last executing test programs: 9m2.059450896s ago: executing program 0 (id=2960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) getgroups(0x27, &(0x7f0000002540)) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r6, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r8 = socket(0x10, 0xbd0e6e190d015d52, 0x10) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xe0, 0x2, 0x1}, 0x10) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 9m0.980280622s ago: executing program 0 (id=2954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e9738", 0x18}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x0) 8m59.922295669s ago: executing program 0 (id=2959): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000040)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@delalloc}, {@grpquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = epoll_create(0x401) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000b96) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080001", @ANYRES32], 0x34}}, 0x4004010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00"], 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xb000001d}) epoll_wait(r0, &(0x7f0000000e80)=[{}, {}], 0x2, 0x0) syz_clone3(&(0x7f0000000600)={0x22028000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 8m58.53227628s ago: executing program 0 (id=2961): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000003640)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000003bc0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x30, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) signalfd4(r8, &(0x7f0000000180)={[0x984]}, 0x8, 0x80800) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) fallocate(r0, 0x0, 0x6, 0x8800000) 8m57.345454788s ago: executing program 0 (id=2962): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000100"], 0x48) 8m56.959449234s ago: executing program 0 (id=2963): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r2, 0x0, 0xff2e) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet(0x2, 0x3, 0x8) ioctl$TCFLSH(r2, 0x540b, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x37000000, @local}}}, 0x88) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x20, 0x26, 0x13, 0x3, 0x1, 0x8000, 0x4, 0x150}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800800000fe8000000000000000000000000000aa0e02000000000000000000000000000101012025b07f3c58"], 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0xee, 0x100000000000023b) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000000000)=""/8, 0x8}], 0x2, 0x6, 0x81) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'rose0\x00', 0x2201}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000040)={0x0, 0x1, 0x101, 0x7, 0x1, "fb80a86338ff55be"}) 8m41.223813845s ago: executing program 32 (id=2963): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r2, 0x0, 0xff2e) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet(0x2, 0x3, 0x8) ioctl$TCFLSH(r2, 0x540b, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x37000000, @local}}}, 0x88) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x20, 0x26, 0x13, 0x3, 0x1, 0x8000, 0x4, 0x150}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800800000fe8000000000000000000000000000aa0e02000000000000000000000000000101012025b07f3c58"], 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0xee, 0x100000000000023b) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000000000)=""/8, 0x8}], 0x2, 0x6, 0x81) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'rose0\x00', 0x2201}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000040)={0x0, 0x1, 0x101, 0x7, 0x1, "fb80a86338ff55be"}) 4m48.243655603s ago: executing program 3 (id=3599): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r10}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000100"], 0x48) 4m47.870270748s ago: executing program 3 (id=3602): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9, 0x100000}]}}) 4m47.642807162s ago: executing program 3 (id=3603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='fsi_master_rw_result\x00'}, 0x18) pipe2$9p(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x4048010) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) 4m41.744547363s ago: executing program 3 (id=3607): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r10}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000100"], 0x48) 4m41.221686911s ago: executing program 3 (id=3612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 4m40.237818627s ago: executing program 3 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 4m24.090347366s ago: executing program 33 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 9.532012923s ago: executing program 1 (id=4293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04004600050034006e00000008002600"], 0x5c}}, 0x20004800) 9.430054014s ago: executing program 1 (id=4295): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) fgetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 5.897045059s ago: executing program 1 (id=4306): sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) socket(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/250, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x25, 0x1, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r6 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x9, 0x3ff}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 4.142811236s ago: executing program 1 (id=4311): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 3.403656407s ago: executing program 4 (id=4313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1004c897}, 0x80) 3.170264551s ago: executing program 1 (id=4314): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) fgetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 3.115493132s ago: executing program 4 (id=4316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04004600050034006e00000008002600"], 0x5c}}, 0x20004800) 1.96028055s ago: executing program 4 (id=4318): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 1.95148196s ago: executing program 5 (id=4319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 1.823263612s ago: executing program 5 (id=4320): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000000000)) 1.740604293s ago: executing program 4 (id=4321): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52000) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}], 0x1, 0x0, 0x0, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001940)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x9}}, 0x20) 1.653875454s ago: executing program 5 (id=4322): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0x50, &(0x7f00000009c0)=ANY=[], 0x0) 1.595958985s ago: executing program 2 (id=4323): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x25ff53b91ca25a6d, 0x17, 0x69, "fec9b28cde02a486128ced8e0b5c7f9f62a443ce120a00f8abf5076955676838d457b649ad449ea65e74cdd08689db4b5884af53026682805d8d0cd0e4126c30baf312d5d45066cda8924cbae6aeac7b36c44973a83cd63c5ffd0a702e7b63ea27c0e42d03829c45fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 1.562763896s ago: executing program 5 (id=4324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 1.389927988s ago: executing program 5 (id=4325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) syz_open_dev$admmidi(&(0x7f0000000400), 0x2, 0x169880) close(0x3) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x400, 0x2, 0x1d}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) 1.389691628s ago: executing program 4 (id=4326): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x0, @mcast2, 0x12}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) 733.464289ms ago: executing program 4 (id=4327): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r1, 0x0, 0x0) 671.794619ms ago: executing program 5 (id=4328): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c726573765f6c6576656c3d30303030303030303030303030303030303030302c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c646174613d77726974656261636b2c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00149e0cb4c679a55808f10855fc0d9b9d7241cc60c5c0b35a9ce6bd73d50a863d736b7f64cdbf2582b25c868128f5a0c3ca71ea7a85f79743e17bbb3291a3c43eb49fcfcab9a806f939773a5895370494ec438f24b77c23cb13a0c7c11503d4e4a25d5e8142cc163f75ca2557bc5b3dd2856dbf2f4fbffb092b1a8d3f410d0daefab8a2f41a23713a02fa9349bc76bc637fe28f733ee38a6de0e2174f54e7f4ebc705a06c4b7d76bcc94f8985dbf4791afe238c9f24f48c0f98d3898ad1f3597c15fdc241ce161617ca162b1d4a17900f12843677d372e706"], 0x1, 0x443b, &(0x7f0000010200)="$eJzs3c9PXNUeAPBzL7SFvrYP+rroS17yJnlNnlFDoCuVGimlpdBiTbWNcTMdYNqiA9PAYFx0gbsmrkxcGBeNJu5YNSzc1j/Bjcu6bqILNyYmjZiZuQPcy0wYGwYk/XwW3Lnn1z0z33vPPXdxOXGicnduKTe3lCss5Mozt5fO5j4ul5bniyHeI02Pf2jvjk97OnGe7Pe59yK7duHSuzfPhvD97I9P19fX10NVd2hqaMvn3369P7N12xBn6lTbbd7abvkghHAq+Xw41Z+uEML734UQhRDOJ2mjybY3hHA81PNu3v/sVm6XevPoSfFc/tnUg7XhM5OrD9daf/cohK9K/371zvzP/+sa/unldA4AAAAAAAAAAAAAAAAAAC+q8evXbrwzOBQeR6F7Ndr+vu54sm31fuz6rvlv578sAAAAAAAAAAAAAAAAAAAA/E1tvv+fi042ef9/LNmOtKi//lbn+0jnTLx9bezi4FCy/vv2pcdfS5J+Od8V+pus+55d//18pn7z9d93b4nzRv8ax+0LUTyQ2o/jgYEQvkkWfj8dHY1L5aXKK7fLywuzu9aNAysd//rq/anoJAv6txv/0Uz7nV///1/bzqbq/i2r6LclHf+uluW+/TRqK/4XMvX2Iv7P6dDu9uNgSse/u5bWu7XASH0AqMb/8+6d4z+Wab9T8T8RQshF1b7mUiNAdQ5TTW81XyEtHf/6JZEaOpMfstX1/3sm/hcz7e/X+L+SvRHRVDr+h2tpPakSm9d/f7zz9X8p0/5+xL/a/xX3/7ak43+kntidKlL7Jdsd/8cz7Xcq/jfipJ8notQZsBrV01v9vzrS0vHv2Za/+fwXtzX/u5ypv1fPf7XjvlndqT//NYb/l6L68x/NpePf27Jcu9f/RKZep8f/kdr8j+eVjv/RWlp67txX+9tu/Ccz7Xcq/rVZSU8j/pvjyR9H6ulfp+Z/HvVaScf/H/XEeGuJldrf2vwv2nn+fyXT/n7M/6r9X4lb14h29Q50sKXjf6xluWr8f2jj/n81U6/z8Q9hUDCfWzr+x1uWq13/PTvHfypTr9Px/38nGwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AEaTbV+I4oHUfhwPDIRwIdk/HY5G04XZ/HSpPPPRUghjSXounIzulMrThVJ+bqE8W8wXSqXyTAgXk/xToSdaKpUr+fnCvUsbbfVGd4uFxcp0sVAJIYwn6f8JxxttTc9V5gv3QgiXN/L+GZcX790tLORn5xbfGBwcHAwTG33oj4qfVIoLlfrR67khTG7U7Yu2dK6WfWWjL8eiD8vLiwuFUi396pY6pfJMobSlzlSS90XojyqLywszhUoxXyrfaRxvP40k27GJ6+9dvzq0Lf9WVN+O7m23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLHg+//mUIobu+F4cQRhofomblHz0pnss/m3qwNnxmcvXh2tNW5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi4dozQQRGEAfjMWaucxrJbdznZFES1cETyBHsPD6FG8hHdIkSJtihBIZiFsdmGbpPq+5sH8zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgnqf37uOtbiJSXG0uI/6+/heH+UupP/fj9y/OMCOn8/zaPTzWTfn3dJTflaNlm3fpevX9GSO19zvYk+E+7fV9rifnmtq3qfn6vjeRchURbclvU85VNe8tAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W0fRtwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//6vAfUQ==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000001c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 594.013291ms ago: executing program 2 (id=4329): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 439.399943ms ago: executing program 2 (id=4330): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x31) write$cgroup_devices(r0, &(0x7f0000000580)={'c', ' *:* ', 'm\x00'}, 0x8) 347.399675ms ago: executing program 2 (id=4331): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 246.000676ms ago: executing program 2 (id=4332): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 118.256088ms ago: executing program 2 (id=4333): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) socket(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/250, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x25, 0x1, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r6 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x9, 0x3ff}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 0s ago: executing program 1 (id=4334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$admmidi(&(0x7f0000000400), 0x2, 0x169880) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x10001, 0x3c, 0x0, 0x9}) close(0x3) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x400, 0x2, 0x1d}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r8, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): cdDevice=ee.8d [ 1510.847111][T15205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.893831][T15205] usb 2-1: config 0 descriptor?? [ 1511.276147][T15205] usb 2-1: can't set config #0, error -71 [ 1511.304748][T15205] usb 2-1: USB disconnect, device number 42 [ 1511.562061][T17518] loop1: detected capacity change from 0 to 32768 [ 1511.569553][T17518] XFS: ikeep mount option is deprecated. [ 1511.708993][T17518] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1512.212804][T17518] XFS (loop1): Ending clean mount [ 1512.228327][T17518] XFS (loop1): Quotacheck needed: Please wait. [ 1512.285166][T17518] XFS (loop1): Quotacheck: Done. [ 1513.029601][ T28] audit: type=1800 audit(1750458168.967:705): pid=17542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2964" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 1515.362449][ T28] audit: type=1800 audit(1750458171.287:706): pid=17543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2964" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 1515.629498][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1523.370997][T17624] overlayfs: failed to clone upperpath [ 1524.923632][T17639] overlayfs: failed to clone upperpath [ 1527.078670][T17653] loop1: detected capacity change from 0 to 256 [ 1527.088889][T17653] exfat: Deprecated parameter 'utf8' [ 1527.096341][T17653] exfat: Bad value for 'errors' [ 1527.302972][T17658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1527.325611][T17658] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1527.334506][T17658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1527.344696][T17658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1527.352116][T17658] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1527.359674][T17658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1527.387844][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1527.403107][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1527.410770][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1527.421317][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1527.429631][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1527.437632][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1527.533791][T17656] lo speed is unknown, defaulting to 1000 [ 1528.554235][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 1529.313127][T17676] loop1: detected capacity change from 0 to 1024 [ 1529.416783][T17656] chnl_net:caif_netlink_parms(): no params data found [ 1529.464413][T17658] Bluetooth: hci4: command tx timeout [ 1530.792009][T17656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.840158][T17656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.878954][T17656] bridge_slave_0: entered allmulticast mode [ 1530.909254][T17656] bridge_slave_0: entered promiscuous mode [ 1530.962736][T17656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.038807][T17656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.087931][T17656] bridge_slave_1: entered allmulticast mode [ 1531.222294][T17656] bridge_slave_1: entered promiscuous mode [ 1531.544549][T17658] Bluetooth: hci4: command tx timeout [ 1532.133612][T17656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.164180][T17656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.212249][T17656] team0: Port device team_slave_0 added [ 1532.222448][T17656] team0: Port device team_slave_1 added [ 1532.244639][T17656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.251719][T17656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.280067][T17656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.292474][T17656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.301885][T17656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.342456][T17656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.766807][T17656] hsr_slave_0: entered promiscuous mode [ 1532.774083][T17656] hsr_slave_1: entered promiscuous mode [ 1532.781482][T17656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1532.796384][T17656] Cannot create hsr debugfs directory [ 1533.248326][T17656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.319596][T17656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.351939][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.359067][T10326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.400587][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.407783][T10326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.624355][T17658] Bluetooth: hci4: command tx timeout [ 1534.039953][T17656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.500690][T17743] lo speed is unknown, defaulting to 1000 [ 1534.668591][T17656] veth0_vlan: entered promiscuous mode [ 1534.693719][T17656] veth1_vlan: entered promiscuous mode [ 1534.739426][T17656] veth0_macvtap: entered promiscuous mode [ 1534.813221][T17656] veth1_macvtap: entered promiscuous mode [ 1534.948837][T17656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1534.969635][T17656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1535.049234][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'. [ 1535.155249][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.164656][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.199194][T13677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.225069][T13677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.554003][T17758] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1535.704544][T17658] Bluetooth: hci4: command tx timeout [ 1536.531070][T17766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.539072][T17766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.549488][T17766] bridge0: entered allmulticast mode [ 1536.676229][T17766] bridge_slave_1: left allmulticast mode [ 1536.684351][T17766] bridge_slave_1: left promiscuous mode [ 1536.690202][T17766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.719194][T17766] bridge_slave_0: left allmulticast mode [ 1536.725207][T17766] bridge_slave_0: left promiscuous mode [ 1536.732948][T17766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.328620][T17781] loop4: detected capacity change from 0 to 1024 [ 1537.349464][T17781] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1539.857755][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'. [ 1540.373633][T17801] syz.2.3015[17801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1540.374953][T17801] syz.2.3015[17801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1542.693177][T17820] loop4: detected capacity change from 0 to 1024 [ 1542.839645][T17820] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1543.346801][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 1545.028557][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 1545.380689][T17845] loop1: detected capacity change from 0 to 1024 [ 1545.479113][T17846] loop4: detected capacity change from 0 to 256 [ 1545.530103][T17845] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 1549.906873][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1550.389815][T17860] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1553.297191][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1554.721541][T17535] syz.0.2963 (17535): drop_caches: 1 [ 1558.663373][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3037'. [ 1562.056799][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 1562.389006][T17919] misc userio: The device must be registered before sending interrupts [ 1562.848221][T17935] netlink: 'syz.3.3046': attribute type 1 has an invalid length. [ 1564.723627][T17935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1565.267367][T17948] loop4: detected capacity change from 0 to 1024 [ 1566.317719][T17948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1566.731576][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 1567.945564][T17656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.345471][T18003] overlayfs: failed to clone lowerpath [ 1571.356799][T18003] overlayfs: failed to clone upperpath [ 1572.193210][T18007] syz.4.3058[18007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.193290][T18007] syz.4.3058[18007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1573.769847][T18015] loop4: detected capacity change from 0 to 1024 [ 1573.897957][T18015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.330575][T17656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.472969][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 1575.564799][T18048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3069'. [ 1575.786918][T18049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1575.940363][T18055] lo speed is unknown, defaulting to 1000 [ 1575.986082][T16141] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1575.993979][T16141] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1576.014190][T16141] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1576.021976][T16141] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1576.044158][T16141] rtc rtc0: __rtc_set_alarm: err=-22 [ 1577.887286][T18067] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1577.898878][T18067] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1578.742908][T11376] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1578.994434][T11376] usb 2-1: device descriptor read/64, error -71 [ 1580.718237][T18079] dummy0: entered promiscuous mode [ 1583.179327][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'. [ 1583.446481][T18116] loop1: detected capacity change from 0 to 1024 [ 1583.481402][T18116] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 1588.374205][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'. [ 1589.137621][T18157] syz.1.3093[18157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1589.138970][T18157] syz.1.3093[18157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1593.672060][T18177] lo speed is unknown, defaulting to 1000 [ 1594.899873][T18189] loop1: detected capacity change from 0 to 1024 [ 1595.051769][T18189] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 1595.904204][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 1596.722981][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 1596.757274][T18209] misc userio: The device must be registered before sending interrupts [ 1596.808995][ T28] audit: type=1326 audit(1750458252.747:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1596.906150][ T28] audit: type=1326 audit(1750458252.747:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1597.080512][ T28] audit: type=1326 audit(1750458252.767:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1597.270529][ T28] audit: type=1326 audit(1750458252.767:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1597.439968][ T28] audit: type=1326 audit(1750458252.767:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1597.505378][ T28] audit: type=1326 audit(1750458252.767:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1598.434131][ T28] audit: type=1326 audit(1750458252.767:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1598.564169][ T28] audit: type=1326 audit(1750458252.767:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1598.629184][ T28] audit: type=1326 audit(1750458252.767:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1598.678725][ T28] audit: type=1326 audit(1750458252.767:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18201 comm="syz.4.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1604.586870][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'. [ 1606.852086][T18284] bond0: entered promiscuous mode [ 1607.105636][T18284] bond_slave_0: entered promiscuous mode [ 1607.112511][T18284] bond_slave_1: entered promiscuous mode [ 1607.968036][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'. [ 1608.210986][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 1609.464154][T15203] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1609.734401][T15203] usb 2-1: Using ep0 maxpacket: 8 [ 1609.751651][T15203] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1609.761232][T15203] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1609.770516][T15203] usb 2-1: Product: syz [ 1609.775730][T15203] usb 2-1: Manufacturer: syz [ 1609.781370][T15203] usb 2-1: SerialNumber: syz [ 1609.791649][T15203] usb 2-1: config 0 descriptor?? [ 1609.808367][T15203] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1610.698808][T15203] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 1610.922921][T15207] usb 2-1: USB disconnect, device number 45 [ 1611.524459][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 1613.522149][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1614.172982][T18372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3141'. [ 1616.593853][T18398] loop1: detected capacity change from 0 to 512 [ 1616.601553][T18398] EXT4-fs: Ignoring removed orlov option [ 1616.607286][T18398] EXT4-fs: quotafile must be on filesystem root [ 1617.282913][T18398] loop1: detected capacity change from 0 to 256 [ 1617.290066][T18398] exfat: Deprecated parameter 'utf8' [ 1617.295644][T18398] exfat: Bad value for 'errors' [ 1617.771808][T18404] lo speed is unknown, defaulting to 1000 [ 1618.522978][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 1620.765694][T18421] bridge0: entered promiscuous mode [ 1622.847669][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 1623.279097][T11376] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1623.594228][T11376] usb 5-1: Using ep0 maxpacket: 8 [ 1623.633132][T11376] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1623.676628][T11376] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1623.707131][T11376] usb 5-1: Product: syz [ 1623.718683][T11376] usb 5-1: Manufacturer: syz [ 1623.723571][T11376] usb 5-1: SerialNumber: syz [ 1623.737158][T11376] usb 5-1: config 0 descriptor?? [ 1623.750438][T11376] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1623.973342][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3156'. [ 1624.551531][T11376] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 1624.760702][T15203] usb 5-1: USB disconnect, device number 2 [ 1627.120167][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3163'. [ 1627.735177][T18493] siw: device registration error -23 [ 1628.224775][T18497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1628.662159][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 1629.469046][T18509] loop1: detected capacity change from 0 to 256 [ 1629.874688][T18509] FAT-fs (loop1): Directory bread(block 64) failed [ 1629.881891][T18509] FAT-fs (loop1): Directory bread(block 65) failed [ 1629.892354][T18509] FAT-fs (loop1): Directory bread(block 66) failed [ 1629.899501][T18509] FAT-fs (loop1): Directory bread(block 67) failed [ 1629.907711][T18509] FAT-fs (loop1): Directory bread(block 68) failed [ 1629.914658][T18509] FAT-fs (loop1): Directory bread(block 69) failed [ 1629.922324][T18509] FAT-fs (loop1): Directory bread(block 70) failed [ 1630.404438][T18509] FAT-fs (loop1): Directory bread(block 71) failed [ 1630.421288][T18509] FAT-fs (loop1): Directory bread(block 72) failed [ 1630.438627][T18509] FAT-fs (loop1): Directory bread(block 73) failed [ 1634.610161][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3180'. [ 1635.914167][T16141] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1636.142085][T18562] futex_wake_op: syz.4.3185 tries to shift op by -1; fix this program [ 1636.173154][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 1636.214208][T16141] usb 2-1: Using ep0 maxpacket: 8 [ 1636.232293][T16141] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1636.254263][T16141] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1636.272023][T16141] usb 2-1: Product: syz [ 1636.282315][T16141] usb 2-1: Manufacturer: syz [ 1636.291856][T16141] usb 2-1: SerialNumber: syz [ 1636.316142][T16141] usb 2-1: config 0 descriptor?? [ 1636.365735][T16141] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1636.507893][T18566] lo speed is unknown, defaulting to 1000 [ 1637.685762][T18567] sd 0:0:1:0: device reset [ 1637.961046][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1637.961066][ T28] audit: type=1326 audit(1750458293.227:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1638.520976][T18568] loop4: detected capacity change from 0 to 2048 [ 1639.003882][ T28] audit: type=1326 audit(1750458293.227:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1639.026936][T16141] gspca_zc3xx: reg_w_i err -110 [ 1639.031909][T16141] gspca_zc3xx: probe of 2-1:0.0 failed with error -110 [ 1639.067859][T18568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1639.078648][ T28] audit: type=1326 audit(1750458293.427:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe172b8d290 code=0x7ffc0000 [ 1639.080321][T18568] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1639.132342][ T28] audit: type=1326 audit(1750458293.427:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1639.132387][ T28] audit: type=1326 audit(1750458293.427:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1639.132416][ T28] audit: type=1326 audit(1750458293.627:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1639.132448][ T28] audit: type=1326 audit(1750458293.847:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1639.132479][ T28] audit: type=1326 audit(1750458293.847:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1639.132514][ T28] audit: type=1326 audit(1750458294.207:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1639.132544][ T28] audit: type=1326 audit(1750458294.457:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe172b8e929 code=0x7ffc0000 [ 1639.213224][T16141] usb 2-1: USB disconnect, device number 46 [ 1639.329441][T18581] netlink: 'syz.2.3187': attribute type 10 has an invalid length. [ 1639.525861][T17656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1640.034358][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3191'. [ 1641.210475][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3194'. [ 1642.064162][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 1642.979281][T18619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3199'. [ 1643.117706][T18622] loop4: detected capacity change from 0 to 1764 [ 1644.263497][T18629] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1646.306598][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 1646.324090][T18647] netlink: 'syz.1.3205': attribute type 1 has an invalid length. [ 1647.240561][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.769047][T18669] IPVS: Unknown mcast interface: /dsp [ 1648.161715][T18680] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3211'. [ 1650.348908][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1650.407079][T18711] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1650.531226][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 1652.504619][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1655.172380][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3232'. [ 1656.564288][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 1657.200827][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1658.354142][T15202] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1658.574306][T15202] usb 5-1: Using ep0 maxpacket: 8 [ 1658.630602][T15202] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1658.650465][T15202] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1658.671298][T15202] usb 5-1: Product: syz [ 1658.676298][T15202] usb 5-1: Manufacturer: syz [ 1658.681263][T15202] usb 5-1: SerialNumber: syz [ 1658.697309][T15202] usb 5-1: config 0 descriptor?? [ 1658.716772][T15202] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1659.330463][T15202] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 1659.546720][T15203] usb 5-1: USB disconnect, device number 3 [ 1659.907284][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1660.715783][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3248'. [ 1661.577629][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3250'. [ 1663.170747][T18858] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3254'. [ 1664.479044][T18877] siw: device registration error -23 [ 1664.932421][T18882] bridge0: left promiscuous mode [ 1664.982634][T18882] bridge0: entered allmulticast mode [ 1665.642759][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'. [ 1667.254122][T15205] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1667.464714][T15205] usb 2-1: Using ep0 maxpacket: 8 [ 1667.483492][T15205] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1667.510469][T15205] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1667.523304][T15205] usb 2-1: Product: syz [ 1667.540115][T15205] usb 2-1: Manufacturer: syz [ 1667.553371][T15205] usb 2-1: SerialNumber: syz [ 1667.569248][T15205] usb 2-1: config 0 descriptor?? [ 1667.593107][T15205] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1668.202265][T15205] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 1668.449336][T15205] usb 2-1: USB disconnect, device number 47 [ 1672.650804][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'. [ 1673.744341][T16141] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1674.004834][T16141] usb 5-1: Using ep0 maxpacket: 8 [ 1674.185297][T16141] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1674.247031][T16141] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1674.324197][T16141] usb 5-1: Product: syz [ 1674.364175][T16141] usb 5-1: Manufacturer: syz [ 1674.389812][T16141] usb 5-1: SerialNumber: syz [ 1674.445721][T16141] usb 5-1: config 0 descriptor?? [ 1674.463421][T16141] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1675.113632][T16141] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 1675.339500][T19040] loop1: detected capacity change from 0 to 4096 [ 1675.351823][T10100] usb 5-1: USB disconnect, device number 4 [ 1675.386857][T19040] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1675.765926][T19050] loop1: detected capacity change from 0 to 8 [ 1675.808677][T19050] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1675.843615][T19050] SQUASHFS error: Failed to read block 0x9b: -5 [ 1675.859739][T19050] SQUASHFS error: Unable to read metadata cache entry [99] [ 1675.894146][T19050] SQUASHFS error: Unable to read inode 0x127 [ 1676.444909][T19064] siw: device registration error -23 [ 1676.934356][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1677.677898][T19076] loop1: detected capacity change from 0 to 1024 [ 1677.709317][T19076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1677.819769][T19076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1677.883027][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.314326][T15205] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1678.443286][T19092] netlink: 'syz.3.3317': attribute type 1 has an invalid length. [ 1678.504220][T15205] usb 2-1: Using ep0 maxpacket: 8 [ 1678.518222][T15205] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1678.540383][T15205] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1678.574204][T15205] usb 2-1: Product: syz [ 1678.578495][T15205] usb 2-1: Manufacturer: syz [ 1678.583249][T15205] usb 2-1: SerialNumber: syz [ 1678.596320][T15205] usb 2-1: config 0 descriptor?? [ 1678.645335][T15205] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1678.801288][T19092] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1678.883619][T19091] loop4: detected capacity change from 0 to 32768 [ 1678.949994][T19091] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3319 (19091) [ 1679.034488][T19091] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1679.172202][T19091] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1679.242390][T19091] BTRFS info (device loop4): force zlib compression, level 3 [ 1679.257323][T15205] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 1679.260790][T19091] BTRFS info (device loop4): force clearing of disk cache [ 1679.308608][T19091] BTRFS info (device loop4): setting nodatasum [ 1679.361549][T19091] BTRFS info (device loop4): use zlib compression, level 3 [ 1679.410132][T19091] BTRFS info (device loop4): allowing degraded mounts [ 1679.458056][T19091] BTRFS info (device loop4): enabling disk space caching [ 1679.475328][T15205] usb 2-1: USB disconnect, device number 48 [ 1679.524759][T19091] BTRFS info (device loop4): disk space caching is enabled [ 1679.601109][T19091] BTRFS info (device loop4): enabling ssd optimizations [ 1679.609690][T19091] BTRFS info (device loop4): auto enabling async discard [ 1679.623200][T19091] BTRFS info (device loop4): rebuilding free space tree [ 1679.758268][T19091] BTRFS info (device loop4): disabling free space tree [ 1679.825105][T19091] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1679.851669][T19091] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1679.962796][T17656] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1680.288555][T19119] loop1: detected capacity change from 0 to 128 [ 1680.475213][T19119] qnx6: unable to set blocksize [ 1682.829420][T19125] loop4: detected capacity change from 0 to 32768 [ 1682.913753][T19125] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1682.991681][T17656] (syz-executor,17656,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1683.026418][T17656] ocfs2: Unmounting device (7,4) on (node local) [ 1683.126511][T19145] siw: device registration error -23 [ 1685.098139][T15202] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1685.434229][T15202] usb 2-1: Using ep0 maxpacket: 8 [ 1685.443752][T19171] loop4: detected capacity change from 0 to 1024 [ 1685.454999][T15202] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1685.557274][T15202] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1685.825610][T15202] usb 2-1: Product: syz [ 1685.843920][T15202] usb 2-1: Manufacturer: syz [ 1685.852820][T15202] usb 2-1: SerialNumber: syz [ 1685.882918][T15202] usb 2-1: config 0 descriptor?? [ 1685.917547][T15202] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1686.314363][T19171] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1686.720049][T15202] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 1686.965253][T10100] usb 2-1: USB disconnect, device number 49 [ 1687.193166][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 1687.596316][T19194] siw: device registration error -23 [ 1689.951380][T19211] loop1: detected capacity change from 0 to 2048 [ 1689.994421][T19211] EXT4-fs error (device loop1): __ext4_iget:5047: inode #2: block 127754: comm syz.1.3348: invalid block [ 1690.022207][T19211] EXT4-fs (loop1): get root inode failed [ 1690.059946][T19211] EXT4-fs (loop1): mount failed [ 1691.971515][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1696.549080][T19291] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 1696.642244][T19291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1696.829082][T11376] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1696.894088][T16141] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1697.144083][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1697.925193][T11376] usb 2-1: Using ep0 maxpacket: 8 [ 1697.935531][T16141] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1697.967674][T11376] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1697.994126][T16141] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1698.011734][T11376] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1698.041412][T16141] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1698.057699][T11376] usb 2-1: Product: syz [ 1698.073241][T11376] usb 2-1: Manufacturer: syz [ 1698.083249][T16141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.098311][T11376] usb 2-1: SerialNumber: syz [ 1698.112485][T16141] usb 5-1: Product: syz [ 1698.125284][T11376] usb 2-1: config 0 descriptor?? [ 1698.138162][T16141] usb 5-1: Manufacturer: syz [ 1698.159712][T16141] usb 5-1: SerialNumber: syz [ 1698.165790][T11376] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1698.190128][T16141] usb 5-1: config 0 descriptor?? [ 1698.228218][T16141] usb 5-1: selecting invalid altsetting 0 [ 1698.479563][T19314] udevd[19314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 1698.770839][T11376] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 1698.998418][T11376] usb 2-1: USB disconnect, device number 50 [ 1699.726567][T11376] usb 5-1: USB disconnect, device number 5 [ 1701.664237][T15203] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1701.854070][T15203] usb 5-1: Using ep0 maxpacket: 8 [ 1701.867057][T15203] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1701.886146][T15203] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1701.909233][T15203] usb 5-1: Product: syz [ 1701.926932][T15203] usb 5-1: Manufacturer: syz [ 1701.943416][T15203] usb 5-1: SerialNumber: syz [ 1701.956268][T15203] usb 5-1: config 0 descriptor?? [ 1701.967322][T15203] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1702.719861][T15203] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 1702.934959][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'. [ 1702.959181][T15203] usb 5-1: USB disconnect, device number 6 [ 1703.134166][T19367] loop1: detected capacity change from 0 to 2048 [ 1703.551329][T19369] loop4: detected capacity change from 0 to 128 [ 1703.578860][T19369] VFS: unable to find oldfs superblock on device loop4 [ 1706.340247][T19406] loop4: detected capacity change from 0 to 2048 [ 1709.235350][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3409'. [ 1709.397167][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 1709.985723][T19454] loop1: detected capacity change from 0 to 512 [ 1709.997441][T19454] EXT4-fs: Ignoring removed orlov option [ 1710.003472][T19454] EXT4-fs: quotafile must be on filesystem root [ 1710.726017][T19453] loop1: detected capacity change from 0 to 256 [ 1710.733123][T19453] exfat: Deprecated parameter 'utf8' [ 1710.739157][T19453] exfat: Bad value for 'errors' [ 1711.347904][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1715.794336][T19501] loop1: detected capacity change from 0 to 512 [ 1716.001908][T19501] EXT4-fs: Ignoring removed orlov option [ 1716.007899][T19501] EXT4-fs: quotafile must be on filesystem root [ 1716.269338][T19498] loop1: detected capacity change from 0 to 256 [ 1716.276558][T19498] exfat: Deprecated parameter 'utf8' [ 1716.281974][T19498] exfat: Bad value for 'errors' [ 1717.079059][T19513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1717.105579][T19513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1717.129083][T19513] netlink: 'syz.2.3431': attribute type 3 has an invalid length. [ 1718.884784][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1718.884804][ T28] audit: type=1326 audit(1750458374.817:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1718.972587][ T28] audit: type=1326 audit(1750458374.847:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1719.051067][ T28] audit: type=1326 audit(1750458374.877:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1719.123853][ T28] audit: type=1326 audit(1750458374.877:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1719.199639][ T28] audit: type=1326 audit(1750458374.877:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1719.333289][ T28] audit: type=1326 audit(1750458374.887:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1719.462314][ T28] audit: type=1326 audit(1750458374.887:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1719.543339][ T28] audit: type=1326 audit(1750458374.887:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1719.594699][T17658] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1719.605482][T17658] Bluetooth: hci4: Injecting HCI hardware error event [ 1719.637693][ T50] Bluetooth: hci4: hardware error 0x00 [ 1719.681101][ T28] audit: type=1326 audit(1750458374.887:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1719.871895][ T28] audit: type=1326 audit(1750458374.887:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac378e929 code=0x7ffc0000 [ 1720.032158][T19548] lo speed is unknown, defaulting to 1000 [ 1721.365908][T19560] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.384139][T19560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.415085][T19560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.448175][T19560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.504092][T19560] geneve2: entered promiscuous mode [ 1721.523742][T19560] geneve2: entered allmulticast mode [ 1721.538393][T19560] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.548282][T19560] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.558206][T19560] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.567606][T19560] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.705434][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1723.290446][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1723.919845][T19579] loop4: detected capacity change from 0 to 32768 [ 1723.979247][T19579] (syz.4.3446,19579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1724.014543][T19579] (syz.4.3446,19579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1724.106608][T19579] JBD2: Ignoring recovery information on journal [ 1724.219312][T19579] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1725.461762][T17656] ocfs2: Unmounting device (7,4) on (node local) [ 1726.123644][T19607] loop1: detected capacity change from 0 to 512 [ 1726.339250][T19607] EXT4-fs: Ignoring removed orlov option [ 1726.345296][T19607] EXT4-fs: quotafile must be on filesystem root [ 1726.619398][T19604] loop1: detected capacity change from 0 to 256 [ 1726.626729][T19604] exfat: Deprecated parameter 'utf8' [ 1726.632189][T19604] exfat: Bad value for 'errors' [ 1727.762948][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3456'. [ 1730.015042][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1730.015062][ T28] audit: type=1326 audit(1750458385.887:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19660 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248dd8e929 code=0x7ffc0000 [ 1730.067278][ T28] audit: type=1326 audit(1750458385.887:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19660 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248dd8e929 code=0x7ffc0000 [ 1730.091969][ T28] audit: type=1326 audit(1750458386.007:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19660 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f248dd8e929 code=0x7ffc0000 [ 1730.114716][ T28] audit: type=1326 audit(1750458386.007:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19660 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248dd8e929 code=0x7ffc0000 [ 1730.174116][ T28] audit: type=1326 audit(1750458386.007:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19660 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248dd8e929 code=0x7ffc0000 [ 1730.451095][T19669] netlink: 'syz.3.3473': attribute type 1 has an invalid length. [ 1730.527961][T19669] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1730.774216][T15202] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1730.781846][T15205] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1730.964146][T15205] usb 5-1: Using ep0 maxpacket: 8 [ 1730.971709][T15202] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 1730.984357][T15202] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 32 [ 1730.995445][T15202] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1731.002965][T15205] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1731.014128][T15205] usb 5-1: config 0 has no interface number 0 [ 1731.024452][T15202] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1731.035977][T15202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.045573][T15205] usb 5-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f7.bd [ 1731.055656][T15205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.063772][T15202] usb 2-1: Product: syz [ 1731.068436][T15205] usb 5-1: Product: syz [ 1731.072665][T15202] usb 2-1: Manufacturer: syz [ 1731.079089][T15205] usb 5-1: Manufacturer: syz [ 1731.083842][T15202] usb 2-1: SerialNumber: syz [ 1731.094820][T15205] usb 5-1: SerialNumber: syz [ 1731.118424][T19664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1731.126423][T15205] usb 5-1: config 0 descriptor?? [ 1731.137645][T19664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1731.369200][T15205] usb 5-1: USB disconnect, device number 7 [ 1731.398135][T15202] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 1731.453837][T15202] usb 2-1: USB disconnect, device number 51 [ 1732.624076][T15202] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1732.824220][T15207] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1733.666027][T15202] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1733.676476][T15202] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1733.690524][T15202] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1733.699743][T15202] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1733.708317][T15202] usb 2-1: Product: syz [ 1733.712639][T15202] usb 2-1: Manufacturer: syz [ 1733.717532][T15202] usb 2-1: SerialNumber: syz [ 1733.726843][T15202] usb 2-1: config 0 descriptor?? [ 1733.741976][T15202] usb 2-1: selecting invalid altsetting 0 [ 1733.748340][T15207] usb 5-1: Using ep0 maxpacket: 8 [ 1733.777352][T15207] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1733.803290][T15207] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1733.821962][T15207] usb 5-1: Product: syz [ 1733.830873][T15207] usb 5-1: Manufacturer: syz [ 1733.853016][T15207] usb 5-1: SerialNumber: syz [ 1733.879794][T19313] udevd[19313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 1733.885272][T15207] usb 5-1: config 0 descriptor?? [ 1733.911488][T15207] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1733.959272][T15202] usb 2-1: USB disconnect, device number 52 [ 1734.519992][T15207] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 1734.748475][T16141] usb 5-1: USB disconnect, device number 8 [ 1735.065612][ T28] audit: type=1326 audit(1750458391.007:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19744 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1735.121020][ T28] audit: type=1326 audit(1750458391.007:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19744 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1735.201814][ T28] audit: type=1326 audit(1750458391.027:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19744 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1735.244083][ T28] audit: type=1326 audit(1750458391.027:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19744 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1735.298855][ T28] audit: type=1326 audit(1750458391.027:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19744 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1735.592785][T19757] netlink: 'syz.3.3502': attribute type 1 has an invalid length. [ 1736.040878][T19757] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1736.114828][T19774] loop4: detected capacity change from 0 to 2048 [ 1736.130969][T19774] EXT4-fs: Ignoring removed mblk_io_submit option [ 1736.154132][T19774] EXT4-fs: Ignoring removed i_version option [ 1736.189522][T19774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1736.254289][T15207] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1736.285894][T17656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1736.444133][T15207] usb 2-1: Using ep0 maxpacket: 8 [ 1736.457171][T15207] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1736.468876][T15207] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1736.477255][T15207] usb 2-1: Product: syz [ 1736.481616][T15207] usb 2-1: Manufacturer: syz [ 1736.486356][T15207] usb 2-1: SerialNumber: syz [ 1736.494661][T15207] usb 2-1: config 0 descriptor?? [ 1736.508327][T19779] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1736.511403][T15207] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1736.898326][T19782] loop4: detected capacity change from 0 to 8 [ 1736.927491][T19782] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1736.977052][T19315] udevd[19315]: incorrect cramfs checksum on /dev/loop4 [ 1737.139528][T15207] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 1737.410301][T15207] usb 2-1: USB disconnect, device number 53 [ 1737.601246][T19805] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1737.990219][T19817] program syz.1.3528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1738.327372][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 1738.779104][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3532'. [ 1739.360247][T19851] netlink: 'syz.1.3538': attribute type 5 has an invalid length. [ 1739.444851][T15207] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1739.659477][T15207] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.673227][T15207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1739.687165][T15207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1739.697724][T15207] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1739.714740][T15207] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1739.726104][T15207] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1739.734464][T15207] usb 5-1: Manufacturer: syz [ 1739.740844][T15207] usb 5-1: config 0 descriptor?? [ 1740.174242][T15207] rc_core: IR keymap rc-hauppauge not found [ 1740.204194][T15207] Registered IR keymap rc-empty [ 1740.235666][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.346502][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.386711][T15207] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1740.405052][T15207] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 1740.441736][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.516645][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.564979][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.594410][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.636868][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.695289][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.745758][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.853054][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.910020][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1741.034090][T15207] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1741.177638][T15207] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1741.190986][T15207] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1741.207464][T15207] usb 5-1: USB disconnect, device number 9 [ 1741.946451][T15207] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1742.144217][T15207] usb 5-1: Using ep0 maxpacket: 8 [ 1742.157057][T15207] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1742.178659][T15207] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1742.191125][T15207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.203642][T15207] usb 5-1: Product: syz [ 1742.208627][T15207] usb 5-1: Manufacturer: syz [ 1742.213468][T15207] usb 5-1: SerialNumber: syz [ 1742.222721][T15207] usb 5-1: config 0 descriptor?? [ 1742.241522][T15207] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1742.445898][T15207] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1742.458424][T15207] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 1743.277388][T11376] usb 5-1: USB disconnect, device number 10 [ 1745.719380][T19940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1745.771850][T19940] loop4: detected capacity change from 0 to 256 [ 1745.827115][T19940] FAT-fs (loop4): bogus number of FAT sectors [ 1745.833339][T19940] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1746.327050][T19947] loop4: detected capacity change from 0 to 256 [ 1746.430986][T19947] FAT-fs (loop4): Directory bread(block 64) failed [ 1746.457743][T19947] FAT-fs (loop4): Directory bread(block 65) failed [ 1746.467021][T19947] FAT-fs (loop4): Directory bread(block 66) failed [ 1746.474268][T19947] FAT-fs (loop4): Directory bread(block 67) failed [ 1746.480997][T19947] FAT-fs (loop4): Directory bread(block 68) failed [ 1746.488050][T19947] FAT-fs (loop4): Directory bread(block 69) failed [ 1746.494957][T19947] FAT-fs (loop4): Directory bread(block 70) failed [ 1746.501572][T19947] FAT-fs (loop4): Directory bread(block 71) failed [ 1746.513608][T19947] FAT-fs (loop4): Directory bread(block 72) failed [ 1746.521503][T19947] FAT-fs (loop4): Directory bread(block 73) failed [ 1747.763513][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1753.451357][T20002] capability: warning: `syz.2.3581' uses deprecated v2 capabilities in a way that may be insecure [ 1753.712215][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3578'. [ 1756.385490][T20032] netlink: 'syz.3.3588': attribute type 10 has an invalid length. [ 1767.115972][T20113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3609'. [ 1767.844620][T20107] loop4: detected capacity change from 0 to 4096 [ 1767.999196][T20107] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1768.427454][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1768.501330][T17656] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 1772.625204][T20132] loop1: detected capacity change from 0 to 32768 [ 1772.694768][T20132] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1772.878887][T20140] loop4: detected capacity change from 0 to 32768 [ 1772.891795][T20140] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3619 (20140) [ 1772.921828][T20140] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1772.933872][T20132] XFS (loop1): Starting recovery (logdev: internal) [ 1772.936339][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1772.949989][T20140] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1772.959598][T20140] BTRFS info (device loop4): setting nodatasum [ 1772.974081][T20140] BTRFS info (device loop4): force zlib compression, level 3 [ 1772.998790][T20140] BTRFS info (device loop4): metadata ratio 1 [ 1773.003250][T20132] XFS (loop1): Ending recovery (logdev: internal) [ 1773.024028][T20140] BTRFS info (device loop4): enabling ssd optimizations [ 1773.031035][T20140] BTRFS info (device loop4): allowing degraded mounts [ 1773.074057][T20140] BTRFS info (device loop4): using free space tree [ 1773.329654][ T5769] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1773.458684][T17656] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1777.170370][T20212] loop4: detected capacity change from 0 to 32768 [ 1777.370571][T20212] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3635 (20212) [ 1777.677587][T20212] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1777.724622][T20212] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1777.757340][T20212] BTRFS info (device loop4): max_inline at 0 [ 1777.763401][T20212] BTRFS info (device loop4): enabling disk space caching [ 1777.793165][T20212] BTRFS info (device loop4): setting nodatasum [ 1777.800341][T20212] BTRFS info (device loop4): turning off barriers [ 1777.807054][T20212] BTRFS info (device loop4): turning on flush-on-commit [ 1777.814098][T20212] BTRFS info (device loop4): doing ref verification [ 1777.820759][T20212] BTRFS info (device loop4): force clearing of disk cache [ 1777.828057][T20212] BTRFS warning (device loop4): excessive commit interval 2147483647 [ 1777.836820][T20212] BTRFS info (device loop4): enabling ssd optimizations [ 1777.858743][T20212] BTRFS info (device loop4): max_inline at 4096 [ 1777.871486][T20212] BTRFS info (device loop4): disk space caching is enabled [ 1777.997505][T20212] BTRFS info (device loop4): auto enabling async discard [ 1778.026317][T20212] BTRFS info (device loop4): rebuilding free space tree [ 1778.086852][T20212] BTRFS info (device loop4): disabling free space tree [ 1778.107541][T20212] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1778.139331][T20212] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1778.209476][T20247] loop1: detected capacity change from 0 to 1024 [ 1778.461441][T17656] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1778.498496][ T28] audit: type=1326 audit(1750458434.437:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.1.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1778.542576][ T28] audit: type=1326 audit(1750458434.437:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.1.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1778.596758][ T28] audit: type=1326 audit(1750458434.467:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.1.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1778.646850][ T28] audit: type=1326 audit(1750458434.467:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.1.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1778.691589][ T28] audit: type=1326 audit(1750458434.467:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.1.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1778.792440][ T28] audit: type=1326 audit(1750458434.467:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.1.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1778.884016][ T28] audit: type=1326 audit(1750458434.467:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.1.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1778.944146][ T28] audit: type=1326 audit(1750458434.467:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.1.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e98e929 code=0x7ffc0000 [ 1779.481643][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 1780.678739][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3652'. [ 1780.965944][T20295] siw: device registration error -23 [ 1781.112215][T20299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1781.460418][T20304] loop4: detected capacity change from 0 to 1024 [ 1781.514292][T20304] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1783.708587][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3659'. [ 1787.085220][T17658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1787.098913][T17658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1787.199815][T17658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1787.285919][T17658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1787.295885][T17658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1787.303328][T17658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1787.346651][T20346] loop4: detected capacity change from 0 to 1024 [ 1787.371189][T20346] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1788.031102][T20339] lo speed is unknown, defaulting to 1000 [ 1788.380284][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 1788.868215][T20355] netlink: 'syz.2.3671': attribute type 4 has an invalid length. [ 1788.921012][T16141] lo speed is unknown, defaulting to 1000 [ 1789.396601][ T50] Bluetooth: hci1: command tx timeout [ 1791.905151][ T50] Bluetooth: hci1: command tx timeout [ 1792.161645][T20339] chnl_net:caif_netlink_parms(): no params data found [ 1793.529626][T20415] loop1: detected capacity change from 0 to 1024 [ 1793.570263][T20415] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 1793.696423][T20339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.722511][T20339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.748383][T20339] bridge_slave_0: entered allmulticast mode [ 1793.770870][T20339] bridge_slave_0: entered promiscuous mode [ 1793.811837][T20339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.841186][T20339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.849257][T20339] bridge_slave_1: entered allmulticast mode [ 1793.857546][T20339] bridge_slave_1: entered promiscuous mode [ 1793.908662][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 1793.969121][ T50] Bluetooth: hci1: command tx timeout [ 1793.986074][T20339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1794.065478][T20339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.166037][T20339] team0: Port device team_slave_0 added [ 1794.309750][T20339] team0: Port device team_slave_1 added [ 1795.142099][T20339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1795.164704][T20339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1795.200140][T20339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1795.215445][T20429] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1795.220659][T20339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.104347][ T50] Bluetooth: hci1: command tx timeout [ 1796.126068][T20339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.164731][T20339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.406807][T20339] hsr_slave_0: entered promiscuous mode [ 1796.439672][T20339] hsr_slave_1: entered promiscuous mode [ 1796.462038][T20339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1796.484070][T20339] Cannot create hsr debugfs directory [ 1796.539570][T20447] loop1: detected capacity change from 0 to 512 [ 1796.631571][T20447] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.3687: corrupted in-inode xattr: invalid ea_ino [ 1796.657601][T20447] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3687: couldn't read orphan inode 15 (err -117) [ 1796.717339][T20447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1796.951313][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1798.337374][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1798.517809][T20339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1798.686364][T20339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.748971][T13785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.756188][T13785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.965174][T20130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.972277][T20130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.592266][T20339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.212714][T20339] veth0_vlan: entered promiscuous mode [ 1800.248215][T20485] loop4: detected capacity change from 0 to 256 [ 1800.264300][T20339] veth1_vlan: entered promiscuous mode [ 1800.384696][T20339] veth0_macvtap: entered promiscuous mode [ 1800.479703][T20339] veth1_macvtap: entered promiscuous mode [ 1800.559604][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.579277][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.611554][T20493] loop4: detected capacity change from 0 to 512 [ 1800.620082][T20339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1800.632729][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.655920][T20493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1800.666024][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.682700][T20339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1800.734162][T20493] EXT4-fs (loop4): 1 truncate cleaned up [ 1800.780203][T20493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1800.982957][T20130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.009784][T20130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.179003][T20489] loop1: detected capacity change from 0 to 32768 [ 1801.184486][T20130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.209717][T20130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.231764][T17656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1801.357220][T20489] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1801.469273][T20510] loop4: detected capacity change from 0 to 1024 [ 1801.555117][T20510] hfsplus: bad catalog entry type [ 1801.638928][T13785] hfsplus: b-tree write err: -5, ino 4 [ 1801.714926][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 1802.258225][T20508] loop5: detected capacity change from 0 to 32768 [ 1802.269697][T20508] XFS: ikeep mount option is deprecated. [ 1802.353489][T20508] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1803.210565][T20508] XFS (loop5): Ending clean mount [ 1803.222858][T20508] XFS (loop5): Quotacheck needed: Please wait. [ 1803.367293][T20508] XFS (loop5): Quotacheck: Done. [ 1803.590072][T20339] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1805.449808][T20551] loop4: detected capacity change from 0 to 8192 [ 1807.103801][T20578] loop5: detected capacity change from 0 to 512 [ 1807.111421][T20578] EXT4-fs: Ignoring removed orlov option [ 1807.117425][T20578] EXT4-fs: quotafile must be on filesystem root [ 1807.285565][T20577] loop5: detected capacity change from 0 to 256 [ 1807.295218][T20577] exfat: Deprecated parameter 'utf8' [ 1807.301022][T20577] exfat: Bad value for 'errors' [ 1808.545790][T20587] loop4: detected capacity change from 0 to 512 [ 1808.812796][T20587] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.3721: corrupted in-inode xattr: invalid ea_ino [ 1808.894572][T20590] loop5: detected capacity change from 0 to 256 [ 1808.965392][T20587] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3721: couldn't read orphan inode 15 (err -117) [ 1809.004712][T20590] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1809.035560][T20587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1809.216790][T17656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1812.346027][T20620] loop5: detected capacity change from 0 to 512 [ 1812.638689][T20620] EXT4-fs: Ignoring removed orlov option [ 1812.644677][T20620] EXT4-fs: quotafile must be on filesystem root [ 1812.737472][T20623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3730'. [ 1812.892343][T20619] loop5: detected capacity change from 0 to 256 [ 1812.904060][T20619] exfat: Deprecated parameter 'utf8' [ 1812.910032][T20619] exfat: Bad value for 'errors' [ 1814.254440][T20629] loop5: detected capacity change from 0 to 512 [ 1814.284461][T20629] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.3732: corrupted in-inode xattr: invalid ea_ino [ 1814.367833][T20629] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3732: couldn't read orphan inode 15 (err -117) [ 1814.447822][T20629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1814.646095][T20339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.022654][T20651] loop4: detected capacity change from 0 to 4096 [ 1816.152960][T20655] loop5: detected capacity change from 0 to 64 [ 1816.229231][T20655] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 1816.693112][T20659] loop5: detected capacity change from 0 to 1764 [ 1816.737982][T20659] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1816.966246][T20665] loop4: detected capacity change from 0 to 4096 [ 1817.905768][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3749'. [ 1818.904802][T20687] loop1: detected capacity change from 0 to 512 [ 1818.960982][T20687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1819.089803][T20687] EXT4-fs (loop1): 1 truncate cleaned up [ 1819.109248][T20687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1819.303679][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1820.395901][T20699] loop1: detected capacity change from 0 to 4096 [ 1820.600555][T20708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.608002][T20708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.619742][T20708] bridge0: entered allmulticast mode [ 1820.688421][T20708] bridge_slave_1: left allmulticast mode [ 1820.716760][T20708] bridge_slave_1: left promiscuous mode [ 1820.743091][T20708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.795107][T20708] bridge_slave_0: left allmulticast mode [ 1820.820791][T20708] bridge_slave_0: left promiscuous mode [ 1820.842372][T20708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.023360][T20726] loop5: detected capacity change from 0 to 32768 [ 1823.055281][T20726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3764 (20726) [ 1823.101144][T20726] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1823.129592][T20726] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1823.153594][T20726] BTRFS info (device loop5): use no compression [ 1823.173746][T20726] BTRFS info (device loop5): turning on sync discard [ 1823.198838][T20726] BTRFS info (device loop5): force clearing of disk cache [ 1823.223065][T20726] BTRFS info (device loop5): turning on async discard [ 1823.249945][T20726] BTRFS info (device loop5): turning off async discard [ 1823.277322][T20726] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1823.318729][T20726] BTRFS info (device loop5): force zstd compression, level 3 [ 1823.349155][T20726] BTRFS info (device loop5): using free space tree [ 1823.656598][T20726] BTRFS info (device loop5): enabling ssd optimizations [ 1823.693145][T20726] BTRFS info (device loop5): rebuilding free space tree [ 1824.083385][T20339] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1826.375686][T13785] bond6: (slave ip6gretap1): Releasing backup interface [ 1826.394189][T13785] bond6: (slave ip6gretap1): the permanent HWaddr of slave - 0e:8b:97:89:64:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1826.446735][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3768'. [ 1826.610223][T20748] loop1: detected capacity change from 0 to 32768 [ 1826.649113][T20748] (syz.1.3767,20748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1826.669695][T20748] (syz.1.3767,20748,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1826.836949][T20748] JBD2: Ignoring recovery information on journal [ 1826.906022][T20748] JBD2: journal reset failed [ 1826.928966][T20748] (syz.1.3767,20748,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 1826.945447][T20748] (syz.1.3767,20748,1):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4 [ 1827.312655][T13785] bond1: (slave gretap1): Releasing active interface [ 1828.206220][T20788] loop5: detected capacity change from 0 to 4096 [ 1828.934605][T20801] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1830.155630][T20814] loop5: detected capacity change from 0 to 1024 [ 1830.238055][T20814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1830.358413][T20794] loop4: detected capacity change from 0 to 32768 [ 1830.492929][T20794] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1830.521687][T20339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1830.545595][T13785] dummy0: left promiscuous mode [ 1830.586893][T13785] hsr_slave_0: left promiscuous mode [ 1830.608726][T13785] hsr_slave_1: left promiscuous mode [ 1830.657658][T20794] XFS (loop4): Ending clean mount [ 1830.687895][T20811] loop1: detected capacity change from 0 to 32768 [ 1830.696751][T13785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.712616][T13785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.715160][T20811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3783 (20811) [ 1830.767281][T20811] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1830.796425][T20829] loop5: detected capacity change from 0 to 1024 [ 1830.811988][T20811] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1830.824493][T17656] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1830.834248][T20811] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1830.834987][T20829] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 1830.882118][T20811] BTRFS info (device loop1): trying to use backup root at mount time [ 1830.893788][T20811] BTRFS info (device loop1): setting nodatasum [ 1830.931818][T20811] BTRFS info (device loop1): force zlib compression, level 3 [ 1831.071067][T20811] BTRFS info (device loop1): doing ref verification [ 1831.083982][T20811] BTRFS info (device loop1): turning on flush-on-commit [ 1831.090989][T20811] BTRFS info (device loop1): allowing degraded mounts [ 1832.164693][T20811] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1832.275763][T20811] BTRFS info (device loop1): use lzo compression, level 0 [ 1832.282974][T20811] BTRFS info (device loop1): enabling ssd optimizations [ 1832.369259][T20811] BTRFS info (device loop1): using spread ssd allocation scheme [ 1832.395360][T20811] BTRFS info (device loop1): using free space tree [ 1833.084383][T20811] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1833.088327][T20811] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1833.130798][T20811] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1833.187717][T20811] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1833.247083][T20811] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1833.446012][T20811] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1833.504521][T20811] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1833.573765][T20811] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1834.356303][T20811] BTRFS error (device loop1): open_ctree failed: -12 [ 1835.137857][T13785] bond10 (unregistering): Released all slaves [ 1835.924588][T13785] bond9 (unregistering): Released all slaves [ 1838.264301][T13785] bond8 (unregistering): Released all slaves [ 1839.216237][T13785] bond7 (unregistering): Released all slaves [ 1839.334090][T13785] bond0 (unregistering): (slave veth5): Releasing backup interface [ 1839.562763][T13785] bond0 (unregistering): Released all slaves [ 1839.613233][T13785] bond6 (unregistering): (slave veth3): Releasing backup interface [ 1839.632927][T13785] bond6 (unregistering): Released all slaves [ 1839.650148][T13785] bond5 (unregistering): Released all slaves [ 1839.884684][T13785] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1839.900332][T13785] bond4 (unregistering): Released all slaves [ 1840.158874][T13785] bond3 (unregistering): Released all slaves [ 1840.173544][T13785] bond2 (unregistering): Released all slaves [ 1840.401377][T13785] bond1 (unregistering): Released all slaves [ 1840.941752][T13785] team0 (unregistering): Port device team_slave_1 removed [ 1841.004229][T13785] team0 (unregistering): Port device team_slave_0 removed [ 1841.067642][T13785] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 1841.078728][T13785] bond_slave_1 (unregistering): left promiscuous mode [ 1841.143422][T13785] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 1841.152738][T13785] bond_slave_0 (unregistering): left promiscuous mode [ 1841.837232][T13785] $Hÿ (unregistering): Released all slaves [ 1841.870797][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1841.986211][T20905] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 1843.196117][T20905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1843.255309][T20914] siw: device registration error -23 [ 1845.154684][T13785] IPVS: stop unused estimator thread 0... [ 1845.191521][T20941] loop1: detected capacity change from 0 to 2048 [ 1845.216526][ T28] audit: type=1800 audit(1750458501.157:762): pid=20941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3805" name="file2" dev="loop1" ino=1347 res=0 errno=0 [ 1847.172228][T20968] loop1: detected capacity change from 0 to 128 [ 1847.217900][T20968] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1847.882966][T20968] ext4 filesystem being mounted at /889/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1848.708327][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1849.507934][T20998] netlink: 'syz.5.3817': attribute type 1 has an invalid length. [ 1849.708404][T20998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1852.290482][T21039] loop1: detected capacity change from 0 to 64 [ 1852.442936][ T5769] hfs: node 4:3 still has 1 user(s)! [ 1853.911983][T21058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 1856.347561][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 1857.053649][T21086] Bluetooth: MGMT ver 1.22 [ 1857.294168][T20682] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1857.595205][T20682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.782593][T20682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.904718][T20682] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1857.958315][T20682] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1857.990774][T20682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.024870][T20682] usb 6-1: config 0 descriptor?? [ 1860.592441][T20682] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1860.832522][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3843'. [ 1861.437195][T20682] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1861.546829][T20681] usb 6-1: USB disconnect, device number 2 [ 1862.255243][T21118] loop4: detected capacity change from 0 to 512 [ 1862.843038][T21118] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1863.681266][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1864.166639][T21118] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3845: iget: bad i_size value: -67835469387268086 [ 1864.279855][T21121] fido_id[21121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1864.339069][T21118] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3845: couldn't read orphan inode 15 (err -117) [ 1864.415581][T21118] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1864.481165][T21118] ext2 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1864.640247][T17656] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 1865.976831][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 1867.217827][T21128] siw: device registration error -23 [ 1870.262613][T21183] loop1: detected capacity change from 0 to 4096 [ 1870.330116][T21183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1871.615178][T21202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1872.336032][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1873.100807][T21214] loop5: detected capacity change from 0 to 256 [ 1873.109202][T21214] exfat: Deprecated parameter 'utf8' [ 1873.201344][T21214] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1877.962418][T21253] loop1: detected capacity change from 0 to 512 [ 1879.774096][T21263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3880'. [ 1880.746439][T21253] EXT4-fs (loop1): 1 orphan inode deleted [ 1880.784288][T13675] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1880.794854][T21253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1880.803614][T13675] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:18: Failed to release dquot type 1 [ 1880.830437][T21253] ext4 filesystem being mounted at /908/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1880.985083][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1886.666608][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3896'. [ 1886.676585][T21330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3898'. [ 1889.084958][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3899'. [ 1891.674250][T21364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3903'. [ 1893.286276][T21353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1895.794300][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1896.460301][T21396] loop1: detected capacity change from 0 to 512 [ 1896.471626][T21396] EXT4-fs: Ignoring removed orlov option [ 1896.477616][T21396] EXT4-fs: quotafile must be on filesystem root [ 1896.834087][T21390] loop1: detected capacity change from 0 to 256 [ 1896.841179][T21390] exfat: Deprecated parameter 'utf8' [ 1896.846677][T21390] exfat: Bad value for 'errors' [ 1896.905018][T20114] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1897.076887][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 1901.097984][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3921'. [ 1902.427151][T21457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3920'. [ 1904.572525][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1905.204004][T20682] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1905.398798][T20682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.412196][T20682] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1905.423389][T20682] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1905.437196][T20682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.490335][T20682] usb 6-1: config 0 descriptor?? [ 1906.037739][T20682] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1906.058794][T20682] dvb-usb: bulk message failed: -22 (3/0) [ 1906.123936][T20682] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1906.147115][T20682] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1906.155704][T20682] usb 6-1: media controller created [ 1906.168029][T20682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1906.225494][T20682] dvb-usb: bulk message failed: -22 (6/0) [ 1906.249380][T20682] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1906.282397][T20682] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 1906.305722][T20682] dvb-usb: schedule remote query interval to 150 msecs. [ 1906.322673][T20682] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1906.945757][T20682] usb 6-1: USB disconnect, device number 3 [ 1907.112231][T20682] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1907.843040][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3939'. [ 1909.100347][T21527] loop4: detected capacity change from 0 to 1024 [ 1910.662092][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1911.864068][T21536] Bluetooth: hci1: command 0x0406 tx timeout [ 1912.050411][T21564] loop4: detected capacity change from 0 to 256 [ 1912.091696][T21564] FAT-fs (loop4): unable to read block(268435456) for building NFS inode [ 1912.365750][T21572] loop4: detected capacity change from 0 to 256 [ 1913.409800][T21584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1914.099699][T21591] loop5: detected capacity change from 0 to 64 [ 1915.143456][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1915.612738][T21609] loop1: detected capacity change from 0 to 64 [ 1916.842047][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3966'. [ 1918.452196][T21637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1921.942228][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1923.874179][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3979'. [ 1928.255151][T21719] loop1: detected capacity change from 0 to 4096 [ 1928.795835][T21719] ntfs3: loop1: It is recommened to use chkdsk. [ 1928.848440][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 1928.863933][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 1928.882053][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 1928.904041][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 1928.911982][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 1928.965082][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 1928.984805][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 1928.992719][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 1929.021859][T21719] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 1929.051880][T21725] loop5: detected capacity change from 0 to 1024 [ 1929.079580][T21725] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 1929.440985][T21731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3990'. [ 1931.169773][T21749] siw: device registration error -23 [ 1932.236271][T21770] netlink: 'syz.1.4002': attribute type 1 has an invalid length. [ 1932.333453][T21776] loop4: detected capacity change from 0 to 1024 [ 1932.943137][T21776] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1935.161253][T21770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1935.776489][T21788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4003'. [ 1936.580001][T21807] loop4: detected capacity change from 0 to 512 [ 1936.587667][T21807] EXT4-fs: Ignoring removed orlov option [ 1936.593372][T21807] EXT4-fs: quotafile must be on filesystem root [ 1936.869944][T21805] loop4: detected capacity change from 0 to 256 [ 1936.876671][T21805] exfat: Deprecated parameter 'utf8' [ 1936.882000][T21805] exfat: Bad value for 'errors' [ 1938.270817][T21818] loop4: detected capacity change from 0 to 2048 [ 1938.313516][T21819] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1938.522786][T21819] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1938.547711][T21819] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 1938.603641][T21819] Remounting filesystem read-only [ 1938.753714][T17656] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1938.778114][T17656] NILFS (loop4): discard dirty page: offset=0, ino=16 [ 1938.798323][T17656] NILFS (loop4): discard dirty block: blocknr=23, size=1024 [ 1938.820973][T17656] NILFS (loop4): discard dirty block: blocknr=24, size=1024 [ 1938.841056][T17656] NILFS (loop4): discard dirty block: blocknr=25, size=1024 [ 1938.858526][T17656] NILFS (loop4): discard dirty block: blocknr=26, size=1024 [ 1938.880060][T17656] NILFS (loop4): discard dirty page: offset=4096, ino=16 [ 1938.901528][T17656] NILFS (loop4): discard dirty block: blocknr=27, size=1024 [ 1938.917711][T21822] loop1: detected capacity change from 0 to 32768 [ 1938.921760][T17656] NILFS (loop4): discard dirty block: blocknr=28, size=1024 [ 1938.950122][T21822] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1938.959128][T21822] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1938.975182][T17656] NILFS (loop4): discard dirty block: blocknr=29, size=1024 [ 1939.005451][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.012819][T17656] NILFS (loop4): discard dirty page: offset=8192, ino=16 [ 1939.020180][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.034932][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.042375][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.049888][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.057541][T17656] NILFS (loop4): discard dirty page: offset=12288, ino=16 [ 1939.065141][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.073372][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.080703][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.088176][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.095858][T17656] NILFS (loop4): discard dirty page: offset=16384, ino=16 [ 1939.103175][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.110508][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.117990][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.125489][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.138873][T17656] NILFS (loop4): discard dirty page: offset=20480, ino=16 [ 1939.154380][T21822] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1939.179838][T20463] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1939.192678][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.200442][T20463] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1939.209863][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.219223][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.548261][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.815517][T17656] NILFS (loop4): discard dirty page: offset=24576, ino=16 [ 1939.822734][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.830105][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.837593][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.859022][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.880706][T17656] NILFS (loop4): discard dirty page: offset=28672, ino=16 [ 1939.906778][T21829] loop5: detected capacity change from 0 to 1024 [ 1939.912607][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.914996][T20463] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 714ms [ 1939.940122][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1939.943213][T20463] gfs2: fsid=syz:syz.0: jid=0: Done [ 1939.953098][T21829] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 1939.971064][T21822] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1939.985907][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.050105][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.146389][T17656] NILFS (loop4): discard dirty page: offset=32768, ino=16 [ 1940.153620][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.163827][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.171581][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.186539][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.203188][T17656] NILFS (loop4): discard dirty page: offset=36864, ino=16 [ 1940.211715][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.224563][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.232059][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.242240][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1940.819536][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4018'. [ 1941.597906][T17656] NILFS (loop4): discard dirty page: offset=40960, ino=16 [ 1941.645360][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.663740][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.681871][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.691173][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.698565][T17656] NILFS (loop4): discard dirty page: offset=45056, ino=16 [ 1941.705893][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.713457][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.720860][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.733922][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.761254][T17656] NILFS (loop4): discard dirty page: offset=49152, ino=16 [ 1941.791347][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.813747][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.826927][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.837774][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.869832][T17656] NILFS (loop4): discard dirty page: offset=53248, ino=16 [ 1941.879269][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.886651][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.903076][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.910818][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1941.918395][T17656] NILFS (loop4): discard dirty page: offset=57344, ino=16 [ 1941.925707][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1942.024954][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1942.032293][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1942.544007][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1942.582649][T17656] NILFS (loop4): discard dirty page: offset=61440, ino=16 [ 1942.610212][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1942.664820][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1942.672195][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1942.704347][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1942.726640][T17656] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1942.733648][T17656] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 1942.773557][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1942.783728][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1942.793493][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1942.804567][T17656] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 1942.811288][T17656] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 1942.819377][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1942.829080][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1943.997886][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1944.008919][T17656] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1944.016003][T17656] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 1944.023638][T17656] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 1944.033908][T17656] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 1944.041203][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1944.050553][T17656] NILFS (loop4): discard dirty page: offset=4096, ino=3 [ 1944.057735][T17656] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1944.067842][T21860] netlink: 'syz.5.4023': attribute type 1 has an invalid length. [ 1944.082395][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1944.110078][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1944.152729][T17656] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1944.156250][T21860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1944.996146][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4016'. [ 1946.712624][T21882] loop1: detected capacity change from 0 to 2048 [ 1946.924297][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4036'. [ 1948.729346][T21891] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1949.397088][T21891] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1950.046488][T21891] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 1950.734439][T21891] Remounting filesystem read-only [ 1950.764012][ T5769] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1950.772821][ T5769] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 1950.799940][ T5769] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 1950.823989][ T5769] NILFS (loop1): discard dirty block: blocknr=24, size=1024 [ 1950.850544][ T5769] NILFS (loop1): discard dirty block: blocknr=25, size=1024 [ 1950.873898][ T5769] NILFS (loop1): discard dirty block: blocknr=26, size=1024 [ 1950.902531][ T5769] NILFS (loop1): discard dirty page: offset=4096, ino=16 [ 1950.933488][ T5769] NILFS (loop1): discard dirty block: blocknr=27, size=1024 [ 1950.964525][ T5769] NILFS (loop1): discard dirty block: blocknr=28, size=1024 [ 1950.971986][ T5769] NILFS (loop1): discard dirty block: blocknr=29, size=1024 [ 1951.004066][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.011630][ T5769] NILFS (loop1): discard dirty page: offset=8192, ino=16 [ 1951.044084][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.105195][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.112708][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.158930][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.191644][ T5769] NILFS (loop1): discard dirty page: offset=12288, ino=16 [ 1951.214453][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.559663][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.585952][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.640608][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.674644][ T5769] NILFS (loop1): discard dirty page: offset=16384, ino=16 [ 1951.681846][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.720899][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.728935][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.736776][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.746167][ T5769] NILFS (loop1): discard dirty page: offset=20480, ino=16 [ 1951.754926][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.762339][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.770432][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.778132][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.786177][ T5769] NILFS (loop1): discard dirty page: offset=24576, ino=16 [ 1951.793394][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1951.801137][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.276169][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.284465][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.291751][ T5769] NILFS (loop1): discard dirty page: offset=28672, ino=16 [ 1952.299158][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.340825][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.358831][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.373858][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.381137][ T5769] NILFS (loop1): discard dirty page: offset=32768, ino=16 [ 1952.390346][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.404612][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.411860][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.421282][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.433338][ T5769] NILFS (loop1): discard dirty page: offset=36864, ino=16 [ 1952.440998][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.448922][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.457287][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.458252][T21922] loop4: detected capacity change from 0 to 1024 [ 1952.465294][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1952.491615][ T5769] NILFS (loop1): discard dirty page: offset=40960, ino=16 [ 1952.499146][T21922] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1952.510318][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.102805][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.148628][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.174175][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.181470][ T5769] NILFS (loop1): discard dirty page: offset=45056, ino=16 [ 1953.202678][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.325425][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.343361][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.363437][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.403398][ T5769] NILFS (loop1): discard dirty page: offset=49152, ino=16 [ 1953.434648][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.448777][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.457749][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.469014][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1953.688994][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4040'. [ 1954.900003][ T5769] NILFS (loop1): discard dirty page: offset=53248, ino=16 [ 1954.929131][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1954.936742][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1954.945052][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1954.952298][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1954.959637][ T5769] NILFS (loop1): discard dirty page: offset=57344, ino=16 [ 1954.966863][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1954.974180][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1954.981418][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1954.988731][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1954.996115][ T5769] NILFS (loop1): discard dirty page: offset=61440, ino=16 [ 1955.016566][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1955.027018][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1955.044984][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1955.070343][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1955.106472][ T5769] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 1955.128810][ T5769] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 1955.144066][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1955.156305][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1955.167075][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1955.188367][ T5769] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 1955.783398][ T5769] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 1955.791441][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1955.817932][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1955.837730][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1955.849312][ T5769] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1955.909555][ T5769] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1955.946751][ T5769] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1955.968392][ T5769] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1955.998460][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1956.037195][ T5769] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 1956.074416][T21928] loop5: detected capacity change from 0 to 32768 [ 1956.083953][ T5769] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1956.112255][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1956.153223][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1956.183521][ T5769] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1956.260646][T21928] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1956.300944][T21943] loop4: detected capacity change from 0 to 32768 [ 1956.316190][T21943] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1956.324586][T21943] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1956.344993][T21928] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop5": -EINTR [ 1956.345829][T21928] XFS (loop5): log mount failed [ 1956.533037][T21943] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1956.545204][T15205] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1956.552026][T15205] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1957.300186][T15205] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 748ms [ 1957.319028][T15205] gfs2: fsid=syz:syz.0: jid=0: Done [ 1957.327143][T21943] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1962.117110][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 1962.853519][T22031] siw: device registration error -23 [ 1969.820310][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4081'. [ 1969.839388][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4081'. [ 1970.620945][T22112] siw: device registration error -23 [ 1972.938491][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4087'. [ 1976.474334][T22155] netlink: 'syz.5.4094': attribute type 1 has an invalid length. [ 1976.559031][T22155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1976.766503][T22152] loop1: detected capacity change from 0 to 32768 [ 1976.788974][T22152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.4095 (22152) [ 1976.852015][T22152] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1976.869775][T22152] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1976.881644][T22152] BTRFS info (device loop1): use no compression [ 1976.888869][T22152] BTRFS info (device loop1): turning on sync discard [ 1976.895733][T22152] BTRFS info (device loop1): force clearing of disk cache [ 1976.903075][T22152] BTRFS info (device loop1): turning on async discard [ 1976.912687][T22152] BTRFS info (device loop1): turning off async discard [ 1976.920221][T22152] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1976.948876][T22152] BTRFS info (device loop1): force zstd compression, level 3 [ 1976.968161][T22152] BTRFS info (device loop1): using free space tree [ 1977.022138][T22152] BTRFS info (device loop1): enabling ssd optimizations [ 1977.046544][T22152] BTRFS info (device loop1): rebuilding free space tree [ 1977.268229][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1981.722951][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4103'. [ 1984.974296][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4114'. [ 1985.858547][T22263] loop5: detected capacity change from 0 to 512 [ 1986.486809][T22263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1986.543238][T22263] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1986.619731][ T28] audit: type=1800 audit(1750458642.557:763): pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4121" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1986.659625][ T28] audit: type=1800 audit(1750458642.597:764): pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4121" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1986.696858][T20339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1987.494802][T22279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1987.592095][T22286] loop4: detected capacity change from 0 to 512 [ 1988.411659][T22286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1988.546514][T22300] loop1: detected capacity change from 0 to 512 [ 1988.557800][T22300] EXT4-fs: Ignoring removed orlov option [ 1988.563627][T22300] EXT4-fs: quotafile must be on filesystem root [ 1988.670691][T22300] loop1: detected capacity change from 0 to 256 [ 1988.680360][T22300] exfat: Deprecated parameter 'utf8' [ 1988.686290][T22300] exfat: Bad value for 'errors' [ 1988.759019][T22286] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1989.078268][T22286] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1989.930785][T22286] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1991.291405][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4135'. [ 1991.723590][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1993.054858][T22335] siw: device registration error -23 [ 1994.329249][T22343] netlink: 428 bytes leftover after parsing attributes in process `syz.2.4139'. [ 1994.369144][T22343] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4139'. [ 1995.604376][T15205] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1995.814263][T15205] usb 5-1: Using ep0 maxpacket: 8 [ 1996.443952][T15205] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.454685][T15205] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1996.482860][T15205] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1996.496068][T15205] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1996.507714][T15205] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1996.517477][T15205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.532748][T15205] hub 5-1:1.0: bad descriptor, ignoring hub [ 1996.540476][T15205] hub: probe of 5-1:1.0 failed with error -5 [ 1996.549799][T15205] cdc_wdm 5-1:1.0: skipping garbage [ 1996.561946][T15205] cdc_wdm 5-1:1.0: skipping garbage [ 1996.616224][T15205] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1996.624745][T15205] cdc_wdm 5-1:1.0: Unknown control protocol [ 1998.237590][T16141] usb 5-1: USB disconnect, device number 11 [ 1999.884921][T22418] program syz.1.4161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2003.677659][T22463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4176'. [ 2005.184659][T22478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4178'. [ 2005.694439][T15205] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2005.911987][T15205] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.938556][T15205] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2005.979027][T15205] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2005.991793][T15205] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2006.003148][T15205] usb 5-1: Manufacturer: syz [ 2006.019765][T15205] usb 5-1: config 0 descriptor?? [ 2006.042118][T15205] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2007.537546][T22502] loop5: detected capacity change from 0 to 4096 [ 2007.599649][T22502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2007.789075][T20339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2009.373061][T16141] usb 5-1: USB disconnect, device number 12 [ 2010.281105][T22538] loop5: detected capacity change from 0 to 2048 [ 2010.390720][T22538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2010.771978][T20339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.894999][T22536] loop4: detected capacity change from 0 to 32768 [ 2010.926607][T22536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4199 (22536) [ 2010.993586][T22536] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2011.024810][T22536] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2011.033596][T22536] BTRFS info (device loop4): using free space tree [ 2011.307060][T22536] BTRFS info (device loop4): enabling ssd optimizations [ 2011.326591][T22536] BTRFS info (device loop4): auto enabling async discard [ 2012.744340][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4206'. [ 2013.575706][T22595] loop1: detected capacity change from 0 to 128 [ 2013.665041][T17656] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2014.099127][T22603] netlink: 'syz.1.4213': attribute type 1 has an invalid length. [ 2014.457872][T22603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2017.949913][T22630] loop4: detected capacity change from 0 to 4096 [ 2018.334993][T22630] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 2018.535296][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4223'. [ 2018.685366][T17656] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 2019.508864][T22658] loop1: detected capacity change from 0 to 256 [ 2019.538622][T22658] FAT-fs (loop1): bogus number of FAT sectors [ 2019.567339][T22658] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2021.211204][T22673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4230'. [ 2023.925528][T22684] loop1: detected capacity change from 0 to 32768 [ 2024.026235][T22684] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 2024.543425][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 2025.759468][T22716] loop1: detected capacity change from 0 to 2048 [ 2025.766959][T22716] EXT4-fs: Ignoring removed bh option [ 2025.975407][T22716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2025.993639][T22724] loop5: detected capacity change from 0 to 128 [ 2026.368966][T22730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4243'. [ 2026.990018][T22716] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2027.095667][T22716] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 2027.132906][T22733] syz.5.4245: attempt to access beyond end of device [ 2027.132906][T22733] loop5: rw=2049, sector=145, nr_sectors = 344 limit=128 [ 2027.180449][T22716] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2027.180449][T22716] [ 2027.393154][T22716] EXT4-fs (loop1): Total free blocks count 0 [ 2027.399471][T22716] EXT4-fs (loop1): Free/Dirty block details [ 2027.406321][T22716] EXT4-fs (loop1): free_blocks=2415919104 [ 2027.412138][T22716] EXT4-fs (loop1): dirty_blocks=16 [ 2027.441354][T22716] EXT4-fs (loop1): Block reservation details [ 2027.447788][T22716] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 2027.645797][T13788] kworker/u4:29: attempt to access beyond end of device [ 2027.645797][T13788] loop5: rw=1, sector=489, nr_sectors = 552 limit=128 [ 2027.672321][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4247'. [ 2027.692071][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2028.848896][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4252'. [ 2029.295077][T22769] loop5: detected capacity change from 0 to 256 [ 2029.317150][T22769] FAT-fs (loop5): bogus number of FAT sectors [ 2029.331238][T22769] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2029.696865][T22773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4257'. [ 2030.224616][T15202] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2030.413895][T15202] usb 5-1: Using ep0 maxpacket: 32 [ 2030.431938][T15202] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2030.453082][T15202] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2030.485348][T15202] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2030.503979][T15202] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2031.087529][T15202] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2031.098166][T15202] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2031.120742][T15202] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2031.170827][T15202] usb 5-1: Product: syz [ 2031.175598][T15202] usb 5-1: Manufacturer: syz [ 2031.180316][T15202] usb 5-1: SerialNumber: syz [ 2031.202939][T15202] usb 5-1: config 0 descriptor?? [ 2031.221348][T15202] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2031.257183][T22786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4262'. [ 2031.269268][T15202] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2031.274998][T22786] netem: change failed [ 2031.849854][T15202] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2032.510197][T15202] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2032.529696][T15202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.555972][T15202] usb 2-1: config 0 descriptor?? [ 2032.611340][T15204] usb 5-1: USB disconnect, device number 13 [ 2032.634466][T15204] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2032.804089][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4267'. [ 2033.013164][T15202] usb 2-1: Cannot set MAC address [ 2033.024117][T15202] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 2033.041707][T15202] usb 2-1: USB disconnect, device number 54 [ 2033.197890][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4270'. [ 2033.991461][T22819] input: syz0 as /devices/virtual/input/input31 [ 2034.880340][T22835] netlink: 'syz.1.4276': attribute type 1 has an invalid length. [ 2035.127279][T22835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2035.562600][T22856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4283'. [ 2035.977219][T22865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4284'. [ 2036.183914][ C1] hrtimer: interrupt took 217158 ns [ 2038.633644][T22889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4293'. [ 2039.711882][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4295'. [ 2042.258340][T22933] netlink: 'syz.5.4302': attribute type 1 has an invalid length. [ 2042.353386][T22933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2044.740946][ T28] audit: type=1326 audit(1750458700.677:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22958 comm="syz.1.4311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb97e98e929 code=0x0 [ 2045.327688][T22975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4314'. [ 2045.449554][T22973] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4316'. [ 2046.527962][T22992] loop4: detected capacity change from 0 to 2048 [ 2046.577326][T22992] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 2046.585643][T22992] UDF-fs: Scanning with blocksize 512 failed [ 2046.601860][T22992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2047.733994][T20463] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2047.923804][T20463] usb 5-1: Using ep0 maxpacket: 8 [ 2047.940926][T20463] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 2047.943189][T23007] loop5: detected capacity change from 0 to 32768 [ 2047.960113][T20463] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2047.990945][T20463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.024791][T23007] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 2048.129825][T20800] (kworker/u4:2,20800,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1 [ 2048.195810][T23007] [ 2048.198816][T23007] ====================================================== [ 2048.205843][T23007] WARNING: possible circular locking dependency detected [ 2048.212863][T23007] 6.6.93-syzkaller #0 Not tainted [ 2048.217881][T23007] ------------------------------------------------------ [ 2048.224979][T23007] syz.5.4328/23007 is trying to acquire lock: [ 2048.231122][T23007] ffff888076ac9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2fa/0x720 [ 2048.240423][T23007] [ 2048.240423][T23007] but task is already holding lock: [ 2048.247841][T23007] ffff88807a56c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 2048.257063][T23007] [ 2048.257063][T23007] which lock already depends on the new lock. [ 2048.257063][T23007] [ 2048.267446][T23007] [ 2048.267446][T23007] the existing dependency chain (in reverse order) is: [ 2048.276447][T23007] [ 2048.276447][T23007] -> #2 (jbd2_handle){++++}-{0:0}: [ 2048.283831][T23007] jbd2_journal_lock_updates+0xab/0x380 [ 2048.289897][T23007] __ocfs2_flush_truncate_log+0x2b8/0x10b0 [ 2048.296223][T23007] ocfs2_flush_truncate_log+0x4f/0x60 [ 2048.302589][T23007] ocfs2_sync_fs+0x117/0x310 [ 2048.307778][T23007] sync_filesystem+0x1c2/0x220 [ 2048.313162][T23007] generic_shutdown_super+0x6f/0x2b0 [ 2048.319058][T23007] kill_block_super+0x44/0x90 [ 2048.324263][T23007] deactivate_locked_super+0x97/0x100 [ 2048.330152][T23007] cleanup_mnt+0x429/0x4c0 [ 2048.335080][T23007] task_work_run+0x1ce/0x250 [ 2048.340192][T23007] exit_to_user_mode_loop+0xe6/0x110 [ 2048.345982][T23007] exit_to_user_mode_prepare+0xb1/0x140 [ 2048.352032][T23007] syscall_exit_to_user_mode+0x1a/0x50 [ 2048.358182][T23007] do_syscall_64+0x61/0xb0 [ 2048.363647][T23007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2048.370342][T23007] [ 2048.370342][T23007] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 2048.380869][T23007] down_write+0x97/0x1f0 [ 2048.385635][T23007] ocfs2_xattr_set+0xada/0x11f0 [ 2048.390998][T23007] __vfs_setxattr+0x431/0x470 [ 2048.396199][T23007] __vfs_setxattr_noperm+0x12d/0x5e0 [ 2048.402084][T23007] vfs_setxattr+0x16c/0x2f0 [ 2048.407137][T23007] path_setxattr+0x362/0x550 [ 2048.412414][T23007] __x64_sys_setxattr+0xbb/0xd0 [ 2048.417771][T23007] do_syscall_64+0x55/0xb0 [ 2048.422708][T23007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2048.429125][T23007] [ 2048.429125][T23007] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 2048.436933][T23007] __lock_acquire+0x2ddb/0x7c80 [ 2048.442294][T23007] lock_acquire+0x197/0x410 [ 2048.447312][T23007] down_read+0x46/0x2e0 [ 2048.452174][T23007] ocfs2_init_acl+0x2fa/0x720 [ 2048.457494][T23007] ocfs2_mknod+0x12e5/0x20f0 [ 2048.462700][T23007] ocfs2_mkdir+0x196/0x410 [ 2048.467659][T23007] vfs_mkdir+0x296/0x440 [ 2048.472433][T23007] do_mkdirat+0x1d4/0x440 [ 2048.477270][T23007] __x64_sys_mkdirat+0x89/0xa0 [ 2048.482554][T23007] do_syscall_64+0x55/0xb0 [ 2048.487494][T23007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2048.494195][T23007] [ 2048.494195][T23007] other info that might help us debug this: [ 2048.494195][T23007] [ 2048.504598][T23007] Chain exists of: [ 2048.504598][T23007] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle [ 2048.504598][T23007] [ 2048.520718][T23007] Possible unsafe locking scenario: [ 2048.520718][T23007] [ 2048.529239][T23007] CPU0 CPU1 [ 2048.534699][T23007] ---- ---- [ 2048.540056][T23007] rlock(jbd2_handle); [ 2048.544198][T23007] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 2048.553980][T23007] lock(jbd2_handle); [ 2048.560559][T23007] rlock(&oi->ip_xattr_sem); [ 2048.565262][T23007] [ 2048.565262][T23007] *** DEADLOCK *** [ 2048.565262][T23007] [ 2048.573395][T23007] 8 locks held by syz.5.4328/23007: [ 2048.578621][T23007] #0: ffff88804ba30418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2048.587851][T23007] #1: ffff888076ac9818 (&type->i_mutex_dir_key#10/1){+.+.}-{3:3}, at: filename_create+0x1f6/0x460 [ 2048.598547][T23007] #2: ffff888058fb3498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 2048.612276][T23007] #3: ffff888058fb09d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 2048.625948][T23007] #4: ffff888058fb2658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 2048.639898][T23007] #5: ffff88804ba30608 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe47/0x20f0 [ 2048.649220][T23007] #6: ffff88805cd3f4e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x36a/0x6c0 [ 2048.659900][T23007] #7: ffff88807a56c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 2048.669629][T23007] [ 2048.669629][T23007] stack backtrace: [ 2048.675493][T23007] CPU: 0 PID: 23007 Comm: syz.5.4328 Not tainted 6.6.93-syzkaller #0 [ 2048.683533][T23007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2048.693914][T23007] Call Trace: [ 2048.697184][T23007] [ 2048.700099][T23007] dump_stack_lvl+0x16c/0x230 [ 2048.704887][T23007] ? load_image+0x3b0/0x3b0 [ 2048.709368][T23007] ? show_regs_print_info+0x20/0x20 [ 2048.714550][T23007] ? print_circular_bug+0x12b/0x1a0 [ 2048.719742][T23007] check_noncircular+0x2bd/0x3c0 [ 2048.724667][T23007] ? print_deadlock_bug+0x5d0/0x5d0 [ 2048.729859][T23007] ? lockdep_lock+0xe0/0x220 [ 2048.734443][T23007] ? _find_first_zero_bit+0xd3/0x100 [ 2048.739706][T23007] __lock_acquire+0x2ddb/0x7c80 [ 2048.744557][T23007] ? verify_lock_unused+0x140/0x140 [ 2048.749750][T23007] ? __find_get_block+0x2a2/0xed0 [ 2048.754756][T23007] ? verify_lock_unused+0x140/0x140 [ 2048.760062][T23007] ? __ocfs2_journal_access+0x612/0x7f0 [ 2048.765876][T23007] lock_acquire+0x197/0x410 [ 2048.770459][T23007] ? ocfs2_init_acl+0x2fa/0x720 [ 2048.775308][T23007] ? __might_sleep+0xe0/0xe0 [ 2048.780004][T23007] ? read_lock_is_recursive+0x20/0x20 [ 2048.785470][T23007] ? do_raw_spin_unlock+0x121/0x230 [ 2048.790663][T23007] down_read+0x46/0x2e0 [ 2048.794808][T23007] ? ocfs2_init_acl+0x2fa/0x720 [ 2048.799681][T23007] ocfs2_init_acl+0x2fa/0x720 [ 2048.804358][T23007] ? ocfs2_acl_chmod+0x320/0x320 [ 2048.809284][T23007] ? dquot_alloc_inode+0x211/0xa40 [ 2048.814403][T23007] ? ocfs2_journal_access+0x40/0x40 [ 2048.819598][T23007] ? ocfs2_block_signals+0x95/0xd0 [ 2048.824737][T23007] ? ocfs2_free_mem_caches+0x50/0x50 [ 2048.830019][T23007] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 2048.836157][T23007] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 2048.841862][T23007] ocfs2_mknod+0x12e5/0x20f0 [ 2048.846458][T23007] ? ocfs2_mkdir+0x410/0x410 [ 2048.851035][T23007] ? verify_lock_unused+0x140/0x140 [ 2048.856231][T23007] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 2048.861931][T23007] ? __lock_acquire+0x7c80/0x7c80 [ 2048.866935][T23007] ? do_raw_spin_lock+0x121/0x2c0 [ 2048.871943][T23007] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 2048.877822][T23007] ? __lock_acquire+0x7c80/0x7c80 [ 2048.882827][T23007] ? __rwlock_init+0x150/0x150 [ 2048.887656][T23007] ? do_raw_spin_unlock+0x121/0x230 [ 2048.892924][T23007] ? put_pid+0xde/0x120 [ 2048.897059][T23007] ocfs2_mkdir+0x196/0x410 [ 2048.901539][T23007] ? make_kgid+0x640/0x640 [ 2048.905991][T23007] ? apparmor_path_mkdir+0x1a7/0x220 [ 2048.911278][T23007] ? ocfs2_symlink+0x2550/0x2550 [ 2048.916207][T23007] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 2048.921126][T23007] ? inode_permission+0xf3/0x480 [ 2048.926054][T23007] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 2048.931154][T23007] ? security_inode_mkdir+0xb7/0x100 [ 2048.936579][T23007] vfs_mkdir+0x296/0x440 [ 2048.940912][T23007] do_mkdirat+0x1d4/0x440 [ 2048.945282][T23007] ? vfs_mkdir+0x440/0x440 [ 2048.949724][T23007] __x64_sys_mkdirat+0x89/0xa0 [ 2048.954472][T23007] do_syscall_64+0x55/0xb0 [ 2048.958870][T23007] ? clear_bhb_loop+0x40/0x90 [ 2048.963522][T23007] ? clear_bhb_loop+0x40/0x90 [ 2048.968174][T23007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2048.974071][T23007] RIP: 0033:0x7fee0698d197 [ 2048.978465][T23007] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2048.998051][T23007] RSP: 002b:00007fee078cde68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2049.006442][T23007] RAX: ffffffffffffffda RBX: 00007fee078cdef0 RCX: 00007fee0698d197 [ 2049.014405][T23007] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 2049.022363][T23007] RBP: 00002000000002c0 R08: 00002000000001c0 R09: 0000000000000000 [ 2049.030318][T23007] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000040 [ 2049.038354][T23007] R13: 00007fee078cdeb0 R14: 0000000000000000 R15: 0000000000000000 [ 2049.046308][T23007] [ 2049.076559][T23007] (syz.5.4328,23007,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 2049.099045][T20339] ocfs2: Unmounting device (7,5) on (node local) [ 2049.458813][T23018] caif:caif_disconnect_client(): nothing to disconnect [ 2050.477361][T16141] usb 5-1: USB disconnect, device number 14