last executing test programs: 9.708330104s ago: executing program 0 (id=1000): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x24040400) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffd20}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x224003, 0x60) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 9.617042462s ago: executing program 0 (id=1001): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x17, 0x5, 0x6, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x0) 9.437477346s ago: executing program 0 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 8.942634156s ago: executing program 0 (id=1008): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x2e8}}], 0x2, 0x800) 8.862818333s ago: executing program 0 (id=1011): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@call={0x61, 0x11, 0x78}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000000)={'wlan1\x00'}) 8.77249657s ago: executing program 0 (id=1013): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 4.984676296s ago: executing program 2 (id=1031): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a", @ANYRES32, @ANYBLOB="00000000100000001c"], 0x44}}, 0x0) 4.732376447s ago: executing program 2 (id=1033): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000300)) 4.666599952s ago: executing program 2 (id=1034): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x5, 0x0, 0x0, @private2, @local, {[], "3c3427d5c9"}}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TCSETSW2(r4, 0x5425, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.400428594s ago: executing program 3 (id=1037): r0 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x2}, 0x10}, 0x94) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) 3.917045523s ago: executing program 3 (id=1039): socket$kcm(0x21, 0x2, 0x2) epoll_create1(0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x12, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x710a89d0c9b734a9}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) r3 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x80008000, 0x9, 0x2, 0x2f, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0xa00000, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]}) 3.841742569s ago: executing program 2 (id=1040): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) 3.600499269s ago: executing program 1 (id=1042): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 2.861920329s ago: executing program 1 (id=1043): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0xa, 0x3, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.851654879s ago: executing program 4 (id=1044): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x5, 0x4) 2.812926913s ago: executing program 3 (id=1045): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETS(r0, 0x5402, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) clock_adjtime(0x1, &(0x7f0000000000)={0x24, 0x1, 0x5, 0x1f, 0x3, 0xf, 0xd0, 0x401, 0x100000000, 0x5, 0x1, 0x2, 0x3, 0x8, 0x2, 0x20000000004, 0x2ec2, 0x400, 0x7, 0x2, 0x2, 0x3, 0x1, 0x0, 0x6, 0x2}) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x2040, 0x0) 2.700377382s ago: executing program 1 (id=1046): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251a"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) 2.700248442s ago: executing program 4 (id=1047): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) 2.636612617s ago: executing program 4 (id=1048): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 2.626687988s ago: executing program 1 (id=1049): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) 2.540490885s ago: executing program 3 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8ed505e4808c0387945dfed183"}]}]}, 0x48}}, 0x40) 2.454641202s ago: executing program 3 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.694394083s ago: executing program 1 (id=1052): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a0000000000000000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x10}}, 0x0) 1.693766813s ago: executing program 4 (id=1053): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x25, 0x0, 0x1b}, 0x9c) 1.512802768s ago: executing program 3 (id=1054): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500200000040"], 0x0) open(&(0x7f0000000900)='./file1\x00', 0x84200, 0x104) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x700000000000000) 1.340751282s ago: executing program 2 (id=1055): socket$kcm(0x21, 0x2, 0x2) epoll_create1(0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x12, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x710a89d0c9b734a9}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) r3 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x80008000, 0x9, 0x2, 0x2f, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0xa00000, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]}) 158.022558ms ago: executing program 1 (id=1056): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x3004048, &(0x7f0000000100)=ANY=[], 0x11, 0x2d2, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 157.294368ms ago: executing program 2 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x24008814) 81.691484ms ago: executing program 4 (id=1058): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) 0s ago: executing program 4 (id=1059): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61e5, 0x0) kernel console output (not intermixed with test programs): 44.138425][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.140819][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.143237][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.144891][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.147693][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.148983][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.154564][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.172301][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.173887][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.175810][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.176832][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.178723][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.183145][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.198460][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.200391][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.201989][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.203006][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.208850][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.222630][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.224286][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.241300][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.253396][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.263450][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.282211][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.284671][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.287972][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.289749][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.291595][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.300855][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.302598][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.304151][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.305204][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.310469][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.312422][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.314252][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.322094][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.323803][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.326421][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.327765][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.336550][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.346482][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.348288][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.350052][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.353015][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.354607][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.355715][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.360179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.362269][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.370350][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.372099][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.373850][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.374891][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.378545][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.384857][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.386911][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.388479][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.390056][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.391101][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.393381][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.397734][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.403401][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.405267][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.409388][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.411416][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.412937][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.430254][ T4045] device veth0_vlan entered promiscuous mode [ 44.436528][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.438572][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.440428][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.451256][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.453166][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.454915][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.474480][ T4045] device veth1_vlan entered promiscuous mode [ 44.478697][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.480386][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.482575][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.484424][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.503979][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.506457][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.508270][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.509964][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.511543][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.513481][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.515479][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.529747][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.533574][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.536710][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.538790][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.540523][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.542319][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.566186][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.567917][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.571490][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.600696][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.602037][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.607148][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.609732][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.613027][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.626615][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.629546][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.638070][ T4036] device veth0_vlan entered promiscuous mode [ 44.642783][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.644357][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.652626][ T4045] device veth0_macvtap entered promiscuous mode [ 44.668207][ T4045] device veth1_macvtap entered promiscuous mode [ 44.671722][ T4036] device veth1_vlan entered promiscuous mode [ 44.691725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.693543][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.695220][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.699226][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.701762][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.703551][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.750146][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.751456][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.753280][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.759992][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.775019][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.777075][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.778796][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.780520][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.791930][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.793264][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.800526][ T4045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.802000][ T4045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.803247][ T4045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.804515][ T4045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.811023][ T4036] device veth0_macvtap entered promiscuous mode [ 44.816436][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.818108][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.819823][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.822298][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.823938][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.833858][ T4036] device veth1_macvtap entered promiscuous mode [ 44.841169][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.842913][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.844093][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.852729][ T4035] device veth0_vlan entered promiscuous mode [ 44.861229][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.875314][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.895810][ T1534] Bluetooth: hci0: command 0x041b tx timeout [ 44.898251][ T1534] Bluetooth: hci1: command 0x041b tx timeout [ 44.899254][ T1534] Bluetooth: hci2: command 0x041b tx timeout [ 44.913963][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.916736][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.919745][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.922838][ T4035] device veth1_vlan entered promiscuous mode [ 44.930688][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.932437][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.934265][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.986191][ T1534] Bluetooth: hci3: command 0x041b tx timeout [ 44.994296][ T1534] Bluetooth: hci4: command 0x041b tx timeout [ 45.001604][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.003255][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.006808][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.008116][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.009696][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.011445][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.013150][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.015026][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.023191][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.024420][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.033044][ T4035] device veth0_macvtap entered promiscuous mode [ 45.045837][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.047560][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.049434][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.051293][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.053316][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.071470][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.073146][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.074737][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.079507][ T4035] device veth1_macvtap entered promiscuous mode [ 45.088306][ T4036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.089537][ T4036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.090770][ T4036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.092006][ T4036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.110221][ T4041] device veth0_vlan entered promiscuous mode [ 45.126952][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.128207][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.143456][ T4041] device veth1_vlan entered promiscuous mode [ 45.145217][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.147308][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.148921][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.198352][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.200179][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.202805][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.204345][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.206934][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.208570][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.211495][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.252898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.254905][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.327464][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.329090][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.330426][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.340148][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.342966][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.356403][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.358241][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.359985][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.361718][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.363325][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.365029][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.379202][ T4041] device veth0_macvtap entered promiscuous mode [ 45.384228][ T4035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.386854][ T4035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.388221][ T4035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.390511][ T4035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.395009][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.396218][ T1374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.397030][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.397580][ T1374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.399103][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.401141][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.435563][ T4044] device veth0_vlan entered promiscuous mode [ 45.453318][ T4041] device veth1_macvtap entered promiscuous mode [ 45.474364][ T4044] device veth1_vlan entered promiscuous mode [ 45.483129][ T1374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.484434][ T1374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.493918][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.496248][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.497977][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.529006][ T4145] loop3: detected capacity change from 0 to 1024 [ 45.578039][ T4145] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.589146][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.590638][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.591931][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.593993][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.603817][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.607235][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.610122][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.629397][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.631149][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.632860][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.672248][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.673839][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.675270][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.677673][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.679003][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.680498][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.683563][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.686713][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.688700][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.690426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.692211][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.711015][ T4041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.712332][ T4041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.719831][ T4041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.721269][ T4041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.730547][ T4044] device veth0_macvtap entered promiscuous mode [ 45.732719][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.734011][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.737363][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.739074][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.589900][ T4044] device veth1_macvtap entered promiscuous mode [ 46.598715][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.598834][ T4153] udc-core: couldn't find an available UDC or it's busy [ 46.600966][ T4153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.672087][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.673342][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.702307][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.708457][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.710008][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.711436][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.712866][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.714448][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.716060][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.717369][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.718877][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.721916][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.723489][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.729313][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.751683][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.753475][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.754898][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.761273][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.762855][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.764338][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.767264][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.768908][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.771854][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.789482][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.791717][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.844922][ T4044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.848635][ T4044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.849964][ T4044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.861118][ T4044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.882591][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.883812][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.886558][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.919861][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.921194][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.923288][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.977629][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 46.984559][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 46.986299][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 47.055801][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 47.057205][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 47.096804][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.098127][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.101972][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.103844][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.119905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.124833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.008404][ T4167] loop4: detected capacity change from 0 to 4096 [ 48.109150][ T4180] Zero length message leads to an empty skb [ 48.142486][ T4167] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.055759][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 49.057052][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 49.057966][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 49.147655][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 49.148771][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 49.226139][ T4194] udc-core: couldn't find an available UDC or it's busy [ 49.227228][ T4194] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.802615][ T4191] loop3: detected capacity change from 0 to 32768 [ 51.645339][ C0] sched: RT throttling activated [ 51.659832][ T1534] Bluetooth: hci4: command 0x0405 tx timeout [ 51.863825][ T4202] loop4: detected capacity change from 0 to 262144 [ 51.907429][ T4202] ======================================================= [ 51.907429][ T4202] WARNING: The mand mount option has been deprecated and [ 51.907429][ T4202] and is ignored by this kernel. Remove the mand [ 51.907429][ T4202] option from the mount to silence this warning. [ 51.907429][ T4202] ======================================================= [ 51.915932][ T4202] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.14 (4202) [ 52.021659][ T4191] XFS (loop3): Mounting V5 Filesystem [ 52.101124][ T4202] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 52.102840][ T4202] BTRFS info (device loop4): using free space tree [ 52.103893][ T4202] BTRFS info (device loop4): has skinny extents [ 52.104794][ T4202] BTRFS info (device loop4): flagging fs with big metadata feature [ 52.178026][ T4191] XFS (loop3): Ending clean mount [ 52.197644][ T4191] XFS (loop3): Quotacheck needed: Please wait. [ 52.264034][ T4191] XFS (loop3): Quotacheck: Done. [ 52.308672][ T4241] loop0: detected capacity change from 0 to 8 [ 52.324542][ T4045] XFS (loop3): Unmounting Filesystem [ 52.388688][ T4202] BTRFS info (device loop4): enabling ssd optimizations [ 52.626120][ T4241] SQUASHFS error: zlib decompression failed, data probably corrupt [ 52.683267][ T4241] SQUASHFS error: Failed to read block 0x4de: -5 [ 52.687540][ T4241] SQUASHFS error: Failed to read block 0x4e2: -5 [ 52.702393][ T4241] SQUASHFS error: Failed to read block 0x9ca: -5 [ 52.710499][ T4241] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 52.780225][ T4241] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 52.781287][ T4241] SQUASHFS error: Failed to read block 0x535f2: -5 [ 53.762797][ T4271] Bluetooth: hci4: command 0x0405 tx timeout [ 55.016028][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 55.018663][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 58.073522][ T4316] loop4: detected capacity change from 0 to 512 [ 58.119922][ T4316] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 58.140249][ T4316] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.160849][ T4316] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.30: Block bitmap for bg 0 marked uninitialized [ 58.236279][ T4316] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 58.297399][ T4316] EXT4-fs (loop4): 1 orphan inode deleted [ 58.298289][ T4316] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.326652][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 62.536542][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 62.592509][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 63.213474][ T4356] loop3: detected capacity change from 0 to 512 [ 63.280978][ T4356] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 63.297002][ T4356] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.298432][ T4356] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.41: Block bitmap for bg 0 marked uninitialized [ 63.301486][ T4356] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 63.303164][ T4356] EXT4-fs (loop3): 1 orphan inode deleted [ 63.303992][ T4356] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.359207][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 67.646875][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.648882][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.651854][ T4397] device bridge0 entered promiscuous mode [ 68.948546][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 68.950520][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 69.645177][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.646437][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.653619][ T1961] cfg80211: failed to load regulatory.db [ 69.723529][ T4420] loop2: detected capacity change from 0 to 512 [ 69.819961][ T4420] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 69.836428][ T4420] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.837666][ T4420] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.58: Block bitmap for bg 0 marked uninitialized [ 69.845656][ T4420] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 69.852663][ T4420] EXT4-fs (loop2): 1 orphan inode deleted [ 69.853463][ T4420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.935268][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 74.613729][ T4469] loop4: detected capacity change from 0 to 512 [ 75.332648][ T4469] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 75.379004][ T4469] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.388989][ T4469] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.72: Block bitmap for bg 0 marked uninitialized [ 75.393475][ T4469] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 75.479136][ T4469] EXT4-fs (loop4): 1 orphan inode deleted [ 75.479934][ T4469] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.523297][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 78.022040][ T4500] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.023689][ T4500] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.025406][ T4500] device bridge0 entered promiscuous mode [ 79.724997][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 79.736091][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 80.341833][ T4528] loop0: detected capacity change from 0 to 512 [ 80.362884][ T4528] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 80.389082][ T4528] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.391692][ T4528] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.88: Block bitmap for bg 0 marked uninitialized [ 80.404350][ T4528] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 80.425557][ T4528] EXT4-fs (loop0): 1 orphan inode deleted [ 80.427844][ T4528] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.476390][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 84.499838][ T4575] loop1: detected capacity change from 0 to 512 [ 84.512939][ T4575] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 84.524284][ T4575] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.528236][ T4575] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.102: Block bitmap for bg 0 marked uninitialized [ 84.542829][ T4575] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 84.553511][ T4575] EXT4-fs (loop1): 1 orphan inode deleted [ 84.554426][ T4575] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.723055][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 88.945507][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 88.968585][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 89.031913][ T4628] loop2: detected capacity change from 0 to 512 [ 89.068888][ T4628] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 89.086750][ T4628] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.088090][ T4628] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.117: Block bitmap for bg 0 marked uninitialized [ 89.108184][ T4628] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 89.116247][ T4628] EXT4-fs (loop2): 1 orphan inode deleted [ 89.117131][ T4628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.201893][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 90.812649][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.814282][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.830298][ T4655] device bridge0 entered promiscuous mode [ 92.413373][ T4676] loop4: detected capacity change from 0 to 512 [ 92.463904][ T4676] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 92.486611][ T4676] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.487825][ T4676] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.133: Block bitmap for bg 0 marked uninitialized [ 92.905653][ T4676] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 92.912985][ T4676] EXT4-fs (loop4): 1 orphan inode deleted [ 92.914063][ T4676] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.006014][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 93.593070][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 93.596366][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 96.069597][ T4729] loop3: detected capacity change from 0 to 512 [ 96.218518][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 96.220807][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 96.457477][ T4729] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 96.524327][ T4729] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.525912][ T4729] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.147: Block bitmap for bg 0 marked uninitialized [ 96.528428][ T4729] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 96.530235][ T4729] EXT4-fs (loop3): 1 orphan inode deleted [ 96.531251][ T4729] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.773045][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 97.087049][ T4740] loop4: detected capacity change from 0 to 1024 [ 97.244130][ T4510] hfsplus: b-tree write err: -5, ino 4 [ 99.321609][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 99.323717][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 99.677314][ T4782] loop3: detected capacity change from 0 to 512 [ 99.705793][ T4782] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 99.894433][ T4782] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.895851][ T4782] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.165: Block bitmap for bg 0 marked uninitialized [ 99.899090][ T4782] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 99.935556][ T4782] EXT4-fs (loop3): 1 orphan inode deleted [ 99.936736][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.977931][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 100.251701][ T4779] loop2: detected capacity change from 0 to 32768 [ 100.264796][ T4779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.164 (4779) [ 100.442256][ T4779] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 100.463709][ T4779] BTRFS info (device loop2): using free space tree [ 100.977763][ T4779] BTRFS info (device loop2): has skinny extents [ 101.461323][ T4779] BTRFS info (device loop2): enabling ssd optimizations [ 103.470566][ T4845] loop2: detected capacity change from 0 to 512 [ 103.502783][ T4845] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 103.536627][ T4845] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.542549][ T4845] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.179: Block bitmap for bg 0 marked uninitialized [ 103.626393][ T4845] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 103.635653][ T4845] EXT4-fs (loop2): 1 orphan inode deleted [ 103.636582][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.677411][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 104.020805][ T4837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 104.027504][ T4837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 104.377743][ T4858] loop4: detected capacity change from 0 to 32768 [ 104.396057][ T4858] XFS: ikeep mount option is deprecated. [ 104.894162][ T4858] XFS (loop4): Mounting V5 Filesystem [ 105.363058][ T4858] XFS (loop4): Ending clean mount [ 105.445115][ T4858] XFS (loop4): Quotacheck needed: Please wait. [ 105.494232][ T4858] XFS (loop4): Quotacheck: Done. [ 105.528246][ T4879] udc-core: couldn't find an available UDC or it's busy [ 105.529398][ T4879] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.539245][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.542203][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.543562][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.377183][ T4044] XFS (loop4): Unmounting Filesystem [ 106.860235][ T4900] loop0: detected capacity change from 0 to 512 [ 106.876745][ T4900] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 106.894450][ T4900] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.902565][ T4900] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.194: Block bitmap for bg 0 marked uninitialized [ 106.916776][ T4900] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 106.920583][ T4900] EXT4-fs (loop0): 1 orphan inode deleted [ 106.921420][ T4900] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.979311][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 109.209147][ T4924] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 109.289548][ T4924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.293583][ T4924] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.413912][ T4928] loop2: detected capacity change from 0 to 4096 [ 109.509699][ T4928] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 109.673817][ T4928] ntfs3: loop2: Inode r=19 is not in use! [ 109.675031][ T4928] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 111.610041][ T4955] loop2: detected capacity change from 0 to 4096 [ 111.621658][ T4959] loop3: detected capacity change from 0 to 512 [ 111.634763][ T4955] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 111.673214][ T4955] ntfs3: loop2: failed to convert "c46c" to cp855 [ 111.708271][ T4959] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 111.716515][ T4959] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.718152][ T4959] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.213: Block bitmap for bg 0 marked uninitialized [ 111.727771][ T4959] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 111.736057][ T4959] EXT4-fs (loop3): 1 orphan inode deleted [ 111.737076][ T4959] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.747909][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 111.755647][ T4121] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.156533][ T4121] usb 1-1: Using ep0 maxpacket: 32 [ 112.279326][ T4121] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.282106][ T4121] usb 1-1: config 0 has no interface number 0 [ 112.282998][ T4121] usb 1-1: config 0 interface 184 has no altsetting 0 [ 112.445720][ T4121] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.447173][ T4121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.448251][ T4121] usb 1-1: Product: syz [ 112.449068][ T4121] usb 1-1: Manufacturer: syz [ 112.449928][ T4121] usb 1-1: SerialNumber: syz [ 112.463284][ T4121] usb 1-1: config 0 descriptor?? [ 112.503020][ T4121] smsc75xx v1.0.0 [ 112.578730][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 112.794240][ T4979] loop2: detected capacity change from 0 to 40427 [ 112.809656][ T4979] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 112.811237][ T4979] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 112.816678][ T4979] F2FS-fs (loop2): invalid crc value [ 112.845675][ T4979] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.865889][ T4979] F2FS-fs (loop2): Start checkpoint disabled! [ 112.902615][ T4979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 113.069121][ T4975] loop4: detected capacity change from 0 to 32768 [ 113.463143][ T4975] XFS (loop4): Mounting V5 Filesystem [ 113.605685][ T4975] XFS (loop4): Ending clean mount [ 113.608820][ T4975] XFS (loop4): Quotacheck needed: Please wait. [ 113.638576][ T4975] XFS (loop4): Quotacheck: Done. [ 113.655698][ T4121] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 113.774191][ T4044] XFS (loop4): Unmounting Filesystem [ 113.875729][ T4121] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 113.877313][ T4121] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 113.878714][ T4121] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 113.880180][ T4121] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 113.882564][ T4121] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 113.919983][ T4121] usb 1-1: USB disconnect, device number 2 [ 115.349309][ T5018] loop0: detected capacity change from 0 to 512 [ 115.738033][ T5018] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 115.739955][ T5018] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.744230][ T5018] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0). [ 115.745911][ T5018] EXT4-fs warning (device loop0): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.747890][ T5018] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 115.780149][ T5025] loop2: detected capacity change from 0 to 512 [ 115.784795][ T5018] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.231: bg 0: block 40: padding at end of block bitmap is not set [ 115.813473][ T5018] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 115.817174][ T5022] loop4: detected capacity change from 0 to 8192 [ 115.820246][ T5018] EXT4-fs (loop0): 1 truncate cleaned up [ 115.821242][ T5018] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,user_xattr,journal_dev=0x0000000000000008,max_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 115.863171][ T5025] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 115.885682][ T5018] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #16: comm syz.0.231: corrupted xattr block 31 [ 115.934987][ T5025] EXT4-fs (loop2): orphan cleanup on readonly fs [ 115.955793][ T5025] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.233: Block bitmap for bg 0 marked uninitialized [ 115.961045][ T5006] loop1: detected capacity change from 0 to 32768 [ 115.962468][ T5025] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 115.965056][ T5025] EXT4-fs (loop2): 1 orphan inode deleted [ 115.968928][ T5025] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.182824][ T1534] XFS (loop1): Superblock has unknown incompatible features (0x7e0) enabled. [ 116.185095][ T1534] XFS (loop1): Filesystem cannot be safely mounted by this kernel. [ 116.190426][ T5006] XFS (loop1): SB validate failed with error -22. [ 116.263433][ T5038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.235'. [ 116.343297][ T5042] udc-core: couldn't find an available UDC or it's busy [ 116.344347][ T5042] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.770017][ T5031] loop3: detected capacity change from 0 to 40427 [ 116.824220][ T5031] F2FS-fs (loop3): Unrecognized mount option "checkpoint=merge" or missing value [ 117.147269][ T5056] loop2: detected capacity change from 0 to 512 [ 117.258493][ T5056] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 117.259971][ T5056] EXT4-fs (loop2): failed to open journal device unknown-block(7,20) -6 [ 118.371925][ T5056] loop2: detected capacity change from 0 to 16 [ 118.406129][ T5056] erofs: Unknown parameter 'journal_ioprio' [ 118.549648][ T5073] loop3: detected capacity change from 0 to 4096 [ 118.573608][ T5078] loop0: detected capacity change from 0 to 512 [ 118.618198][ T5078] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 118.636255][ T5078] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.637795][ T5078] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.252: Block bitmap for bg 0 marked uninitialized [ 118.668027][ T5078] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 118.678282][ T5078] EXT4-fs (loop0): 1 orphan inode deleted [ 118.679164][ T5078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.945041][ T5053] loop1: detected capacity change from 0 to 32768 [ 121.517747][ T5111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 123.706934][ T5127] loop4: detected capacity change from 0 to 512 [ 123.726091][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 123.731940][ T5113] loop2: detected capacity change from 0 to 32768 [ 123.932103][ T5113] XFS (loop2): Mounting V5 Filesystem [ 124.470136][ T5113] XFS (loop2): Ending clean mount [ 124.474163][ T5113] XFS (loop2): Quotacheck needed: Please wait. [ 124.500941][ T5113] XFS (loop2): Quotacheck: Done. [ 124.525035][ T4035] XFS (loop2): Unmounting Filesystem [ 124.750063][ T5127] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 124.764028][ T5127] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.766087][ T5127] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.268: Block bitmap for bg 0 marked uninitialized [ 124.769009][ T5127] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 124.771029][ T5127] EXT4-fs (loop4): 1 orphan inode deleted [ 124.771928][ T5127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.661594][ T5162] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.276'. [ 125.664874][ T5162] netlink: zone id is out of range [ 125.721119][ T5162] netlink: del zone limit has 4 unknown bytes [ 125.892854][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.894474][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.896003][ T5166] device bridge0 entered promiscuous mode [ 126.324704][ T5172] bond0: option ad_select: unable to set because the bond device is up [ 127.196398][ T5178] loop4: detected capacity change from 0 to 16 [ 128.066651][ T5178] erofs: (device loop4): mounted with root inode @ nid 36. [ 128.297821][ T5198] loop0: detected capacity change from 0 to 512 [ 128.920001][ T5198] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 128.924168][ T5204] loop4: detected capacity change from 0 to 1024 [ 128.927300][ T5198] EXT4-fs (loop0): orphan cleanup on readonly fs [ 128.928839][ T5198] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.287: Block bitmap for bg 0 marked uninitialized [ 128.949024][ T5198] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 128.950960][ T5198] EXT4-fs (loop0): 1 orphan inode deleted [ 128.951964][ T5198] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.165288][ T5204] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier,dioread_lock,noblock_validity,max_dir_size_kb=0x0000000000000008,data_err=ignore,grpquota,abort,block_validity,data_err=ignore,noinit_itable,,errors=continue. Quota mode: writeback. [ 129.271901][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 130.763503][ T5230] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 130.872815][ T5236] udc-core: couldn't find an available UDC or it's busy [ 130.873910][ T5236] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.104825][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.105963][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.711701][ T5252] loop3: detected capacity change from 0 to 512 [ 131.734467][ T5252] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 131.757384][ T5252] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.760043][ T5252] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.303: Block bitmap for bg 0 marked uninitialized [ 131.775499][ T5252] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 131.783496][ T5252] EXT4-fs (loop3): 1 orphan inode deleted [ 131.784509][ T5252] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.543757][ T5256] loop1: detected capacity change from 0 to 40427 [ 133.631146][ T5256] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 133.632453][ T5256] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 133.673411][ T5256] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.713198][ T5256] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 133.714221][ T5256] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.799129][ T4036] attempt to access beyond end of device [ 133.799129][ T4036] loop1: rw=2049, want=45104, limit=40427 [ 133.856938][ T5261] loop4: detected capacity change from 0 to 32768 [ 133.895822][ T5261] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.306 (5261) [ 134.046097][ T5261] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 134.047483][ T5261] BTRFS info (device loop4): enabling disk space caching [ 134.048647][ T5261] BTRFS info (device loop4): doing ref verification [ 134.049688][ T5261] BTRFS info (device loop4): use zlib compression, level 3 [ 134.050693][ T5261] BTRFS info (device loop4): force clearing of disk cache [ 134.051815][ T5261] BTRFS info (device loop4): setting nodatacow, compression disabled [ 134.053237][ T5261] BTRFS info (device loop4): doing ref verification [ 134.054176][ T5261] BTRFS info (device loop4): disk space caching is enabled [ 134.078232][ T5261] BTRFS info (device loop4): has skinny extents [ 134.211109][ T5275] loop3: detected capacity change from 0 to 32768 [ 134.300634][ T5261] BTRFS info (device loop4): enabling ssd optimizations [ 134.334640][ T5261] BTRFS info (device loop4): clearing free space tree [ 134.339493][ T5261] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.341311][ T5261] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.428701][ T5275] XFS (loop3): Mounting V5 Filesystem [ 134.658031][ T5275] XFS (loop3): Ending clean mount [ 134.660567][ T5275] XFS (loop3): Quotacheck needed: Please wait. [ 134.692487][ T5275] XFS (loop3): Quotacheck: Done. [ 134.872661][ T4045] XFS (loop3): Unmounting Filesystem [ 134.998017][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 135.674763][ T5311] loop0: detected capacity change from 0 to 32768 [ 135.757595][ T5311] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.313 (5311) [ 135.785517][ T5311] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 135.786754][ T5311] BTRFS info (device loop0): using free space tree [ 135.787738][ T5311] BTRFS info (device loop0): has skinny extents [ 135.953505][ T5301] loop1: detected capacity change from 0 to 40427 [ 135.954771][ T5340] loop2: detected capacity change from 0 to 512 [ 136.000909][ T5311] BTRFS info (device loop0): enabling ssd optimizations [ 136.002390][ T5340] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 136.010956][ T5301] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 136.012252][ T5301] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 136.020670][ T5301] F2FS-fs (loop1): invalid crc value [ 136.032504][ T5340] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.033914][ T5340] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.318: Block bitmap for bg 0 marked uninitialized [ 136.047167][ T5340] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 136.065746][ T5340] EXT4-fs (loop2): 1 orphan inode deleted [ 136.066650][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.097760][ T5301] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.421768][ T5301] F2FS-fs (loop1): Start checkpoint disabled! [ 136.435775][ T5301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 136.903450][ T5362] loop4: detected capacity change from 0 to 256 [ 137.676217][ T5367] loop3: detected capacity change from 0 to 128 [ 138.099556][ T4281] attempt to access beyond end of device [ 138.099556][ T4281] loop3: rw=1, want=1041, limit=128 [ 138.296531][ T26] audit: type=1326 audit(138.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.1.327" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf2def28 code=0x0 [ 138.854198][ T5391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.331'. [ 139.623564][ T5396] loop3: detected capacity change from 0 to 764 [ 140.283338][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 141.987575][ T5416] loop3: detected capacity change from 0 to 512 [ 142.139779][ T5416] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 142.166457][ T5416] EXT4-fs (loop3): orphan cleanup on readonly fs [ 142.179335][ T5416] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.338: Block bitmap for bg 0 marked uninitialized [ 142.188929][ T5416] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 142.192189][ T5416] EXT4-fs (loop3): 1 orphan inode deleted [ 142.199228][ T5416] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.483706][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 143.461524][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 143.463726][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 144.847624][ T5433] loop1: detected capacity change from 0 to 32768 [ 146.733665][ T5478] loop3: detected capacity change from 0 to 2048 [ 146.837084][ T5478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.904031][ T5478] udc-core: couldn't find an available UDC or it's busy [ 146.905176][ T5478] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.308550][ T5469] loop0: detected capacity change from 0 to 40427 [ 147.394239][ T5469] F2FS-fs (loop0): invalid crc value [ 147.546387][ T5469] F2FS-fs (loop0): Found nat_bits in checkpoint [ 147.563083][ T5471] loop4: detected capacity change from 0 to 32768 [ 147.581695][ T5469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 151.116380][ T5518] udc-core: couldn't find an available UDC or it's busy [ 151.117423][ T5518] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.722592][ T5530] loop3: detected capacity change from 0 to 40427 [ 152.758461][ T5530] F2FS-fs (loop3): invalid crc value [ 152.786755][ T5530] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.843440][ T5530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 155.564864][ T5589] udc-core: couldn't find an available UDC or it's busy [ 155.587409][ T5589] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.648805][ T5603] loop2: detected capacity change from 0 to 40427 [ 159.692556][ T5603] F2FS-fs (loop2): invalid crc value [ 159.696170][ T5629] loop1: detected capacity change from 0 to 2048 [ 159.705970][ T5603] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 159.795613][ T5629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.689903][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 164.690838][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 164.691709][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 164.692553][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 164.955785][ T5692] loop4: detected capacity change from 0 to 4096 [ 164.966852][ T5692] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 165.650337][ T5696] loop0: detected capacity change from 0 to 4096 [ 165.697701][ T5696] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 165.733782][ T5696] ntfs3: loop0: Inode r=19 is not in use! [ 165.734922][ T5696] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 168.464395][ T5722] loop0: detected capacity change from 0 to 2048 [ 171.093501][ T5736] loop0: detected capacity change from 0 to 512 [ 171.155148][ T5736] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 172.322437][ T5740] loop4: detected capacity change from 0 to 4096 [ 172.351638][ T5736] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv1,minixdf,,errors=continue. Quota mode: writeback. [ 172.744827][ T5740] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 172.910077][ T5740] ntfs3: loop4: failed to convert "c46c" to cp855 [ 172.945920][ T5755] loop3: detected capacity change from 0 to 8 [ 173.057061][ T5755] SQUASHFS error: zlib decompression failed, data probably corrupt [ 173.058352][ T5755] SQUASHFS error: Failed to read block 0x4de: -5 [ 173.059430][ T5755] SQUASHFS error: Failed to read block 0x4e2: -5 [ 173.060496][ T5755] SQUASHFS error: Failed to read block 0x9ca: -5 [ 173.061446][ T5755] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 173.062607][ T5755] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 173.063663][ T5755] SQUASHFS error: Failed to read block 0x535f2: -5 [ 174.119135][ T5751] loop1: detected capacity change from 0 to 32768 [ 174.218912][ T5751] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 175.257450][ T5754] loop0: detected capacity change from 0 to 40427 [ 175.292579][ T5754] F2FS-fs (loop0): invalid crc value [ 175.338160][ T5754] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.404670][ T5754] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 175.619974][ T4036] ocfs2: Unmounting device (7,1) on (node local) [ 175.631345][ T5784] loop4: detected capacity change from 0 to 8192 [ 177.221772][ T5807] loop0: detected capacity change from 0 to 1024 [ 177.520581][ T5790] loop1: detected capacity change from 0 to 32768 [ 178.114091][ T5815] udc-core: couldn't find an available UDC or it's busy [ 178.115104][ T5815] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.131193][ T5807] hfsplus: b-tree write err: -5, ino 3 [ 178.339716][ T4199] hfsplus: bad catalog file entry [ 178.365048][ T5817] udc-core: couldn't find an available UDC or it's busy [ 178.379067][ T5817] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.727153][ T5820] loop2: detected capacity change from 0 to 40427 [ 178.820525][ T5820] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 178.821748][ T5820] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 178.824311][ T5820] F2FS-fs (loop2): invalid crc value [ 178.856142][ T5820] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.875553][ T5820] F2FS-fs (loop2): Start checkpoint disabled! [ 178.891702][ T5820] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 179.764758][ T5823] loop1: detected capacity change from 0 to 32768 [ 180.006970][ T5823] XFS (loop1): Mounting V5 Filesystem [ 180.390584][ T5823] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 180.450676][ T5823] XFS (loop1): Starting recovery (logdev: internal) [ 180.581015][ T5823] XFS (loop1): Ending recovery (logdev: internal) [ 180.584497][ T5823] XFS (loop1): Quotacheck needed: Please wait. [ 180.638250][ T5823] XFS (loop1): Quotacheck: Done. [ 180.674240][ T5852] loop2: detected capacity change from 0 to 256 [ 180.851078][ T4036] XFS (loop1): Unmounting Filesystem [ 180.995960][ T5858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'. [ 182.563672][ T5869] loop4: detected capacity change from 0 to 1024 [ 183.195574][ T26] audit: type=1326 audit(183.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5866 comm="syz.2.462" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7ab0f28 code=0x0 [ 184.349327][ T5895] loop4: detected capacity change from 0 to 24 [ 184.956101][ T5895] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 184.963517][ T5895] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 186.278986][ T5919] loop4: detected capacity change from 0 to 47 [ 186.283469][ T5917] loop0: detected capacity change from 0 to 47 [ 186.678919][ T5926] loop0: detected capacity change from 0 to 64 [ 186.758350][ T5926] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 187.415591][ T4102] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 187.584748][ T5939] loop1: detected capacity change from 0 to 512 [ 187.922082][ T5939] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 187.937580][ T5939] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.938936][ T5939] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.483: Block bitmap for bg 0 marked uninitialized [ 187.943101][ T5939] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 187.953272][ T5939] EXT4-fs (loop1): 1 orphan inode deleted [ 187.954196][ T5939] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.013321][ T4102] usb 1-1: Using ep0 maxpacket: 16 [ 189.170681][ T4102] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 189.171942][ T4102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.173079][ T4102] usb 1-1: Product: syz [ 189.173631][ T4102] usb 1-1: Manufacturer: syz [ 189.174409][ T4102] usb 1-1: SerialNumber: syz [ 189.182602][ T4102] usb 1-1: config 0 descriptor?? [ 189.281353][ T5965] udc-core: couldn't find an available UDC or it's busy [ 189.282393][ T5965] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 189.467803][ T5959] loop3: detected capacity change from 0 to 32768 [ 189.483210][ T5959] XFS (loop3): Mounting V5 Filesystem [ 189.517239][ T5959] XFS (loop3): Ending clean mount [ 189.519933][ T5959] XFS (loop3): Quotacheck needed: Please wait. [ 189.550897][ T5959] XFS (loop3): Quotacheck: Done. [ 189.589627][ T4045] XFS (loop3): Unmounting Filesystem [ 189.656982][ T4102] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 189.664851][ T4102] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.685906][ T4102] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 189.688230][ T4102] usb 1-1: media controller created [ 189.699226][ T4102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.838344][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.494'. [ 190.648935][ C1] vcan0: j1939_tp_rxtimer: 0x00000000451cad83: rx timeout, send abort [ 190.652026][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000451cad83: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 190.810599][ T4102] zl10353_read_register: readreg error (reg=127, ret==0) [ 190.811635][ T4102] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 190.812937][ T4102] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 190.825896][ T4102] usb 1-1: USB disconnect, device number 3 [ 190.904389][ T4102] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 191.045718][ T5994] loop2: detected capacity change from 0 to 512 [ 191.131578][ T5994] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 191.906322][ T5994] EXT4-fs (loop2): orphan cleanup on readonly fs [ 191.912575][ T5994] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.498: Block bitmap for bg 0 marked uninitialized [ 191.924726][ T5994] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 191.932494][ T5994] EXT4-fs (loop2): 1 orphan inode deleted [ 191.933457][ T5994] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.496623][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.497715][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.656206][ T6011] loop0: detected capacity change from 0 to 512 [ 192.685541][ T6011] EXT4-fs (loop0): Ignoring removed oldalloc option [ 192.686740][ T6011] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 192.688640][ T6011] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.743239][ T6011] EXT4-fs (loop0): 1 truncate cleaned up [ 192.744198][ T6011] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,bsdgroups,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000004000,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 192.788426][ T6011] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.503: corrupted in-inode xattr [ 192.800681][ T6017] loop2: detected capacity change from 0 to 4096 [ 192.847159][ T6011] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1760: inode #15: comm syz.0.503: unable to update i_inline_off [ 192.849549][ T6011] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 192.855928][ T6011] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #15: comm syz.0.503: corrupted in-inode xattr [ 192.866507][ T6011] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.503: corrupted in-inode xattr [ 192.935661][ T6018] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.996212][ T6017] cgroup: Bad value for 'name' [ 193.425220][ T6024] loop2: detected capacity change from 0 to 4096 [ 193.470293][ T6020] loop0: detected capacity change from 0 to 40427 [ 193.519769][ T6024] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 193.522094][ T6020] F2FS-fs (loop0): invalid crc value [ 193.557915][ T6020] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.615581][ T6020] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.830948][ T6043] loop0: detected capacity change from 0 to 4096 [ 195.726721][ T6052] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.033941][ T6055] loop2: detected capacity change from 0 to 40427 [ 196.637427][ T6055] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 196.638918][ T6055] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 196.641432][ T6055] F2FS-fs (loop2): invalid crc value [ 196.652013][ T6055] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.668339][ T6055] F2FS-fs (loop2): Start checkpoint disabled! [ 196.699276][ T6055] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 197.822141][ T6070] loop4: detected capacity change from 0 to 4096 [ 198.073943][ T6070] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.093818][ T6070] EXT4-fs (loop4): shut down requested (2) [ 202.529905][ T6129] loop4: detected capacity change from 0 to 16 [ 203.247294][ T6129] erofs: (device loop4): mounted with root inode @ nid 36. [ 203.255897][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 203.257740][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 203.259070][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 203.260912][ T6128] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 203.262347][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 203.263572][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 203.265044][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 203.266532][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 203.268118][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 203.269412][ T6128] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 203.270672][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 203.271914][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 203.273290][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 203.274635][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 203.276009][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 203.277277][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 203.278714][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 203.280035][ T6128] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 203.281357][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 203.282649][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 203.283907][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 203.285217][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 203.286577][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 203.288045][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 203.289338][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 203.291594][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 203.293039][ T6128] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 203.294393][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 203.295690][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 203.297347][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 203.298632][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 203.299937][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 203.301327][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 203.302714][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 203.304110][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 203.305389][ T6128] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 203.306830][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 203.308146][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 203.309343][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 203.310661][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 203.312039][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 203.313256][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 221183 of nid 36 [ 203.314612][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 203.316326][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 203.317830][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 203.319203][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 212991 of nid 36 [ 203.320707][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 203.322068][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 203.323475][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 203.324862][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 204799 of nid 36 [ 203.326646][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 203.328063][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 203.329442][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 203.330932][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 203.332593][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 203.333971][ T6128] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 203.335494][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 203.336890][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 203.338341][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 203.339728][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 203.340972][ T6128] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 203.342504][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 203.343782][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 203.345019][ T6128] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 203.346452][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 203.347703][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 203.349104][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 203.350491][ T6128] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 203.351755][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 203.353175][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 203.354620][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 203.356054][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 203.357556][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 203.359134][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 203.360618][ T6128] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 203.362095][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 203.363458][ T6128] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 203.365116][ T6128] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 203.366693][ T6128] attempt to access beyond end of device [ 203.366693][ T6128] loop4: rw=524288, want=848, limit=16 [ 203.368387][ T6128] attempt to access beyond end of device [ 203.368387][ T6128] loop4: rw=524288, want=13478624104, limit=16 [ 203.370081][ T6128] attempt to access beyond end of device [ 203.370081][ T6128] loop4: rw=524288, want=13478624080, limit=16 [ 203.371821][ T6128] attempt to access beyond end of device [ 203.371821][ T6128] loop4: rw=524288, want=40, limit=16 [ 203.373527][ T6128] attempt to access beyond end of device [ 203.373527][ T6128] loop4: rw=524288, want=96, limit=16 [ 203.375389][ T6128] attempt to access beyond end of device [ 203.375389][ T6128] loop4: rw=524288, want=32, limit=16 [ 205.715259][ T6147] loop3: detected capacity change from 0 to 1024 [ 206.226473][ T6147] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.711896][ T6165] loop4: detected capacity change from 0 to 40427 [ 207.749034][ T6165] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 207.750340][ T6165] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 207.787912][ T6165] F2FS-fs (loop4): invalid crc value [ 207.824353][ T6165] F2FS-fs (loop4): Found nat_bits in checkpoint [ 207.840629][ T6165] F2FS-fs (loop4): Start checkpoint disabled! [ 207.865497][ T6165] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 207.957178][ T6175] loop0: detected capacity change from 0 to 1024 [ 208.487944][ T6175] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.874059][ T6205] loop3: detected capacity change from 0 to 512 [ 211.137492][ T6205] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 211.143864][ T6205] EXT4-fs (loop3): orphan cleanup on readonly fs [ 211.150479][ T6205] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.561: Block bitmap for bg 0 marked uninitialized [ 211.685467][ T6205] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 211.707625][ T6205] EXT4-fs (loop3): 1 orphan inode deleted [ 211.712000][ T6205] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.751048][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 215.180923][ T6247] loop2: detected capacity change from 0 to 40427 [ 215.276211][ T6247] F2FS-fs (loop2): invalid crc value [ 215.447005][ T6247] F2FS-fs (loop2): Found nat_bits in checkpoint [ 215.515565][ T6247] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 216.805697][ T6270] loop2: detected capacity change from 0 to 512 [ 216.932130][ T6270] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 216.949692][ T6270] EXT4-fs (loop2): orphan cleanup on readonly fs [ 216.951484][ T6270] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.576: Block bitmap for bg 0 marked uninitialized [ 216.955993][ T6270] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 216.960172][ T6270] EXT4-fs (loop2): 1 orphan inode deleted [ 216.962455][ T6270] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.014381][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.576'. [ 221.523670][ T6317] loop1: detected capacity change from 0 to 512 [ 221.762446][ T6317] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 222.674922][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.676427][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.677949][ T6321] device bridge0 entered promiscuous mode [ 222.778477][ T6317] EXT4-fs (loop1): orphan cleanup on readonly fs [ 222.779972][ T6317] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.590: Block bitmap for bg 0 marked uninitialized [ 222.783877][ T6317] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 222.786360][ T6317] EXT4-fs (loop1): 1 orphan inode deleted [ 222.795685][ T6317] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.001108][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.590'. [ 229.624131][ T6386] loop4: detected capacity change from 0 to 512 [ 229.670969][ T6386] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 229.754543][ T6386] EXT4-fs (loop4): orphan cleanup on readonly fs [ 229.762019][ T6386] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.608: Block bitmap for bg 0 marked uninitialized [ 229.764779][ T6386] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 229.774589][ T6386] EXT4-fs (loop4): 1 orphan inode deleted [ 229.782262][ T6386] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.868024][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.608'. [ 233.326300][ T6398] loop4: detected capacity change from 0 to 40427 [ 233.404501][ T6398] F2FS-fs (loop4): invalid crc value [ 233.452897][ T6398] F2FS-fs (loop4): Found nat_bits in checkpoint [ 233.521925][ T6398] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 235.622138][ T6436] loop1: detected capacity change from 0 to 512 [ 235.652132][ T6436] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 235.683011][ T6347] Set syz1 is full, maxelem 65536 reached [ 235.698058][ T6436] EXT4-fs (loop1): orphan cleanup on readonly fs [ 235.700468][ T6436] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.621: Block bitmap for bg 0 marked uninitialized [ 235.707368][ T6436] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 235.919784][ T6436] EXT4-fs (loop1): 1 orphan inode deleted [ 235.933933][ T6436] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.582406][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 240.025099][ T6465] loop1: detected capacity change from 0 to 40427 [ 240.169912][ T6465] F2FS-fs (loop1): invalid crc value [ 240.232562][ T6465] F2FS-fs (loop1): Found nat_bits in checkpoint [ 240.311190][ T6465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 243.223992][ T6488] ODEBUG: Out of memory. ODEBUG disabled [ 244.360365][ T6505] loop3: detected capacity change from 0 to 512 [ 244.474412][ T6505] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 244.586401][ T6505] EXT4-fs (loop3): orphan cleanup on readonly fs [ 244.587599][ T6505] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.638: Block bitmap for bg 0 marked uninitialized [ 244.599690][ T6505] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 244.601437][ T6505] EXT4-fs (loop3): 1 orphan inode deleted [ 244.602285][ T6505] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.617071][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.638'. [ 244.855415][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 246.374404][ T25] Bluetooth: hci4: command 0x0406 tx timeout [ 246.864817][ T6521] loop1: detected capacity change from 0 to 40427 [ 246.893359][ T6521] F2FS-fs (loop1): invalid crc value [ 247.172077][ T6521] F2FS-fs (loop1): Found nat_bits in checkpoint [ 247.228375][ T6521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 250.483145][ T6567] loop2: detected capacity change from 0 to 512 [ 250.554243][ T6567] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 250.576130][ T6567] EXT4-fs (loop2): orphan cleanup on readonly fs [ 250.583488][ T6567] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.655: Block bitmap for bg 0 marked uninitialized [ 250.588680][ T6567] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 250.593560][ T6567] EXT4-fs (loop2): 1 orphan inode deleted [ 250.594436][ T6567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.670677][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 251.795798][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'. [ 252.867003][ T6488] Set syz1 is full, maxelem 65536 reached [ 253.966663][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.968793][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.262754][ T6619] loop0: detected capacity change from 0 to 512 [ 256.291756][ T6619] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 256.318707][ T6619] EXT4-fs (loop0): orphan cleanup on readonly fs [ 256.324190][ T6619] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.668: Block bitmap for bg 0 marked uninitialized [ 256.344520][ T6619] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 256.356308][ T6619] EXT4-fs (loop0): 1 orphan inode deleted [ 256.364635][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.413474][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 260.670252][ T6668] loop3: detected capacity change from 0 to 512 [ 260.700753][ T6668] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 260.713316][ T6668] EXT4-fs (loop3): orphan cleanup on readonly fs [ 260.714577][ T6668] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.682: Block bitmap for bg 0 marked uninitialized [ 260.745906][ T6668] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 260.759070][ T6668] EXT4-fs (loop3): 1 orphan inode deleted [ 260.759976][ T6668] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.807669][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 260.889009][ T6662] loop1: detected capacity change from 0 to 40427 [ 260.992295][ T6662] F2FS-fs (loop1): invalid crc value [ 261.027364][ T6662] F2FS-fs (loop1): Found nat_bits in checkpoint [ 261.077703][ T6662] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 266.248646][ T6726] loop4: detected capacity change from 0 to 512 [ 266.459783][ T6726] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 267.292370][ T6726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 267.293805][ T6726] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.696: Block bitmap for bg 0 marked uninitialized [ 267.297117][ T6726] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 267.304308][ T6726] EXT4-fs (loop4): 1 orphan inode deleted [ 267.305213][ T6726] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.429088][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 267.984578][ T6722] loop0: detected capacity change from 0 to 40427 [ 268.016790][ T6722] F2FS-fs (loop0): invalid crc value [ 268.038384][ T6722] F2FS-fs (loop0): Found nat_bits in checkpoint [ 268.064619][ T6722] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 272.939802][ T6783] loop2: detected capacity change from 0 to 512 [ 272.960314][ T6783] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 272.972375][ T6783] EXT4-fs (loop2): orphan cleanup on readonly fs [ 272.973593][ T6783] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.709: Block bitmap for bg 0 marked uninitialized [ 272.985399][ T6783] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 272.991869][ T6783] EXT4-fs (loop2): 1 orphan inode deleted [ 272.992636][ T6783] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.017942][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 278.302740][ T6760] Set syz1 is full, maxelem 65536 reached [ 281.239989][ T6846] loop3: detected capacity change from 0 to 4096 [ 281.602595][ T6846] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 282.230315][ T6852] loop2: detected capacity change from 0 to 128 [ 282.281048][ T6852] EXT4-fs warning (device loop2): ext4_fill_super:3980: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 282.283268][ T6852] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 285.824099][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.739'. [ 292.922647][ T6950] loop1: detected capacity change from 0 to 512 [ 292.964616][ T6950] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.197976][ T6950] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 293.199678][ T6950] FAT-fs (loop1): Filesystem has been set read-only [ 293.793563][ T6871] Set syz1 is full, maxelem 65536 reached [ 294.959502][ T6959] loop2: detected capacity change from 0 to 40427 [ 295.000798][ T6979] loop0: detected capacity change from 0 to 512 [ 295.004824][ T6980] loop4: detected capacity change from 0 to 512 [ 295.009209][ T6979] EXT4-fs (loop0): Ignoring removed nobh option [ 295.040938][ T6979] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.769: iget: bad i_size value: 38620345925642 [ 295.043580][ T6979] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.769: couldn't read orphan inode 15 (err -117) [ 295.053449][ T6979] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 295.061180][ T6980] EXT4-fs (loop4): Ignoring removed nobh option [ 295.068603][ T6959] F2FS-fs (loop2): invalid crc value [ 295.133898][ T6980] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.768: iget: bad i_size value: 38620345925642 [ 295.138069][ T6980] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.768: couldn't read orphan inode 15 (err -117) [ 295.141592][ T6980] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 295.249306][ T6959] F2FS-fs (loop2): Found nat_bits in checkpoint [ 295.844566][ T6959] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 297.443383][ T7009] loop1: detected capacity change from 0 to 512 [ 297.473518][ T7009] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 297.528669][ T7009] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.529936][ T7009] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.776: Block bitmap for bg 0 marked uninitialized [ 297.539393][ T7009] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 297.563722][ T7009] EXT4-fs (loop1): 1 orphan inode deleted [ 297.564657][ T7009] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.642870][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 298.321248][ T7018] loop3: detected capacity change from 0 to 64 [ 298.439510][ T7018] hfs: unable to load codepage "cp94)" [ 298.440665][ T7018] hfs: unable to parse mount options [ 299.703250][ T7027] loop3: detected capacity change from 0 to 40427 [ 299.705814][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 300.229152][ T7027] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 300.230486][ T7027] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 300.234357][ T7027] F2FS-fs (loop3): invalid crc value [ 300.315705][ T7027] F2FS-fs (loop3): Found nat_bits in checkpoint [ 300.334447][ T7027] F2FS-fs (loop3): Start checkpoint disabled! [ 300.350446][ T7027] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 301.796035][ T7042] loop4: detected capacity change from 0 to 32768 [ 301.938886][ T7042] XFS (loop4): Mounting V5 Filesystem [ 302.086195][ T7042] XFS (loop4): Ending clean mount [ 302.089099][ T7042] XFS (loop4): Quotacheck needed: Please wait. [ 302.143702][ T7042] XFS (loop4): Quotacheck: Done. [ 302.239429][ T7062] loop3: detected capacity change from 0 to 1024 [ 302.257036][ T4044] XFS (loop4): Unmounting Filesystem [ 302.330412][ T7062] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.647076][ T7002] Set syz1 is full, maxelem 65536 reached [ 303.315123][ T7067] loop3: detected capacity change from 0 to 40427 [ 303.375886][ T7067] F2FS-fs (loop3): invalid crc value [ 303.518145][ T7067] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.908468][ T7086] loop0: detected capacity change from 0 to 40427 [ 303.914664][ T7067] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 303.948506][ T7086] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 303.950619][ T7086] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 303.953496][ T7086] F2FS-fs (loop0): invalid crc value [ 303.968318][ T7086] F2FS-fs (loop0): Found nat_bits in checkpoint [ 303.989410][ T7086] F2FS-fs (loop0): Start checkpoint disabled! [ 303.995658][ T7086] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 306.969866][ T7117] loop4: detected capacity change from 0 to 512 [ 307.118209][ T7117] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 307.168574][ T7117] EXT4-fs (loop4): orphan cleanup on readonly fs [ 307.170203][ T7117] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.803: Block bitmap for bg 0 marked uninitialized [ 307.173015][ T7117] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 307.175792][ T7117] EXT4-fs (loop4): 1 orphan inode deleted [ 307.176778][ T7117] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 307.187533][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 307.883976][ T7128] loop2: detected capacity change from 0 to 40427 [ 307.942093][ T7128] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 307.943745][ T7128] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 307.946743][ T7128] F2FS-fs (loop2): invalid crc value [ 307.956855][ T7128] F2FS-fs (loop2): Found nat_bits in checkpoint [ 307.969825][ T7128] F2FS-fs (loop2): Start checkpoint disabled! [ 307.976526][ T7128] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 308.333606][ T7146] udc-core: couldn't find an available UDC or it's busy [ 308.334740][ T7146] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 308.779827][ T7139] loop0: detected capacity change from 0 to 32768 [ 309.287641][ T7139] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.812 (7139) [ 309.549862][ T7154] loop3: detected capacity change from 0 to 512 [ 309.575204][ T7139] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 309.576924][ T7139] BTRFS info (device loop0): allowing degraded mounts [ 309.578027][ T7139] BTRFS info (device loop0): using free space tree [ 309.579011][ T7139] BTRFS info (device loop0): has skinny extents [ 309.602058][ T7154] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 309.770141][ T7154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 309.771375][ T7154] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.816: Block bitmap for bg 0 marked uninitialized [ 309.786251][ T7154] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 309.789535][ T7154] EXT4-fs (loop3): 1 orphan inode deleted [ 309.790440][ T7154] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 309.808438][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 310.015821][ T7139] BTRFS info (device loop0): enabling ssd optimizations [ 312.865028][ T7205] netlink: 2980 bytes leftover after parsing attributes in process `syz.1.824'. [ 313.215709][ T7216] loop4: detected capacity change from 0 to 512 [ 313.249146][ T7216] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 313.261980][ T7216] EXT4-fs (loop4): orphan cleanup on readonly fs [ 313.263522][ T7216] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.829: Block bitmap for bg 0 marked uninitialized [ 313.295313][ T7216] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 313.305183][ T7216] EXT4-fs (loop4): 1 orphan inode deleted [ 313.311061][ T7216] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.346488][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 314.999524][ T7233] udc-core: couldn't find an available UDC or it's busy [ 315.000720][ T7233] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 315.438784][ T7236] loop3: detected capacity change from 0 to 40427 [ 315.901425][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.902566][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.911217][ T7236] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 315.912627][ T7236] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 315.915251][ T7236] F2FS-fs (loop3): invalid crc value [ 315.938278][ T7236] F2FS-fs (loop3): Found nat_bits in checkpoint [ 315.951260][ T7236] F2FS-fs (loop3): Start checkpoint disabled! [ 315.952082][ T7240] loop2: detected capacity change from 0 to 1024 [ 315.973662][ T7236] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 315.996328][ T7240] hfsplus: session requires an argument [ 315.997442][ T7240] hfsplus: unable to parse mount options [ 318.226771][ T7263] loop3: detected capacity change from 0 to 512 [ 318.254710][ T7263] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 318.266112][ T7263] EXT4-fs (loop3): orphan cleanup on readonly fs [ 318.267225][ T7263] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.842: Block bitmap for bg 0 marked uninitialized [ 318.275979][ T7263] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 318.292810][ T7263] EXT4-fs (loop3): 1 orphan inode deleted [ 318.293711][ T7263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.318014][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 321.454722][ T7284] loop4: detected capacity change from 0 to 40427 [ 321.493559][ T7284] F2FS-fs (loop4): invalid crc value [ 321.550775][ T7284] F2FS-fs (loop4): Found nat_bits in checkpoint [ 321.613315][ T7286] loop3: detected capacity change from 0 to 40427 [ 321.617215][ T7284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 321.782893][ T7286] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 321.784255][ T7286] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 321.787268][ T7286] F2FS-fs (loop3): invalid crc value [ 321.866463][ T7286] F2FS-fs (loop3): Found nat_bits in checkpoint [ 321.915640][ T7286] F2FS-fs (loop3): Start checkpoint disabled! [ 321.961371][ T7286] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 324.983280][ T7258] Set syz1 is full, maxelem 65536 reached [ 325.324979][ T7344] block device autoloading is deprecated and will be removed. [ 325.335891][ T7342] loop4: detected capacity change from 0 to 40427 [ 325.411507][ T7342] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 325.412846][ T7342] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 325.417154][ T7342] F2FS-fs (loop4): invalid crc value [ 325.424312][ T7342] F2FS-fs (loop4): Found nat_bits in checkpoint [ 325.443526][ T7342] F2FS-fs (loop4): Start checkpoint disabled! [ 325.459465][ T7342] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 325.591359][ T7332] loop0: detected capacity change from 0 to 32768 [ 325.655223][ T7332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.859 (7332) [ 326.356038][ T7332] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 326.357351][ T7332] BTRFS info (device loop0): using free space tree [ 326.358391][ T7332] BTRFS info (device loop0): has skinny extents [ 327.935582][ T7386] loop3: detected capacity change from 0 to 512 [ 327.962611][ T7332] BTRFS error (device loop0): open_ctree failed: -12 [ 327.990397][ T7386] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 328.023574][ T7386] EXT4-fs (loop3): orphan cleanup on readonly fs [ 328.024857][ T7386] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.871: Block bitmap for bg 0 marked uninitialized [ 328.029295][ T7386] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 328.043688][ T7386] EXT4-fs (loop3): 1 orphan inode deleted [ 328.164376][ T4231] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4231) [ 328.166510][ T7386] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.226752][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 328.728851][ T7401] loop2: detected capacity change from 0 to 2048 [ 328.773758][ T7401] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 328.783833][ T7401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.171194][ T7372] loop1: detected capacity change from 0 to 40427 [ 329.882939][ T7414] loop0: detected capacity change from 0 to 40427 [ 330.438462][ T7414] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 330.439844][ T7414] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 330.443290][ T7414] F2FS-fs (loop0): invalid crc value [ 330.538204][ T7414] F2FS-fs (loop0): Found nat_bits in checkpoint [ 330.552206][ T7414] F2FS-fs (loop0): Start checkpoint disabled! [ 330.558996][ T7414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 330.753243][ T7430] udc-core: couldn't find an available UDC or it's busy [ 330.754405][ T7430] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 332.608735][ T7448] loop3: detected capacity change from 0 to 1024 [ 332.617983][ T7448] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 332.695996][ T7448] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 333.508221][ T7465] loop0: detected capacity change from 0 to 512 [ 333.527750][ T7465] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 333.576241][ T7465] EXT4-fs (loop0): orphan cleanup on readonly fs [ 333.577825][ T7465] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.886: Block bitmap for bg 0 marked uninitialized [ 333.580735][ T7465] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 333.593068][ T7465] EXT4-fs (loop0): 1 orphan inode deleted [ 333.597203][ T7465] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 333.854588][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 334.109842][ T7475] loop1: detected capacity change from 0 to 40427 [ 334.122010][ T7475] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 334.123388][ T7475] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 334.126506][ T7475] F2FS-fs (loop1): invalid crc value [ 334.154412][ T7475] F2FS-fs (loop1): Found nat_bits in checkpoint [ 334.169556][ T7475] F2FS-fs (loop1): Start checkpoint disabled! [ 334.184443][ T7478] loop3: detected capacity change from 0 to 4096 [ 334.185578][ T7475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 335.076842][ T7478] ntfs3: Unknown parameter 'prÚulloc' [ 336.956503][ T7527] loop1: detected capacity change from 0 to 512 [ 337.009199][ T7527] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 337.203466][ T7527] EXT4-fs (loop1): orphan cleanup on readonly fs [ 337.204773][ T7527] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.908: Block bitmap for bg 0 marked uninitialized [ 337.221290][ T7527] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 337.230800][ T7527] EXT4-fs (loop1): 1 orphan inode deleted [ 337.231830][ T7527] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.274544][ T7532] loop2: detected capacity change from 0 to 40427 [ 337.297251][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 337.338590][ T7532] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 337.340054][ T7532] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 337.384151][ T7532] F2FS-fs (loop2): invalid crc value [ 337.400515][ T7532] F2FS-fs (loop2): Found nat_bits in checkpoint [ 337.414598][ T7532] F2FS-fs (loop2): Start checkpoint disabled! [ 337.443146][ T7532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 339.593036][ T7555] loop1: detected capacity change from 0 to 40427 [ 339.691245][ T7555] F2FS-fs (loop1): invalid crc value [ 339.737159][ T7555] F2FS-fs (loop1): Found nat_bits in checkpoint [ 339.804611][ T7555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 340.750041][ T7582] loop4: detected capacity change from 0 to 512 [ 340.799036][ T7582] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 340.862088][ T7582] EXT4-fs (loop4): orphan cleanup on readonly fs [ 340.863478][ T7582] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.924: Block bitmap for bg 0 marked uninitialized [ 340.868236][ T7582] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 340.870326][ T7582] EXT4-fs (loop4): 1 orphan inode deleted [ 340.871298][ T7582] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.906696][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 340.945608][ T7580] loop0: detected capacity change from 0 to 40427 [ 341.085047][ T7580] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 341.086511][ T7580] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 341.103538][ T7580] F2FS-fs (loop0): invalid crc value [ 341.124691][ T7580] F2FS-fs (loop0): Found nat_bits in checkpoint [ 341.151493][ T7580] F2FS-fs (loop0): Start checkpoint disabled! [ 341.154045][ T7580] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 341.810160][ T7598] cgroup: fork rejected by pids controller in /syz4 [ 342.443610][ T7525] Set syz1 is full, maxelem 65536 reached [ 343.292621][ T7620] loop1: detected capacity change from 0 to 40427 [ 343.378846][ T7620] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 343.380281][ T7620] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 343.383003][ T7620] F2FS-fs (loop1): invalid crc value [ 343.401046][ T7620] F2FS-fs (loop1): Found nat_bits in checkpoint [ 343.419668][ T7620] F2FS-fs (loop1): Start checkpoint disabled! [ 343.427153][ T7620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 343.759075][ T7630] device wg2 entered promiscuous mode [ 344.101207][ T7637] loop0: detected capacity change from 0 to 512 [ 344.126908][ T7615] chnl_net:caif_netlink_parms(): no params data found [ 344.160993][ T7637] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 344.176618][ T7637] EXT4-fs (loop0): orphan cleanup on readonly fs [ 344.181199][ T7637] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.940: Block bitmap for bg 0 marked uninitialized [ 344.203299][ T7637] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 344.214662][ T7637] EXT4-fs (loop0): 1 orphan inode deleted [ 344.226404][ T7637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.245484][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.247205][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.249044][ T7615] device bridge_slave_0 entered promiscuous mode [ 344.267886][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.276486][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.278541][ T7615] device bridge_slave_1 entered promiscuous mode [ 344.320560][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 344.513738][ T7615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.522233][ T7615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.626988][ T7615] team0: Port device team_slave_0 added [ 344.630865][ T7615] team0: Port device team_slave_1 added [ 344.693170][ T7615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.696511][ T7615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.708034][ T7615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.715297][ T7615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.731488][ T7615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.747422][ T7615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.897689][ T7615] device hsr_slave_0 entered promiscuous mode [ 345.104313][ T7615] device hsr_slave_1 entered promiscuous mode [ 345.575725][ T7615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.576323][ T4078] Bluetooth: hci3: command 0x0409 tx timeout [ 345.577011][ T7615] Cannot create hsr debugfs directory [ 346.085467][ T7615] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.177839][ T7615] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.243504][ T7659] loop3: detected capacity change from 0 to 40427 [ 346.264086][ T7659] F2FS-fs (loop3): invalid crc value [ 346.298940][ T7615] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.312203][ T7659] F2FS-fs (loop3): Found nat_bits in checkpoint [ 346.372409][ T7659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 346.399893][ T7615] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.714246][ T7615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.828296][ T7615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.934399][ T7615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.978951][ T7615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.390884][ T7615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.425043][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.426953][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.443228][ T7615] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.466831][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.470213][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.473104][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.474343][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.498453][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.500311][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.510707][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.521524][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.522634][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.546516][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.548824][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.569564][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.591315][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.615617][ T4094] Bluetooth: hci3: command 0x041b tx timeout [ 347.624276][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.627154][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.636749][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.644904][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.658020][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.699459][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.729109][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.733556][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.849133][ T7702] device syzkaller0 entered promiscuous mode [ 348.010630][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.011867][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.040384][ T7615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.345564][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.347473][ T1374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.387288][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.389103][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.390845][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.392375][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.411000][ T7615] device veth0_vlan entered promiscuous mode [ 349.719552][ T4078] Bluetooth: hci3: command 0x040f tx timeout [ 350.382321][ T7615] device veth1_vlan entered promiscuous mode [ 350.423568][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 350.502886][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.504880][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.597142][ T7615] device veth0_macvtap entered promiscuous mode [ 350.620545][ T7615] device veth1_macvtap entered promiscuous mode [ 350.683551][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.685140][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.695519][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.697186][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.698890][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.700544][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.702034][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.703752][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.705228][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.725506][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.730067][ T7615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.742813][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.744664][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.748075][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.752063][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.908646][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.919068][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.924015][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.932238][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.939601][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.945883][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.951958][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.959195][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.964234][ T7615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.970304][ T7615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.987475][ T7615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.020369][ T7615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.029163][ T7615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.034759][ T7615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.044992][ T7615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.265605][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.267055][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.346732][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.348599][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.350296][ T1752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.364861][ T1752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.373033][ T1752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.396809][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.471976][ T4078] Bluetooth: hci3: command 0x0419 tx timeout [ 353.172918][ T7776] mmap: syz.1.981 (7776) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 353.216921][ T7765] loop3: detected capacity change from 0 to 40427 [ 353.239861][ T7765] F2FS-fs (loop3): invalid crc value [ 353.272812][ T7765] F2FS-fs (loop3): Found nat_bits in checkpoint [ 353.312361][ T7765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 353.754775][ T4354] device hsr_slave_0 left promiscuous mode [ 353.810908][ T4354] device hsr_slave_1 left promiscuous mode [ 353.895891][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.897291][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.901749][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.902796][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.987022][ T4354] device bridge_slave_1 left promiscuous mode [ 353.997584][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.127676][ T4354] device bridge_slave_0 left promiscuous mode [ 354.128928][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.550856][ T7803] loop2: detected capacity change from 0 to 8192 [ 354.565919][ T4354] device veth1_macvtap left promiscuous mode [ 354.567137][ T4354] device veth0_macvtap left promiscuous mode [ 354.568123][ T4354] device veth1_vlan left promiscuous mode [ 354.568956][ T4354] device veth0_vlan left promiscuous mode [ 355.009643][ T7807] loop2: detected capacity change from 0 to 512 [ 355.038985][ T7807] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 355.040350][ T7807] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -6 [ 355.424543][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 355.441811][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 355.459069][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.513864][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.789602][ T4354] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 356.562117][ T4354] bond0 (unregistering): Released all slaves [ 356.983287][ T7843] loop3: detected capacity change from 0 to 1024 [ 357.213576][ T7843] hfsplus: failed to load root directory [ 357.248074][ T7843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.513526][ T7910] "syz.1.1027" (7910) uses obsolete ecb(arc4) skcipher [ 361.423949][ T7924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1031'. [ 363.525828][ T7960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.527215][ T7960] IPv6: NLM_F_CREATE should be set when creating new route [ 363.687317][ T7968] capability: warning: `syz.1.1046' uses deprecated v2 capabilities in a way that may be insecure [ 364.702608][ T7986] loop1: detected capacity change from 0 to 512 [ 364.732063][ T7986] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 364.767424][ T7986] EXT4-fs (loop1): orphan cleanup on readonly fs [ 364.768641][ T7986] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.1052: Block bitmap for bg 0 marked uninitialized [ 364.783891][ T7986] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 364.806037][ T7986] EXT4-fs (loop1): 1 orphan inode deleted [ 364.806941][ T7986] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.859019][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 366.325059][ T8002] loop1: detected capacity change from 0 to 64 [ 366.412594][ C1] ------------[ cut here ]------------ [ 366.413530][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 366.415646][ C1] WARNING: CPU: 1 PID: 7990 at net/mac80211/rate.c:376 __rate_control_send_low+0x574/0x770 [ 366.417328][ C1] Modules linked in: [ 366.418062][ C1] CPU: 1 PID: 7990 Comm: syz.3.1054 Not tainted 5.15.189-syzkaller #0 [ 366.419356][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.421057][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 366.422301][ C1] pc : __rate_control_send_low+0x574/0x770 [ 366.423255][ C1] lr : __rate_control_send_low+0x574/0x770 [ 366.424232][ C1] sp : ffff800008017670 [ 366.424923][ C1] x29: ffff8000080176c0 x28: ffff0000d2cab370 x27: 000000000000000c [ 366.426160][ C1] x26: dfff800000000000 x25: 0000000000000000 x24: dfff800000000000 [ 366.427477][ C1] x23: ffff0000f7ffcde8 x22: 0000000000000020 x21: 000000000000000c [ 366.428801][ C1] x20: ffff0000d2cab378 x19: 0000000000000fff x18: 0000000000000101 [ 366.430173][ C1] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 366.431462][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 366.432560][ C1] x11: 0000000000000100 x10: 0000000000000000 x9 : 872c8991ef319000 [ 366.433915][ C1] x8 : 872c8991ef319000 x7 : 0000000000000001 x6 : 0000000000000001 [ 366.435228][ C1] x5 : ffff800008016f58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 366.436471][ C1] x2 : 0000000000000001 x1 : 0000000100000100 x0 : 0000000000000059 [ 366.437690][ C1] Call trace: [ 366.438274][ C1] __rate_control_send_low+0x574/0x770 [ 366.439190][ C1] rate_control_send_low+0x164/0x684 [ 366.440026][ C1] rate_control_get_rate+0x1a0/0x4b8 [ 366.440825][ C1] __ieee80211_beacon_get+0x1170/0x19dc [ 366.441770][ C1] ieee80211_beacon_get_tim+0x5c/0x790 [ 366.442703][ C1] mac80211_hwsim_beacon_tx+0x10c/0x7ac [ 366.443639][ C1] __iterate_interfaces+0x204/0x484 [ 366.444410][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 366.445459][ C1] mac80211_hwsim_beacon+0x90/0x174 [ 366.446274][ C1] __hrtimer_run_queues+0x428/0xb6c [ 366.447163][ C1] hrtimer_run_softirq+0x160/0x400 [ 366.447987][ C1] handle_softirqs+0x344/0xbf0 [ 366.448717][ C1] __irq_exit_rcu+0x240/0x440 [ 366.449536][ C1] irq_exit+0x14/0x88 [ 366.450155][ C1] handle_domain_irq+0x14c/0x1fc [ 366.450872][ C1] gic_handle_irq+0x78/0x1c8 [ 366.451574][ C1] call_on_irq_stack+0x24/0x30 [ 366.452345][ C1] do_interrupt_handler+0x6c/0x88 [ 366.453081][ C1] el1_interrupt+0x30/0x58 [ 366.453769][ C1] el1h_64_irq_handler+0x18/0x24 [ 366.454510][ C1] el1h_64_irq+0x78/0x7c [ 366.455200][ C1] lock_release+0x4a0/0x8e8 [ 366.455887][ C1] fs_reclaim_acquire+0x130/0x1c4 [ 366.456737][ C1] prepare_alloc_pages+0x134/0x460 [ 366.457485][ C1] __alloc_pages+0x108/0x470 [ 366.458242][ C1] alloc_pages_vma+0x284/0x7a8 [ 366.458937][ C1] shmem_alloc_and_acct_page+0x38c/0xac4 [ 366.459791][ C1] shmem_getpage_gfp+0x1028/0x1ef0 [ 366.460528][ C1] shmem_write_begin+0xe0/0x29c [ 366.461371][ C1] generic_perform_write+0x204/0x480 [ 366.462192][ C1] __generic_file_write_iter+0x23c/0x454 [ 366.463207][ C1] generic_file_write_iter+0xb0/0x1b4 [ 366.464089][ C1] vfs_write+0x7c8/0xa2c [ 366.464717][ C1] ksys_write+0x120/0x210 [ 366.465375][ C1] __arm64_sys_write+0x7c/0x90 [ 366.466108][ C1] invoke_syscall+0x98/0x2b8 [ 366.466789][ C1] el0_svc_common+0x138/0x258 [ 366.467649][ C1] do_el0_svc+0x58/0x14c [ 366.468363][ C1] el0_svc+0x78/0x1e0 [ 366.468975][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 366.469897][ C1] el0t_64_sync+0x1a0/0x1a4 [ 366.470495][ C1] irq event stamp: 67637 [ 366.471035][ C1] hardirqs last enabled at (67636): [] __up_console_sem+0xb4/0x100 [ 366.472531][ C1] hardirqs last disabled at (67637): [] el1_dbg+0x24/0x80 [ 366.473824][ C1] softirqs last enabled at (64636): [] handle_softirqs+0xa4c/0xbf0 [ 366.475296][ C1] softirqs last disabled at (67603): [] __irq_exit_rcu+0x240/0x440 [ 366.476755][ C1] ---[ end trace 214b1e1a4ad30a76 ]--- [ 366.577378][ T7990] loop3: detected capacity change from 0 to 32768 [ 366.632573][ T7990] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 366.704613][ T7990] udc-core: couldn't find an available UDC or it's busy [ 366.712062][ T7990] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 367.266789][ T4045] ocfs2: Unmounting device (7,3) on (node local) [ 367.329851][ T148] attempt to access beyond end of device [ 367.329851][ T148] loop1: rw=1, want=4177, limit=64 [ 367.331723][ T148] Buffer I/O error on dev loop1, logical block 4176, lost async page write [ 367.333063][ T148] attempt to access beyond end of device [ 367.333063][ T148] loop1: rw=1, want=4178, limit=64 [ 367.335205][ T148] Buffer I/O error on dev loop1, logical block 4177, lost async page write [ 367.341133][ T148] attempt to access beyond end of device [ 367.341133][ T148] loop1: rw=1, want=4179, limit=64 [ 367.342941][ T148] Buffer I/O error on dev loop1, logical block 4178, lost async page write [ 367.344312][ T148] attempt to access beyond end of device [ 367.344312][ T148] loop1: rw=1, want=4180, limit=64 [ 367.355559][ T148] Buffer I/O error on dev loop1, logical block 4179, lost async page write [ 367.364915][ T148] attempt to access beyond end of device [ 367.364915][ T148] loop1: rw=2049, want=4177, limit=64 [ 367.367153][ T148] Buffer I/O error on dev loop1, logical block 4176, lost async page write [ 367.368589][ T148] attempt to access beyond end of device [ 367.368589][ T148] loop1: rw=2049, want=4178, limit=64 [ 367.370101][ T148] Buffer I/O error on dev loop1, logical block 4177, lost async page write [ 367.371473][ T148] attempt to access beyond end of device [ 367.371473][ T148] loop1: rw=2049, want=4179, limit=64 [ 367.373203][ T148] Buffer I/O error on dev loop1, logical block 4178, lost async page write [ 367.374572][ T148] attempt to access beyond end of device [ 367.374572][ T148] loop1: rw=2049, want=4180, limit=64 [ 367.395419][ T148] Buffer I/O error on dev loop1, logical block 4179, lost async page write