.851415][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.857640][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.865093][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.872123][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.880658][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.888084][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.895378][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.902943][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.912967][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.919860][T11715] SQUASHFS error: Failed to read block 0x0: -5 [ 508.926167][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.933555][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.940480][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.947789][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.955033][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.962491][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 508.969387][T11715] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 508.976770][T11715] SQUASHFS error: read_indexes: reading block [6e4:0] [ 509.100347][ T936] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 509.306335][ T936] usb 10-1: device descriptor read/8, error -71 [ 509.431958][T11726] input: syz0 as /devices/virtual/input/input47 [ 509.480980][ T936] usb usb10-port1: unable to enumerate USB device [ 509.565691][T11724] loop7: detected capacity change from 0 to 4096 [ 509.610000][T11724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.646471][T11724] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 509.657578][ T5906] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 509.821140][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 509.857761][T11736] overlay: Bad value for 'upperdir' [ 509.872945][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 509.872940][ T8098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.909169][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 509.936716][ T5906] usb 5-1: can't read configurations, error -71 [ 510.466530][ T970] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 510.741418][ T970] usb 10-1: device descriptor read/64, error -71 [ 512.002176][ T970] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 512.430725][ T970] usb 10-1: device descriptor read/64, error -71 [ 512.549347][T11752] loop2: detected capacity change from 0 to 128 [ 512.562587][ T970] usb usb10-port1: attempt power cycle [ 512.606916][T11752] EXT4-fs (loop2): Test dummy encryption mode enabled [ 512.702717][T11752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 512.779214][T11752] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 513.779469][T11752] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 515.093541][ T970] usb usb10-port1: Cannot enable. Maybe the USB cable is bad? [ 515.240524][ T970] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 515.250186][ T5849] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.310440][ T970] usb 10-1: Using ep0 maxpacket: 8 [ 515.348582][ T970] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 515.378728][ T970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.409238][ T970] usb 10-1: Product: syz [ 515.413945][ T5909] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 515.440756][ T970] usb 10-1: Manufacturer: syz [ 515.455792][ T970] usb 10-1: SerialNumber: syz [ 515.488041][ T970] usb 10-1: config 0 descriptor?? [ 515.611166][ T5909] usb 9-1: no configurations [ 515.615873][ T5909] usb 9-1: can't read configurations, error -22 [ 515.721077][ T970] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 515.780756][ T5909] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 516.690983][ T5909] usb 9-1: no configurations [ 516.695712][ T5909] usb 9-1: can't read configurations, error -22 [ 516.735089][ T5909] usb usb9-port1: attempt power cycle [ 516.980409][ T5908] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 518.196024][ T5908] usb 3-1: device descriptor read/64, error -71 [ 518.488746][ T970] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 518.533078][ T5908] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 518.782224][ T5908] usb 3-1: device descriptor read/64, error -71 [ 519.025385][T11799] loop7: detected capacity change from 0 to 32768 [ 519.100699][ T5908] usb usb3-port1: attempt power cycle [ 519.186202][ T5909] usb 10-1: USB disconnect, device number 9 [ 519.270112][T11799] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 519.670493][ T5908] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 520.833321][ T29] audit: type=1800 audit(1740890903.617:35): pid=11799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1961" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 521.064854][ T5908] usb 3-1: device descriptor read/8, error -71 [ 521.260832][ T8098] ocfs2: Unmounting device (7,7) on (node local) [ 522.055748][T11846] loop8: detected capacity change from 0 to 64 [ 522.350550][ T5909] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 522.370823][ T5903] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 522.690987][ T5909] usb 10-1: Using ep0 maxpacket: 8 [ 522.698516][ T5903] usb 5-1: no configurations [ 522.704209][ T5903] usb 5-1: can't read configurations, error -22 [ 523.516197][ T5909] usb 10-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 523.541953][ T5909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.570444][ T5909] usb 10-1: Product: syz [ 523.574771][ T5909] usb 10-1: Manufacturer: syz [ 523.579455][ T5909] usb 10-1: SerialNumber: syz [ 523.753809][ T5903] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 524.172607][ T5909] usb 10-1: config 0 descriptor?? [ 524.228581][ T5909] gspca_main: sq905-2.14.0 probing 2770:9120 [ 524.441055][ T5850] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 524.449219][ T5909] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 524.668631][ T5909] sq905 10-1:0.0: probe with driver sq905 failed with error -71 [ 524.728131][ T5850] usb 9-1: Using ep0 maxpacket: 8 [ 524.903594][ T5850] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 524.931284][ T5850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.949715][ T5850] usb 9-1: Product: syz [ 524.951517][ T5909] usb 10-1: USB disconnect, device number 10 [ 524.960061][ T5850] usb 9-1: Manufacturer: syz [ 525.007083][ T5850] usb 9-1: SerialNumber: syz [ 525.028032][ T5903] usb 5-1: device descriptor read/all, error -71 [ 525.047680][ T5903] usb usb5-port1: attempt power cycle [ 525.081346][ T5850] usb 9-1: config 0 descriptor?? [ 525.338206][ T5850] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 527.073633][T11876] loop9: detected capacity change from 0 to 32768 [ 527.192580][T11876] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 527.286650][ T29] audit: type=1800 audit(1740890910.257:36): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1990" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 528.535610][ T5850] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 528.536145][T11906] loop2: detected capacity change from 0 to 512 [ 528.555975][ T5850] usb 9-1: USB disconnect, device number 8 [ 528.594464][T11405] ocfs2: Unmounting device (7,9) on (node local) [ 528.598880][T11906] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 528.636569][T11889] loop4: detected capacity change from 0 to 32768 [ 528.706078][T11906] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 528.726317][T11906] EXT4-fs (loop2): 1 truncate cleaned up [ 528.733237][T11906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.816548][ T29] audit: type=1800 audit(1740890911.787:37): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1994" name="file0" dev="loop4" ino=33 res=0 errno=0 [ 528.848872][T11889] Oops: divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 528.855872][T11889] CPU: 1 UID: 0 PID: 11889 Comm: syz.4.1994 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0 [ 528.857311][ T29] audit: type=1800 audit(1740890911.787:38): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1994" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 528.866643][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 528.866666][T11889] RIP: 0010:dbAllocAG+0x414/0xd30 [ 528.866729][T11889] Code: 03 0f b6 0c 11 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 a7 08 00 00 41 8b 4d 2c 49 8d 7d 30 99 48 89 fe 48 c1 ee 03 f9 48 ba 00 00 00 00 00 fc ff df 0f b6 14 16 84 d2 74 09 80 fa [ 528.866771][T11889] RSP: 0018:ffffc9000c89f2f8 EFLAGS: 00010216 [ 528.866802][T11889] RAX: 0000000000000400 RBX: 000000000000000a RCX: 0000000000000000 [ 528.866826][T11889] RDX: 0000000000000000 RSI: 1ffff1100b2fee06 RDI: ffff8880597f7030 [ 528.866849][T11889] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000001f [ 528.866872][T11889] R10: 000000000000000a R11: 0000000000000006 R12: ffff888033d75000 [ 528.866895][T11889] R13: ffff8880597f7000 R14: 0000000000000000 R15: 0000000000000000 [ 528.866922][T11889] FS: 00007fd3087d06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 528.866956][T11889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.866982][T11889] CR2: 0000400000008000 CR3: 0000000062f22000 CR4: 0000000000350ef0 [ 528.991154][T11889] Call Trace: [ 528.994442][T11889] [ 528.997376][T11889] ? die+0x31/0x80 [ 529.001136][T11889] ? do_trap+0x232/0x430 [ 529.005411][T11889] ? dbAllocAG+0x414/0xd30 [ 529.009868][T11889] ? dbAllocAG+0x414/0xd30 [ 529.014313][T11889] ? do_error_trap+0xf4/0x230 [ 529.019012][T11889] ? dbAllocAG+0x414/0xd30 [ 529.023462][T11889] ? exc_divide_error+0x39/0x50 [ 529.028351][T11889] ? dbAllocAG+0x414/0xd30 [ 529.032802][T11889] ? asm_exc_divide_error+0x1a/0x20 [ 529.038037][T11889] ? dbAllocAG+0x414/0xd30 [ 529.042486][T11889] ? dbAllocAG+0x3cd/0xd30 [ 529.046941][T11889] ? __pfx_dbAllocAG+0x10/0x10 [ 529.051742][T11889] dbAlloc+0x415/0xab0 [ 529.055844][T11889] extAlloc+0x50a/0xf00 [ 529.060017][T11889] ? __pfx_extAlloc+0x10/0x10 [ 529.064707][T11889] ? down_write_nested+0x152/0x210 [ 529.069844][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.075527][T11889] ? bio_add_page+0x199/0x300 [ 529.080245][T11889] jfs_get_block+0x42c/0xb20 [ 529.084858][T11889] ? __pfx_jfs_get_block+0x10/0x10 [ 529.089985][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.095662][T11889] ? unpin_user_page+0xcf/0x1e0 [ 529.100547][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.106217][T11889] ? __pfx_jfs_get_block+0x10/0x10 [ 529.111344][T11889] __blockdev_direct_IO+0x26eb/0x40a0 [ 529.116742][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.122428][T11889] ? hlock_class+0x4e/0x130 [ 529.126964][T11889] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 529.132725][T11889] ? __pfx_jfs_get_block+0x10/0x10 [ 529.137871][T11889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 529.143260][T11889] ? lock_acquire+0x2f/0xb0 [ 529.147800][T11889] ? jfs_direct_IO+0x106/0x2c0 [ 529.152584][T11889] jfs_direct_IO+0x106/0x2c0 [ 529.157192][T11889] generic_file_direct_write+0x19a/0x410 [ 529.162862][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.168534][T11889] ? mnt_put_write_access_file+0x45/0xf0 [ 529.174205][T11889] __generic_file_write_iter+0x11b/0x240 [ 529.179877][T11889] generic_file_write_iter+0xe1/0x3b0 [ 529.185293][T11889] do_iter_readv_writev+0x658/0x950 [ 529.190535][T11889] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 529.196283][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.202044][T11889] ? rcu_is_watching+0x12/0xc0 [ 529.206852][T11889] ? do_writev+0x133/0x340 [ 529.211300][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.216976][T11889] vfs_writev+0x363/0xdd0 [ 529.221332][T11889] ? fdget_pos+0x267/0x390 [ 529.225791][T11889] ? rcu_is_watching+0x12/0xc0 [ 529.230578][T11889] ? __pfx_vfs_writev+0x10/0x10 [ 529.235454][T11889] ? __mutex_lock+0x1cc/0xb10 [ 529.240162][T11889] ? find_held_lock+0x2d/0x110 [ 529.244955][T11889] ? __pfx___mutex_lock+0x10/0x10 [ 529.250010][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.255681][T11889] ? trace_lock_acquire+0x14e/0x1f0 [ 529.260915][T11889] ? __fget_files+0x206/0x3a0 [ 529.265633][T11889] ? do_writev+0x133/0x340 [ 529.270073][T11889] do_writev+0x133/0x340 [ 529.274343][T11889] ? __pfx_do_writev+0x10/0x10 [ 529.279136][T11889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.284816][T11889] do_syscall_64+0xcd/0x250 [ 529.289352][T11889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.295277][T11889] RIP: 0033:0x7fd30798d169 [ 529.299701][T11889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.319331][T11889] RSP: 002b:00007fd3087d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 529.327767][T11889] RAX: ffffffffffffffda RBX: 00007fd307ba5fa0 RCX: 00007fd30798d169 [ 529.335750][T11889] RDX: 0000000000000021 RSI: 0000400000000a40 RDI: 0000000000000004 [ 529.343734][T11889] RBP: 00007fd307a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 529.351717][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.359697][T11889] R13: 0000000000000000 R14: 00007fd307ba5fa0 R15: 00007ffcd4eaa868 [ 529.367693][T11889] [ 529.370716][T11889] Modules linked in: [ 529.376058][T11889] ---[ end trace 0000000000000000 ]--- [ 529.402587][T11889] RIP: 0010:dbAllocAG+0x414/0xd30 [ 529.411599][T11889] Code: 03 0f b6 0c 11 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 a7 08 00 00 41 8b 4d 2c 49 8d 7d 30 99 48 89 fe 48 c1 ee 03 f9 48 ba 00 00 00 00 00 fc ff df 0f b6 14 16 84 d2 74 09 80 fa [ 529.522843][T11889] RSP: 0018:ffffc9000c89f2f8 EFLAGS: 00010216 [ 529.541211][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.554047][T11889] RAX: 0000000000000400 RBX: 000000000000000a RCX: 0000000000000000 [ 529.631870][T11921] xt_hashlimit: max too large, truncated to 1048576 [ 530.227207][T11889] RDX: 0000000000000000 RSI: 1ffff1100b2fee06 RDI: ffff8880597f7030 [ 530.235760][T11889] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000001f [ 530.245779][T11889] R10: 000000000000000a R11: 0000000000000006 R12: ffff888033d75000 [ 530.254304][T11889] R13: ffff8880597f7000 R14: 0000000000000000 R15: 0000000000000000 [ 530.263186][T11889] FS: 00007fd3087d06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 530.272454][T11889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.279069][T11889] CR2: 00007f3778978ab8 CR3: 0000000062f22000 CR4: 0000000000350ef0 [ 530.288121][T11889] Kernel panic - not syncing: Fatal exception [ 530.294451][T11889] Kernel Offset: disabled [ 530.298782][T11889] Rebooting in 86400 seconds..