last executing test programs: 5m43.608304497s ago: executing program 1 (id=144): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, 0x0, 0x0, 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x0, 0xf, 0x1}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 5m43.451205809s ago: executing program 1 (id=150): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="b3c7612122a38f78ed803d60c0f0a6c7bdd030c4", 0x14}, {&(0x7f0000000300)="faa1960eb20987610663550cc69cb8838b2b34196fc7847ba4692117277283adfb568d05a8ccf2c596188395a2c0531da21d27a36b92f648762fa84738049b9b8fd4c00b9903b3af69149fefb48c2e7394b67c112fc36ec72199", 0x5a}, {&(0x7f0000000280)="d6dcb41bd4", 0x5}, {&(0x7f0000000380)="a447bb30c8fd79df941bf099ca52243dd226a84db7a1c75b509624bdca29ac83f9bf48dfff6361e143a48e7522653d02ec1345865273fca3ce1c973f8f2a82fec827b471a0357eeeb8caf12a36207c601f", 0x51}, {&(0x7f0000000440)="f9d4488fba252a17e5156282709e35e5c66ad63fcc4b53cef927ccad", 0x1c}, {&(0x7f0000000480)="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", 0xffd}, {&(0x7f0000005280)="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", 0xfdc}], 0x7}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b40)="9ef5f516b5", 0x5}, {&(0x7f0000001b80)="6c3e3aa2ed785b67f300040000000000003683b7493feeccab436e6925fe33e9a76d6efe5961c56cf936d7136a3653d28c117c816b48e7d9f8ebe6c734bc317d229d5dc02b2c1b3f631c775ce9007b0e881f962e6aa37e5193986228c59f4f1695409c8490a7a42c571157e4d3b4871e10aff422552b5dec841435ce946a13277161c2e3b57e0bed43b367143dbb447d6baf85d0b5e4a07381057e3ffb3a2e4c9ae4c7f1a05b638e81fdeebfb13706683e3ad4b9182733e24dca9cf8cfdd28ddb096834233a722d10ce231e8099ecb8c3d54a5b890ef201b6d5294baf26d4374f5129101968c64", 0xe7}, {&(0x7f0000001c80)="12dc3e9c22bb373f8208715d9af59209a1c81c7bc144e626e4677eff84255b7041449388da3e220a7147d14e01e7", 0x2e}, {&(0x7f00000043c0)="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", 0xeb3}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) 5m42.37744842s ago: executing program 1 (id=153): r0 = socket$inet6(0xa, 0x3, 0x3c) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x8, 0x10000, 0x0, 0xffff82c4, 0xcc7, 0x108, 0x2, 0xa, 0x100, 0x212, 0x8, 0x1de, 0x4000001, 0x7fffffff, 0x101, 0x1, 0x1a449, 0x2, 0x40000003, 0x89, 0x2, 0xf23, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x6, 0x80004, 0xfffffff8]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 5m41.174777751s ago: executing program 1 (id=155): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 5m40.670607286s ago: executing program 1 (id=162): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r3}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f000100", 0x22) 5m38.526013093s ago: executing program 1 (id=170): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 5m37.698596025s ago: executing program 32 (id=170): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 5m36.561917833s ago: executing program 3 (id=178): setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5c5, 0x0, 0x81, 0x3, 0x5}, 0x14) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x4, 0x2}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) read(r2, &(0x7f0000000140)=""/166, 0xa6) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) gettid() r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) r5 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') 5m35.237886061s ago: executing program 3 (id=181): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0xef) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000140)={0x1, 0x0, {0xd, 0x7, 0xaf7, 0xfffff28a}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) io_getevents(0x0, 0xff, 0x5, &(0x7f0000000780)=[{}, {}, {}, {}, {}], &(0x7f0000000080)) connect$inet(r6, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000100)) 5m34.316840144s ago: executing program 3 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5m34.049123189s ago: executing program 3 (id=190): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@auto_da_alloc}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5m32.216724046s ago: executing program 3 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x1) rt_tgsigqueueinfo(r0, r0, 0x2e, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 5m27.76118927s ago: executing program 3 (id=208): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x400c011) 5m27.043743278s ago: executing program 33 (id=208): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x400c011) 2m48.644178976s ago: executing program 2 (id=759): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="d40000001800010000000000000000000200000047a9d8f62e124e06a8d62c3c5ffca1fe33d7d5403dbe7a2706f391e0385392aae1b20672a1cc69fc246a0d37d945b56053a4a9c230c3086cc858546f458967ba3621eb0d930a510bb0dcff9dabeb74709543f17bfe576a1414f4ca9a35dfc3114a3377195d14435afe4fc1dacee2ba192356b131eefab17ff0ac0081968c36d05df1b8b6969808888019fb5f65f805000000000000009f36f356d20bde683d1d2a95d547095b7a8690c34efcb53cb8de0ab1f7000000000000"], 0xd4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 2m47.630486089s ago: executing program 2 (id=761): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2m47.459565104s ago: executing program 2 (id=762): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r4, r4, 0x0, 0x40008) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m46.109912119s ago: executing program 2 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2800}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m44.68206813s ago: executing program 2 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001060030c0000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@data_writeback}, {@localflocks}, {@localflocks}, {@dir_resv_level}]}, 0x9, 0x4430, &(0x7f00000088c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x2086) write$P9_RRENAME(r3, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',barrier,nls=cp862,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x0000000000000007,part=0x00000000000\x00\x00\x00\x004,\x00'], 0x20, 0x6fe, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc9}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x28}, 0x94) 2m43.024018714s ago: executing program 2 (id=774): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x20a) 2m27.337502928s ago: executing program 34 (id=774): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x20a) 19.358287484s ago: executing program 6 (id=1132): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 17.043211474s ago: executing program 4 (id=1140): socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f0000001000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180700000000000000000000000000009500000000000000a7518bdc69a23cb3e1130030c2175eb9b513982a7bf8136085b8a5a7bd3d3cca2a7a26f2626957b78aa1e86fdaaebac331a36d000d903f0dc9056bdd0d0ec453215e19bd1c761b5e7b6dd0ef4007aaf1a409547576742eb7b62639562a32a3187a824635ec0be4c1221465ddda52861c343781dd5175968267d41aa146052e05caa1e6b4e80ca1f08a196870142b41dfa490aa7d5395df93d8a8886b96c4b10b6669fa8cbf48e86ac8723d17316e36583ce0c3530843ed8e0ed47748372bff17b4752b19cf648a312f0228f5beac21890876a91851cd58be1ae7b24864a2e797124ab9da49c62d39a0b2223c3433c1288651400f27d9470e6192d74067716856292d1a1c24b19dfd9f47243cdb3a5ce66d93e57500"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080), &(0x7f0000000180)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/252, 0xfc, 0x0, &(0x7f0000000380)=""/65, 0x41}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 15.965521976s ago: executing program 4 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x48}}, 0x0) 15.869644246s ago: executing program 4 (id=1146): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000"], 0x54}}, 0x0) 11.822296395s ago: executing program 0 (id=1157): socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r6) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000180)="f74938d6381b26d0631cb8ecb75f3bb6016b56c094f2a096629d1466f02b035e88970fed435a", 0x26}, {&(0x7f00000001c0)="299e6fcf9081dcf0aa630c385f4e644d8de8c960f6a154", 0x17}, {&(0x7f0000000240)="ac241ba5f5cd81fc93b03377baf41f162816e5125b0f56e831a2810efc02659621632a05ed9ca75179e0d323dfa9294d1cb7847086e1f7095efaf96bea0a933e5fbc212d6c5587d919bfd3ff656205b62db81c51e5d73a4d68cf8b18b5bc6f87c11a70e53c7b14263dbcd9742c1d049b55c15c1f3665c363c22f4607373f7fe381438658b6d9dffbd26cf375c67a1cf2d06961db00436519a64c56536c98372d18bb11d4bec070a375d7c8d391de83f811bcea65111237aea454de3233f6e58bebe4ffd50552042104519ad6b626d81e98f5143846277ef3a2d3d7e1c1fc5cf8616ef61c3d64fb91ba00b1d5a35ae30e16a963", 0xf3}, {&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000440)="d4056963e2c4b1c63943ad3df4702788e780c96d074d4bea5b3ee975d402d18d8f9e7cdb8309936e7d8c9323d4a6776b630264f364f7ab475339a6ca07ccc6996e93b3c4605212d4632f26540c1e14c4e183d7d1a64c8e412ed3da155ca05a1203d7ce79dba3dfff1d59d0e8a78703bd2220ec792890b1fd067c9088fae80877c094c2bb", 0x84}, {&(0x7f0000000500)="ecc5f4fa7d", 0x5}, {&(0x7f0000000580)="51b9be24351d3dcb7de934a83c9eeb30a4c7afa6b5c69aa91c81a0e2c7f329f9851bbcf843602bf6cf11f0e99c6c264a7730fccb589b664a3894db523b6a226f98091849bb34bc7527a2fa4eaacbfc8bee9e3b4227bb6dcfaab1b910b9f45d83b32123e090b18ef8ad8f4f72f319ff90f0f9072ec3a2312797", 0x79}], 0x7) 11.761073178s ago: executing program 4 (id=1158): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x4000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) 10.790183804s ago: executing program 4 (id=1163): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x4000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) 9.792212419s ago: executing program 4 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) kexec_load(0x645f80000, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0xa, 0xdc3b}], 0x3e0000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xfffffffffffffffd}, {0x0, 0x8, 0xffffffffffffffff, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x0, 0xdc6}}, 0xe8) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 9.454052073s ago: executing program 6 (id=1165): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x4000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 8.242344334s ago: executing program 5 (id=1167): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 7.169658004s ago: executing program 6 (id=1168): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000"], 0x54}}, 0x0) 6.95813438s ago: executing program 5 (id=1169): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) 6.915955827s ago: executing program 5 (id=1170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@data_writeback}, {@localflocks}, {@localflocks}, {@dir_resv_level}]}, 0x9, 0x4430, &(0x7f00000088c0)="$eJzs3c9PXNUeAPBzL/QV+to+6OuiL3nJm+Q1MVFDoCuVJlJKS6HFmmob42Y6wLRFB6aBwbjoAndNXJm4MC4aTdyxali4rX+CG5d13agLNyYmjZiZuQNzL4yMhAFbP58Fl3t+D997z5y7uJw4Ubkzt5SbW8oVFnLlmVtLZ3IflEvL88UQ75Nt+z+0f/3Tnk5cJwd97f2dXT1/8a0bZ0L4Zva7J+vr6+uhqjskotBsqOn3X36+N9N8bIhDWrXd0FHvhhBObhlXVVcI4Z2v65/iXJI2mhx7QwjHkk94497HN3N7NJqHj4tn80+n7q8Nn55cfbDW+rNHIXxe+s/Lt+d//H/X8Pcv7lH3AAAAAAAAAAAAAAAAAAA848avXb3+5uBQeBSF7tVo6/u648mx1fux63vmf53/sAAAAAAAAAAAAAAAAAAAAPAXtfn+fy46sc37/2PJcaRF/fXXOz9GOmfijatjFwaHkv3foy35ryRJP53rCv3b7Pue3f/9XKb+9vu/b+1ntxrja/TbF6J4IHUexwMDIXyZbPx+KjoSl8pLlZdulZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+//9/b7maquc39+4Se66l49/VstxXH0Vtxf98pt5+xJ/dS8e/u5bW21xgpD4BVOP/SffO8R/LtN+p+B8PIeSi6lhzqRmguoapprdar5CWjv+hWlpq6kz+kK3u/18z8b+Qaf+g5v+V7BcR20rH/x+1tJ5Uic37vz/e+f6/mGn/IOJfHf+K7/+2pON/uJ7YnSpS+0u2O/+PZ9pvHf8/WGy04XqcjPN4lLoCVqN6eqv/V0daOv49W/I3n//ittZ/lzL19+v5r9Fv4/mvMf3/ENWf/9heOv69Lcu1e/9PZOp1ev4fqa3/2K10/I/U0tJr577az3bjP5lpv1Pxr61Kehrx35xPfjtcT//C+q8t6fj/s54YN5dYqf2srf+indf/lzPtH8T6rzr+lbizvT4vmuPfFY62LFeN/7dtfP9fydTrfPxDGLTW37X0/X+sZbna/d+zc/ynMvU6Hf8XOtk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDNgNDn2hSgeSJ3H8cBACOeT81PhSDRdmM1Pl8oz7y+FMJak58KJ6HapPF0o5ecWyrPFfKFUKs+EcCHJPxl6oqVSuZKfL9y9uNFWb3SnWFisTBcLlRDCeJL+33Cs0db0XGW+cDeEcGkj719xefHuncJCfnZu8bXBwcHBMLExhv6o+GGluFCp917PDWFyo25f1DS4WvbljbEcjd4rLy8uFEq19CtNdUrlmUKpqc5Ukvdp6I8qi8sLM4VKMV8q3270d5BGkuPYxLW3r10Z2pJ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8SY+GX/0shNBdP4tDCCONX6Ltyj98XDybfzp1f2349OTqg7UnrcoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl45RGgiiMAC/GQu18xhWy25nu6KIFq4InkCP4WH0KF7CO6RIkTZFCCSzEDa7sE1SfV/zYH5m3oN5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDxP793HW91EpLjaXEb8ff0vDvOXUn/ux+9fnGFGTuf5tXt4rJvy7+kovytHyzbv0vXq+zNGau93sCfDfdrr+1xPzjW1b1Pz9X1vIuUqItqS36acq2reWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyto+jbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgVAAD//xCzHts=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(0x0, 0x2086) write$P9_RRENAME(r3, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',barrier,nls=cp862,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x0000000000000007,part=0x00000000000\x00\x00\x00\x004,\x00'], 0x20, 0x6fe, &(0x7f0000000500)="$eJzs3U9oXHkdAPDvm5lMMl3IztZ2t4rQsMWiW22TDIsVBKuI5LBowcteY5tuQydpSbKSFrGz6qo3PUkPe1iReNiTeBBWPIj1JgiC994LHrwVD468N+9NZvJ3Js0ksfv5wJv3e+/9/nx/33nz5k9aXgCfWHNvx1grkpi79NZ6uv1ko9F8stFYKsoRMR4RpYhKZxXJckTyOOJadJb4dLoz7y7ZbZw3n378wcVHHzU6W5V8yeqX9mq3qb3HCK18iamIKOfrIVV26+/GDv09HKrrpBt3mrALReLguLW3aQ3TfIDXLXDSPYwoj+2wvx5xKiIm8s8BkV8dSkcc3qEb6ioHAAAAJ1N5vwovP4tnsR6TRxMOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvBiSzj0Dk3wpFeWpSPL7/38nr5apVo833H18cZ/j7986okAAAAAAAAAA4PCNbRbPP4tnsR6TxXY7yf7m/3q2cSZ7fCnejdVYiJW4HOsxH2uxFisxEzE22dNndX1+bW1lZnvLX0Xast1uP8xbzkZEfVvL2RHPGQAAAAAAAABebD+KuZg87iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBXElHurLLlTFGuR6kSERMRUU3rtSL+VJRPgvoB2/35kOMAAACAE6iWryeT/3YK7ST7zv9q9r1/It6N5ViLxViLZizEzey3gM63/tI/Wo3mk43GUrps7/jr/8p6aw8YR9ZjRJTjvV1Gns5qnO22mItvxXfjUkzF9ViJxfh+zMdaLMRU1NJJxHwkUa91fr2oF3H2x1vOu7rWF8r1rbGd37J9LoukFrdiMYvtctyoFr2VshpJnOsZ7Q/ViC0Zei/NTvK13IA5utnzfP0y/10m1355wD5Go57NfKybkek093k2Xtk594XOeXLgkWai1P0N6szmKOnm1pGKnH9vmJyfytdprn/an/PDNuRPaVszMRul/OyLeLU/5/c+9+h0f+Mv/PMv12+Xlu/cvrV6aYRTOiSVHfeOFYWtmWj0ZOK1vc++PBPNNBOtwTMxtnXHxMBzGalqno3OhW2wq+U3s9J8vN5zCt5dTh+/HNMxE1djOr4Ss9HoO8PO9uW10ljqz0n2Wittv77V9gj+wud7Kv1sn8qjsPt4aV5e6clr75Wunh3L91z7RUz3ZOn03mffQd4FKp/JC+kYP+6+45wEfZnIr81FdMUb1C6Z+HX2OWG1uXxn5fb8vQHHu5iv05ft+/3X5t8892SeS3q+nO5euLKc1IrzJT32qW60/fmq5n9x6bQrbTt2tnusHpOxGN+Ou3EzFnZ4pVbzz3Dbe+oce23HY43s2LmeY32fcuJuNLNPIVtMHU1WARjYqTdOVWtPa3+vfVj7Se127a2Jb4xfHf9sNcb+Wvlj+Xel35a+mrwRH8YPY/K4IwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBfB6v0Hd+abzYWVERaqBxwrSvvW2XhpsA6jHrH3WEleqI46G0MXfp7fr/Dwev73xJ7ZqMWIpvP7vWdRfe4hkkhaI35S0mfiUDosbpyW7WmX9231tysRnT2VaLfbD7uHtj6VlVid2O0ZHN+sHPU7883/tPvq1KLnJQO84K6sLd27snr/wZcWl+bfWXhnYXn2anF73FuLzYXpK9njMQcJjMTq/Qfl444BAAAAAAAAAAAAGE7+r//XVkppIRn+f+lU9qlTXVndeeTzRz1VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/U3Nsx1ookZqYvT6fbTzYazXQpyps1KxFRiojkBxHJ44hr0Vmi3tNdsts4bz79+IOLjz5qbPZVKeqX9mo3mFa+xFRElPP1/sZ36GZ7fzd6+msdKLykO8M0YReKxMFx+18AAAD//yBC8a4=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x2, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc9}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x28}, 0x94) 6.487873005s ago: executing program 0 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, 0x0, 0x0) 6.409734812s ago: executing program 0 (id=1172): socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f0000001000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080), &(0x7f0000000180)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/252, 0xfc, 0x0, &(0x7f0000000380)=""/65, 0x41}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 6.004472421s ago: executing program 7 (id=1173): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) 5.84740971s ago: executing program 7 (id=1174): chdir(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r3 = socket(0x18, 0x3, 0x0) connect$pppoe(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0xf, &(0x7f0000000040)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) landlock_restrict_self(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4.675107504s ago: executing program 5 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.897907664s ago: executing program 0 (id=1176): write$sndseq(0xffffffffffffffff, &(0x7f00000006c0)=[{0xe, 0x7e, 0xe, 0xff, @time={0x2, 0x100801}, {}, {0xe1, 0xfd}, @connect={{0x81, 0x2}, {0xd, 0x10}}}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) 3.849367508s ago: executing program 7 (id=1177): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1f2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r4, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x3}, 0x8) 2.784742475s ago: executing program 6 (id=1178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x38}}, 0x0) 1.923304776s ago: executing program 5 (id=1179): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x4000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1.920507076s ago: executing program 7 (id=1180): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) 1.8583693s ago: executing program 0 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.803057663s ago: executing program 6 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, 0x0, 0x0) 1.704335097s ago: executing program 6 (id=1183): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x4000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 410.083573ms ago: executing program 0 (id=1184): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) 99.404052ms ago: executing program 7 (id=1185): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 8.26682ms ago: executing program 7 (id=1186): r0 = syz_pidfd_open(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x24000040) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1187): socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f0000001000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080), &(0x7f0000000180)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/252, 0xfc, 0x0, &(0x7f0000000380)=""/65, 0x41}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) kernel console output (not intermixed with test programs): [ 115.056377][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.147290][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.147351][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.147429][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.762390][ T7575] loop4: detected capacity change from 0 to 8 [ 116.615634][ T7582] loop0: detected capacity change from 0 to 8 [ 116.625991][ T2083] bridge_slave_1: left allmulticast mode [ 116.627884][ T2083] bridge_slave_1: left promiscuous mode [ 116.629836][ T2083] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.634327][ T2083] bridge_slave_0: left allmulticast mode [ 116.636060][ T2083] bridge_slave_0: left promiscuous mode [ 116.637906][ T2083] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.091407][ T2083] bridge0 (unregistering): left allmulticast mode [ 119.151707][ T7627] loop2: detected capacity change from 0 to 8 [ 120.110036][ T7641] loop2: detected capacity change from 0 to 8 [ 121.062597][ T2083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.114840][ T2083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.160936][ T2083] bond0 (unregistering): Released all slaves [ 121.176329][ T7341] hsr_slave_0: entered promiscuous mode [ 121.176963][ T7341] hsr_slave_1: entered promiscuous mode [ 121.189371][ T7610] tipc: Enabling of bearer rejected, failed to enable media [ 121.227776][ T2083] tipc: Left network mode [ 121.233432][ T7212] veth0_vlan: entered promiscuous mode [ 121.236542][ T7212] veth1_vlan: entered promiscuous mode [ 121.493185][ T7654] loop4: detected capacity change from 0 to 4096 [ 121.650016][ T7654] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 123.560645][ T7664] loop2: detected capacity change from 0 to 512 [ 123.580586][ T7664] EXT4-fs: Ignoring removed bh option [ 123.603029][ T7664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.607035][ T7212] veth0_macvtap: entered promiscuous mode [ 123.609119][ T7212] veth1_macvtap: entered promiscuous mode [ 123.622241][ T7664] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.625098][ T7664] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 123.631130][ T7664] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 123.637020][ T7664] EXT4-fs (loop2): 1 truncate cleaned up [ 123.637916][ T7664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.701720][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.924340][ T7212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.046587][ T7212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.055822][ T2083] hsr_slave_0: left promiscuous mode [ 124.057843][ T2083] hsr_slave_1: left promiscuous mode [ 124.068406][ T2083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.068497][ T2083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.074070][ T2083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.074139][ T2083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.103229][ T2083] veth1_macvtap: left promiscuous mode [ 124.104930][ T2083] veth0_macvtap: left promiscuous mode [ 124.106857][ T2083] veth1_vlan: left promiscuous mode [ 124.108624][ T2083] veth0_vlan: left promiscuous mode [ 124.262563][ T7669] loop4: detected capacity change from 0 to 32768 [ 124.414733][ T7681] loop2: detected capacity change from 0 to 512 [ 124.421065][ T7681] EXT4-fs: Ignoring removed bh option [ 124.421255][ T7681] EXT4-fs: user quota file already specified [ 125.023299][ T7669] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 125.044701][ T41] (kworker/u8:2,41,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 125.820448][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 125.919933][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.920012][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.023417][ T2083] team0 (unregistering): Port device team_slave_1 removed [ 127.222486][ T2083] team0 (unregistering): Port device team_slave_0 removed [ 129.459950][ T7212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.460033][ T7212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.460064][ T7212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.460093][ T7212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.484621][ T7687] tipc: Enabling of bearer rejected, failed to enable media [ 129.617637][ T7719] loop2: detected capacity change from 0 to 4096 [ 129.636029][ T7719] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 129.845693][ T7341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.866891][ T7732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.270'. [ 129.899991][ T7341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 130.597627][ T7341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 130.624229][ T7341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 130.701443][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.701502][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.792444][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.792511][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.902803][ T7761] loop4: detected capacity change from 0 to 256 [ 130.907215][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 130.953961][ T7761] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 130.965187][ T7761] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 130.965257][ T7761] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 130.965279][ T7761] UDF-fs: Scanning with blocksize 512 failed [ 130.989187][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.995903][ T7761] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 130.997770][ T7761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.092180][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.392196][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.392290][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.393739][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.393814][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.401641][ T7341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.504681][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.546534][ T7797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.279'. [ 132.572316][ T7791] tipc: Enabled bearer , priority 0 [ 132.574107][ T7795] syzkaller0: entered promiscuous mode [ 132.574144][ T7795] syzkaller0: entered allmulticast mode [ 132.581632][ T7791] syzkaller0: entered promiscuous mode [ 132.581701][ T7791] syzkaller0: entered allmulticast mode [ 132.622983][ T7799] loop4: detected capacity change from 0 to 128 [ 132.629476][ T7799] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 132.668133][ T7799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.741997][ T7790] tipc: Resetting bearer [ 132.831713][ T7790] tipc: Disabling bearer [ 132.961727][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 133.368728][ T7341] veth0_vlan: entered promiscuous mode [ 133.403876][ T7341] veth1_vlan: entered promiscuous mode [ 133.455397][ T7341] veth0_macvtap: entered promiscuous mode [ 133.469605][ T7341] veth1_macvtap: entered promiscuous mode [ 133.506416][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.657325][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.666317][ T7341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.666396][ T7341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.666426][ T7341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.666455][ T7341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.730484][ T364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.730922][ T364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.767924][ T364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.767985][ T364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.777379][ T7841] loop2: detected capacity change from 0 to 2048 [ 134.812269][ T7841] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 134.814499][ T7841] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 134.814572][ T7841] UDF-fs: Scanning with blocksize 512 failed [ 134.841548][ T7841] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 134.841609][ T7841] UDF-fs: Scanning with blocksize 1024 failed [ 134.864254][ T7841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 134.864318][ T7841] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 134.864339][ T7841] UDF-fs: Scanning with blocksize 2048 failed [ 134.865041][ T7841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 134.865931][ T7841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 134.865964][ T7841] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 134.865984][ T7841] UDF-fs: Scanning with blocksize 4096 failed [ 134.866010][ T7841] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 135.112414][ T7863] tipc: Started in network mode [ 135.112488][ T7863] tipc: Node identity 5a2a4391b563, cluster identity 4711 [ 135.112599][ T7863] tipc: Enabled bearer , priority 0 [ 135.115383][ T7863] syzkaller0: entered promiscuous mode [ 135.115439][ T7863] syzkaller0: entered allmulticast mode [ 135.272496][ T7862] tipc: Resetting bearer [ 135.361227][ T7862] tipc: Disabling bearer [ 135.368043][ T7866] syzkaller0: entered promiscuous mode [ 135.370120][ T7866] syzkaller0: entered allmulticast mode [ 135.880606][ T7887] loop0: detected capacity change from 0 to 8 [ 136.281254][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 137.099142][ T7910] loop0: detected capacity change from 0 to 2048 [ 137.108508][ T7910] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 137.139155][ T7910] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 137.146926][ T7910] UDF-fs: Scanning with blocksize 512 failed [ 137.783557][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.5.305'. [ 137.798005][ T7917] loop5: detected capacity change from 0 to 1024 [ 137.818707][ T7910] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 137.818763][ T7910] UDF-fs: Scanning with blocksize 1024 failed [ 137.862254][ T7920] tipc: Enabled bearer , priority 0 [ 137.865454][ T7920] tipc: Resetting bearer [ 137.882845][ T7910] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 137.882923][ T7910] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 137.882944][ T7910] UDF-fs: Scanning with blocksize 2048 failed [ 137.896493][ T7910] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 137.903743][ T7910] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 137.903810][ T7910] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 137.903846][ T7910] UDF-fs: Scanning with blocksize 4096 failed [ 137.903865][ T7910] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 137.940292][ T7917] i2c i2c-0: Invalid block read size 253 [ 137.985664][ T7919] tipc: Disabling bearer [ 138.130231][ T7924] syzkaller0: entered promiscuous mode [ 138.130301][ T7924] syzkaller0: entered allmulticast mode [ 138.715721][ T364] hfsplus: b-tree write err: -5, ino 4 [ 138.756831][ T7942] loop4: detected capacity change from 0 to 128 [ 138.788534][ T7942] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 138.819948][ T7942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.003185][ T7950] loop6: detected capacity change from 0 to 8 [ 139.252469][ T7961] loop5: detected capacity change from 0 to 2048 [ 139.456584][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.6.313'. [ 139.498025][ T7961] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 139.956767][ T7961] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 139.963806][ T7961] UDF-fs: Scanning with blocksize 512 failed [ 140.022418][ T7961] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 140.022482][ T7961] UDF-fs: Scanning with blocksize 1024 failed [ 140.051956][ T7961] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 140.052016][ T7961] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 140.052054][ T7961] UDF-fs: Scanning with blocksize 2048 failed [ 140.140542][ T7961] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 140.145377][ T7961] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 140.145448][ T7961] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 140.145476][ T7961] UDF-fs: Scanning with blocksize 4096 failed [ 140.145500][ T7961] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 141.270472][ T7980] tipc: Enabling of bearer rejected, failed to enable media [ 141.436848][ T7991] loop0: detected capacity change from 0 to 4096 [ 141.437594][ T7991] ntfs3: Unknown parameter 'uma000000000000007' [ 141.447520][ T7987] syzkaller0: entered promiscuous mode [ 141.447591][ T7987] syzkaller0: entered allmulticast mode [ 141.581632][ T8000] loop4: detected capacity change from 0 to 128 [ 141.587413][ T8000] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 141.589028][ T8000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.351927][ T8008] loop5: detected capacity change from 0 to 32768 [ 142.355373][ T8008] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.327 (8008) [ 142.462687][ T8008] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 142.462786][ T8008] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 142.462841][ T8008] BTRFS info (device loop5): using free-space-tree [ 143.251188][ T7991] loop0: detected capacity change from 0 to 65536 [ 143.272858][ T8051] loop2: detected capacity change from 0 to 2048 [ 143.280603][ T8051] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 143.284916][ T8051] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 143.284963][ T8051] UDF-fs: Scanning with blocksize 512 failed [ 143.324587][ T8051] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 143.324651][ T8051] UDF-fs: Scanning with blocksize 1024 failed [ 143.336250][ T8051] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 143.339187][ T8051] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 143.342761][ T8051] UDF-fs: Scanning with blocksize 2048 failed [ 143.348096][ T8051] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 143.356735][ T8051] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 143.356796][ T8051] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 143.356833][ T8051] UDF-fs: Scanning with blocksize 4096 failed [ 143.356858][ T8051] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 143.368718][ T7212] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 143.393725][ T7991] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 143.440475][ T8053] loop4: detected capacity change from 0 to 8 [ 143.455716][ T7991] XFS (loop0): Ending clean mount [ 143.511670][ T7991] XFS (loop0): Quotacheck needed: Please wait. [ 143.655757][ T7991] XFS (loop0): Quotacheck: Done. [ 143.834401][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 144.468695][ T6534] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 144.664382][ T8086] loop6: detected capacity change from 0 to 512 [ 144.691640][ T8086] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.810079][ T8086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.855489][ T8080] loop4: detected capacity change from 0 to 32768 [ 144.884447][ T8086] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.338: corrupted inode contents [ 144.896830][ T8086] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.338: mark_inode_dirty error [ 144.899705][ T8086] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.338: corrupted inode contents [ 144.900206][ T8086] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.338: mark_inode_dirty error [ 144.928653][ T8080] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 144.933390][ T42] (kworker/u8:3,42,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 146.202410][ T8135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.343'. [ 146.222781][ T8135] loop0: detected capacity change from 0 to 1024 [ 146.306365][ T8135] i2c i2c-0: Invalid block read size 253 [ 146.441960][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.837612][ T8152] loop2: detected capacity change from 0 to 8 [ 146.906213][ T8153] loop6: detected capacity change from 0 to 256 [ 146.977943][ T8153] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 146.987747][ T8153] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 146.987811][ T8153] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 146.987855][ T8153] UDF-fs: Scanning with blocksize 512 failed [ 146.998464][ T8153] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 147.008451][ T8153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.234852][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 147.812078][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 147.911446][ T364] hfsplus: b-tree write err: -5, ino 4 [ 148.848536][ T8170] loop4: detected capacity change from 0 to 4096 [ 148.849224][ T8170] ntfs3: Unknown parameter 'uma000000000000007' [ 149.305064][ T8179] loop2: detected capacity change from 0 to 32768 [ 149.321716][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.354'. [ 149.334809][ T8179] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 149.341603][ T41] (kworker/u8:2,41,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 150.269902][ T6535] ocfs2: Unmounting device (7,2) on (node local) [ 150.507788][ T8219] loop2: detected capacity change from 0 to 8 [ 150.667106][ T8170] loop4: detected capacity change from 0 to 65536 [ 150.723567][ T8170] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 150.951770][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 151.405503][ T8207] loop0: detected capacity change from 0 to 32768 [ 151.430803][ T8170] XFS (loop4): Ending clean mount [ 151.438320][ T8170] XFS (loop4): Quotacheck needed: Please wait. [ 151.537226][ T8170] XFS (loop4): Quotacheck: Done. [ 151.549643][ T8207] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 151.555464][ T732] (kworker/u8:8,732,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 151.694942][ T6537] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.823394][ T8216] loop6: detected capacity change from 0 to 32768 [ 151.950102][ T8249] loop2: detected capacity change from 0 to 256 [ 151.959051][ T8249] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 151.975769][ T8249] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 151.975849][ T8249] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 151.975882][ T8249] UDF-fs: Scanning with blocksize 512 failed [ 152.040474][ T8249] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 152.044976][ T8249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.143368][ T31] audit: type=1326 audit(152.130:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.6.359" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55cc28 code=0x7fc00000 [ 153.366470][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.365'. [ 153.803177][ T8263] loop4: detected capacity change from 0 to 32768 [ 153.820407][ T8263] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 153.837634][ T8263] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 153.846437][ T620] (kworker/u8:6,620,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 153.923822][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 153.955432][ T8301] netlink: 76 bytes leftover after parsing attributes in process `syz.4.370'. [ 155.135020][ T8301] loop4: detected capacity change from 0 to 32768 [ 156.133713][ T8301] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 156.167534][ T8301] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 156.334789][ T732] (kworker/u8:8,732,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 157.153636][ T6534] ocfs2: Unmounting device (7,0) on (node local) [ 157.823549][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 157.895176][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 158.488860][ T8338] loop5: detected capacity change from 0 to 32768 [ 158.496259][ T8338] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.379 (8338) [ 159.349774][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 159.349858][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 159.497938][ T8345] loop0: detected capacity change from 0 to 32768 [ 159.564920][ T8338] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 159.565029][ T8338] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 159.565098][ T8338] BTRFS info (device loop5): using free-space-tree [ 159.589976][ T8345] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 159.605969][ T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 159.834943][ T6534] ocfs2: Unmounting device (7,0) on (node local) [ 160.793583][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.390'. [ 160.956534][ T8411] loop6: detected capacity change from 0 to 8 [ 161.031963][ T7212] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 162.728728][ T8434] netlink: 36 bytes leftover after parsing attributes in process `syz.6.396'. [ 162.771313][ T8434] loop6: detected capacity change from 0 to 1024 [ 162.833990][ T8425] loop4: detected capacity change from 0 to 32768 [ 162.845579][ T8434] i2c i2c-0: Invalid block read size 253 [ 162.894012][ T364] hfsplus: b-tree write err: -5, ino 4 [ 162.897459][ T8425] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.394 (8425) [ 163.004469][ T8425] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 163.004577][ T8425] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 163.004623][ T8425] BTRFS info (device loop4): using free-space-tree [ 163.121184][ T8432] loop5: detected capacity change from 0 to 32768 [ 163.226709][ T8432] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 164.005214][ T732] (kworker/u8:8,732,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 164.139292][ T8473] netlink: 16 bytes leftover after parsing attributes in process `syz.6.401'. [ 164.150585][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.400'. [ 164.184300][ T8474] loop2: detected capacity change from 0 to 1024 [ 164.212989][ T7212] ocfs2: Unmounting device (7,5) on (node local) [ 164.241624][ T8474] i2c i2c-0: Invalid block read size 253 [ 164.311888][ T6537] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 164.677199][ T8492] syzkaller1: entered promiscuous mode [ 164.677267][ T8492] syzkaller1: entered allmulticast mode [ 164.681552][ T8487] syzkaller0: entered promiscuous mode [ 164.684396][ T8487] syzkaller0: entered allmulticast mode [ 165.270268][ T8505] loop6: detected capacity change from 0 to 8 [ 165.292986][ T41] hfsplus: b-tree write err: -5, ino 4 [ 165.585705][ T8520] loop0: detected capacity change from 0 to 8 [ 167.041404][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 168.277108][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.6.414'. [ 169.146282][ T8568] netlink: 36 bytes leftover after parsing attributes in process `syz.5.420'. [ 169.155954][ T8568] loop5: detected capacity change from 0 to 1024 [ 169.218665][ T8568] i2c i2c-0: Invalid block read size 253 [ 169.705186][ T8541] loop2: detected capacity change from 0 to 32768 [ 169.739480][ T8541] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.413 (8541) [ 169.783083][ T8560] loop4: detected capacity change from 0 to 32768 [ 169.881971][ T8541] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 169.882068][ T8541] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 169.882140][ T8541] BTRFS info (device loop2): using free-space-tree [ 169.988409][ T732] hfsplus: b-tree write err: -5, ino 4 [ 170.240101][ T31] audit: type=1326 audit(170.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8556 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 171.188010][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 171.339055][ T6535] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 171.477358][ T8613] loop6: detected capacity change from 0 to 32768 [ 171.656225][ T8613] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 171.666056][ T732] (kworker/u8:8,732,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 171.828244][ T8625] loop2: detected capacity change from 0 to 512 [ 171.840050][ T8625] EXT4-fs: Ignoring removed bh option [ 171.840255][ T8625] EXT4-fs: user quota file already specified [ 173.550848][ T7341] ocfs2: Unmounting device (7,6) on (node local) [ 173.704265][ T8646] loop0: detected capacity change from 0 to 128 [ 173.866388][ T8646] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 173.871174][ T8646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.326852][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.439'. [ 175.479687][ T8658] loop0: detected capacity change from 0 to 32768 [ 175.643958][ T8658] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.437 (8658) [ 175.657151][ T8658] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 175.657245][ T8658] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 175.657291][ T8658] BTRFS info (device loop0): using free-space-tree [ 175.837023][ T8694] loop6: detected capacity change from 0 to 512 [ 175.844514][ T8694] EXT4-fs: Ignoring removed bh option [ 175.844678][ T8694] EXT4-fs: user quota file already specified [ 176.572570][ T8701] loop4: detected capacity change from 0 to 8 [ 176.721530][ T8707] loop5: detected capacity change from 0 to 512 [ 176.730214][ T8704] loop6: detected capacity change from 0 to 8 [ 177.761990][ T8707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.513286][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.443'. [ 178.762216][ T8721] EXT4-fs error (device loop5): ext4_get_first_dir_block:3525: inode #12: comm syz.5.445: Attempting to read directory block (0) that is past i_size (3) [ 178.776944][ T8721] EXT4-fs (loop5): Remounting filesystem read-only [ 179.055804][ T6534] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 179.058601][ T7212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.059736][ T364] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.059830][ T364] Quota error (device loop5): write_blk: dquota write failed [ 179.059852][ T364] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 179.327070][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 180.008338][ T8764] loop5: detected capacity change from 0 to 512 [ 180.015340][ T8764] EXT4-fs: Ignoring removed bh option [ 180.015518][ T8764] EXT4-fs: user quota file already specified [ 181.407474][ T8772] loop2: detected capacity change from 0 to 32768 [ 181.427631][ T8772] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.457 (8772) [ 181.449932][ T8772] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 181.450034][ T8772] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 181.450088][ T8772] BTRFS info (device loop2): using free-space-tree [ 181.506205][ T8770] loop4: detected capacity change from 0 to 32768 [ 181.548887][ T8770] BTRFS: device /dev/loop4 (7:4) using temp-fsid d8435ebb-d4b1-4fda-92d5-33e856ada3d3 [ 181.549077][ T8770] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.456 (8770) [ 181.559130][ T8770] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 181.559229][ T8770] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 181.570417][ T8770] BTRFS info (device loop4): using free-space-tree [ 181.578954][ T8801] loop5: detected capacity change from 0 to 8 [ 181.594703][ T8778] loop0: detected capacity change from 0 to 32768 [ 181.621080][ T8778] BTRFS: device /dev/loop0 (7:0) using temp-fsid f2dbdc19-52fb-4db6-b2c6-6f753e8edce6 [ 181.659436][ T8778] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.458 (8778) [ 181.787752][ T8778] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 181.787855][ T8778] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 181.787925][ T8778] BTRFS info (device loop0): using free-space-tree [ 182.532028][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.459'. [ 183.464357][ T6535] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 183.526624][ T6534] BTRFS info (device loop0): last unmount of filesystem f2dbdc19-52fb-4db6-b2c6-6f753e8edce6 [ 183.552515][ T6537] BTRFS info (device loop4): last unmount of filesystem d8435ebb-d4b1-4fda-92d5-33e856ada3d3 [ 183.619843][ T8871] loop5: detected capacity change from 0 to 8 [ 184.929467][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.466'. [ 187.362036][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.366885][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.452977][ T8905] loop6: detected capacity change from 0 to 32768 [ 187.465310][ T8905] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.473 (8905) [ 187.472764][ T8905] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 187.472849][ T8905] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 187.472909][ T8905] BTRFS info (device loop6): using free-space-tree [ 187.940492][ T7341] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 188.263930][ T8970] loop2: detected capacity change from 0 to 8 [ 189.266462][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 189.480689][ T8956] loop0: detected capacity change from 0 to 32768 [ 189.654353][ T8956] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 189.659821][ T732] (kworker/u8:8,732,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 189.749124][ T6534] ocfs2: Unmounting device (7,0) on (node local) [ 190.220201][ T8989] loop6: detected capacity change from 0 to 32768 [ 190.445851][ T31] audit: type=1326 audit(190.430:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8980 comm="syz.6.484" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55cc28 code=0x7fc00000 [ 190.584646][ T9010] loop0: detected capacity change from 0 to 32768 [ 190.590988][ T9026] loop2: detected capacity change from 0 to 8 [ 190.598342][ T9010] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.490 (9010) [ 190.731340][ T9010] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 190.731442][ T9010] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 190.731515][ T9010] BTRFS info (device loop0): using free-space-tree [ 191.367597][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 192.026790][ T6534] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 192.190160][ T9066] loop6: detected capacity change from 0 to 8 [ 193.377675][ T9082] loop4: detected capacity change from 0 to 32768 [ 193.481532][ T9082] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 193.494778][ T620] (kworker/u8:6,620,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 193.755891][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 194.712176][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 194.825833][ T9097] loop5: detected capacity change from 0 to 32768 [ 194.916162][ T9097] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.502 (9097) [ 194.948777][ T9132] loop6: detected capacity change from 0 to 512 [ 194.982445][ T9132] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 194.982517][ T9132] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 195.015661][ T9132] EXT4-fs (loop6): 1 truncate cleaned up [ 195.020997][ T9132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.043353][ T9097] BTRFS info (device loop5): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 195.043451][ T9097] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 195.043499][ T9097] BTRFS error (device loop5): superblock checksum mismatch [ 195.055056][ T9097] BTRFS error (device loop5): open_ctree failed: -22 [ 195.069835][ T9138] syzkaller1: entered promiscuous mode [ 195.071505][ T9138] syzkaller1: entered allmulticast mode [ 195.585206][ T9149] EXT4-fs (loop6): shut down requested (1) [ 195.936775][ T9147] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 196.038289][ T7341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.164464][ T7731] udevd[7731]: incorrect btrfs checksum on /dev/loop5 [ 196.733626][ T9159] loop2: detected capacity change from 0 to 32768 [ 196.819152][ T9159] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 196.824417][ T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 196.953275][ T6535] ocfs2: Unmounting device (7,2) on (node local) [ 198.517896][ T9169] loop0: detected capacity change from 0 to 32768 [ 198.549867][ T9204] syzkaller1: entered promiscuous mode [ 198.549956][ T9204] syzkaller1: entered allmulticast mode [ 198.740219][ T31] audit: type=1326 audit(198.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9166 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915cc28 code=0x7fc00000 [ 199.558744][ T9220] loop6: detected capacity change from 0 to 32768 [ 199.838795][ T9243] lo speed is unknown, defaulting to 1000 [ 199.839561][ T9243] lo speed is unknown, defaulting to 1000 [ 199.848011][ T9243] lo speed is unknown, defaulting to 1000 [ 199.864132][ T9243] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 199.889986][ T9243] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 200.013439][ T9244] netlink: 184 bytes leftover after parsing attributes in process `syz.4.529'. [ 200.343076][ T9243] lo speed is unknown, defaulting to 1000 [ 200.343974][ T9243] lo speed is unknown, defaulting to 1000 [ 200.345369][ T9243] lo speed is unknown, defaulting to 1000 [ 200.346074][ T9243] lo speed is unknown, defaulting to 1000 [ 200.346736][ T9243] lo speed is unknown, defaulting to 1000 [ 200.490450][ T9246] loop4: detected capacity change from 0 to 8 [ 200.529466][ T9242] loop0: detected capacity change from 0 to 32768 [ 200.692883][ T9220] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 200.702468][ T2083] (kworker/u8:9,2083,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 201.485987][ T7341] ocfs2: Unmounting device (7,6) on (node local) [ 201.585182][ T31] audit: type=1326 audit(201.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9239 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915cc28 code=0x7fc00000 [ 201.778858][ T9265] loop5: detected capacity change from 0 to 8 [ 202.279939][ T9278] lo speed is unknown, defaulting to 1000 [ 202.313832][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.536'. [ 203.614600][ T9298] loop6: detected capacity change from 0 to 8 [ 204.473031][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.543'. [ 204.698358][ T9292] loop4: detected capacity change from 0 to 32768 [ 205.480521][ T9292] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 205.485033][ T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 205.564555][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 205.622464][ T9313] loop0: detected capacity change from 0 to 32768 [ 205.813388][ T31] audit: type=1326 audit(205.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9310 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915cc28 code=0x7fc00000 [ 206.217844][ T9328] loop4: detected capacity change from 0 to 32768 [ 206.231378][ T9328] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.550 (9328) [ 206.254622][ T9328] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 206.257751][ T9328] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 206.261035][ T9328] BTRFS info (device loop4): using free-space-tree [ 207.875982][ T9364] loop0: detected capacity change from 0 to 8 [ 208.159604][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.556'. [ 209.427697][ T9392] loop5: detected capacity change from 0 to 512 [ 209.562509][ T9392] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.577630][ T9392] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.563: casefold flag without casefold feature [ 209.581945][ T9392] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.563: couldn't read orphan inode 15 (err -117) [ 209.586503][ T9392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.818963][ T9398] siw: device registration error -23 [ 209.859821][ T9398] netlink: 184 bytes leftover after parsing attributes in process `syz.0.564'. [ 211.348241][ T7212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.975046][ T9422] siw: device registration error -23 [ 213.009631][ T9422] netlink: 184 bytes leftover after parsing attributes in process `syz.5.569'. [ 213.446937][ T9426] loop6: detected capacity change from 0 to 8 [ 213.549144][ T9430] loop5: detected capacity change from 0 to 8 [ 213.781432][ T6537] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 214.578337][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.573'. [ 214.826150][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.576'. [ 214.902053][ T9428] loop2: detected capacity change from 0 to 32768 [ 214.905455][ T9428] BTRFS: device /dev/loop2 (7:2) using temp-fsid a42ca701-62f0-41df-9f7a-e5e7da2e2e19 [ 214.908913][ T9428] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.575 (9428) [ 215.257358][ T9446] siw: device registration error -23 [ 215.286126][ T9446] netlink: 184 bytes leftover after parsing attributes in process `syz.0.577'. [ 215.695571][ T6539] Bluetooth: hci0: command 0x0406 tx timeout [ 215.752496][ T9428] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 215.756173][ T9428] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 215.777458][ T9428] BTRFS info (device loop2): using free-space-tree [ 215.853641][ T9467] netlink: 36 bytes leftover after parsing attributes in process `syz.6.578'. [ 215.879599][ T9467] loop6: detected capacity change from 0 to 1024 [ 215.895574][ T9460] netlink: 36 bytes leftover after parsing attributes in process `syz.5.579'. [ 216.074027][ T41] hfsplus: b-tree write err: -5, ino 4 [ 217.819400][ T9497] siw: device registration error -23 [ 217.820360][ T9497] netlink: 184 bytes leftover after parsing attributes in process `syz.6.582'. [ 218.679311][ T6535] BTRFS info (device loop2): last unmount of filesystem a42ca701-62f0-41df-9f7a-e5e7da2e2e19 [ 218.955996][ T9511] loop4: detected capacity change from 0 to 8 [ 219.156059][ T9492] loop5: detected capacity change from 0 to 32768 [ 219.169635][ T9492] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.584 (9492) [ 219.199062][ T9516] loop0: detected capacity change from 0 to 512 [ 219.207994][ T9492] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 219.208089][ T9492] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 219.208153][ T9492] BTRFS info (device loop5): using free-space-tree [ 219.246396][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'. [ 219.257273][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.6.591'. [ 219.282545][ T9516] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 219.285238][ T9516] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.590: invalid indirect mapped block 2683928664 (level 1) [ 219.292886][ T9516] EXT4-fs (loop0): 1 truncate cleaned up [ 219.295589][ T9516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.386472][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.422620][ T9539] loop6: detected capacity change from 0 to 1024 [ 219.538522][ T620] hfsplus: b-tree write err: -5, ino 4 [ 220.173525][ T9544] loop0: detected capacity change from 0 to 32768 [ 220.204281][ T9544] BTRFS: device /dev/loop0 (7:0) using temp-fsid ed4467a7-6380-4890-a174-967521e31956 [ 220.204361][ T9544] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.595 (9544) [ 220.258632][ T9544] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 220.258766][ T9544] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 220.270762][ T9544] BTRFS info (device loop0): using free-space-tree [ 220.472736][ T9563] lo speed is unknown, defaulting to 1000 [ 221.973851][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 222.192606][ T6534] BTRFS info (device loop0): last unmount of filesystem ed4467a7-6380-4890-a174-967521e31956 [ 223.634652][ T7212] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 223.668921][ T9617] loop6: detected capacity change from 0 to 32768 [ 223.859618][ T31] audit: type=1326 audit(223.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.6.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55cc28 code=0x7fc00000 [ 223.903004][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.615'. [ 224.315957][ T9633] loop2: detected capacity change from 0 to 32768 [ 224.335967][ T9633] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.616 (9633) [ 224.343177][ T9633] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 224.343277][ T9633] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 224.343321][ T9633] BTRFS info (device loop2): using free-space-tree [ 224.406858][ T9658] netlink: 'syz.6.625': attribute type 10 has an invalid length. [ 225.440704][ T6539] Bluetooth: hci1: command 0x0406 tx timeout [ 225.451058][ T9663] loop0: detected capacity change from 0 to 32768 [ 225.534647][ T9663] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 225.541071][ T620] (kworker/u8:6,620,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 225.563688][ T6535] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 226.152182][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 226.390559][ T6534] ocfs2: Unmounting device (7,0) on (node local) [ 226.600872][ T9683] loop5: detected capacity change from 0 to 32768 [ 227.208984][ T9683] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.628 (9683) [ 227.364963][ T9683] BTRFS info (device loop5): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 227.365071][ T9683] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 227.365101][ T9683] BTRFS error (device loop5): superblock checksum mismatch [ 227.365353][ T9683] BTRFS error (device loop5): open_ctree failed: -22 [ 227.473154][ T9712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.636'. [ 228.152865][ T7731] udevd[7731]: incorrect btrfs checksum on /dev/loop5 [ 228.320061][ T9728] netlink: 7 bytes leftover after parsing attributes in process `syz.2.641'. [ 228.320210][ T9728] netlink: 88 bytes leftover after parsing attributes in process `syz.2.641'. [ 228.552913][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 229.147398][ T9730] loop4: detected capacity change from 0 to 32768 [ 229.346437][ T9730] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 229.352974][ T364] (kworker/u8:5,364,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 229.590230][ T9757] siw: device registration error -23 [ 231.305794][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 231.660351][ T9773] loop2: detected capacity change from 0 to 8 [ 231.774396][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 232.772753][ T9767] loop0: detected capacity change from 0 to 32768 [ 233.093253][ T31] audit: type=1326 audit(233.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915cc28 code=0x7fc00000 [ 233.314274][ T9801] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 233.379705][ T9805] netlink: 'syz.2.665': attribute type 10 has an invalid length. [ 233.433934][ T9785] loop4: detected capacity change from 0 to 32768 [ 233.438244][ T9785] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.658 (9785) [ 233.478603][ T9785] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 233.478709][ T9785] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.478739][ T9785] BTRFS error (device loop4): superblock checksum mismatch [ 233.479176][ T9785] BTRFS error (device loop4): open_ctree failed: -22 [ 233.579022][ T9807] siw: device registration error -23 [ 233.728205][ T7715] udevd[7715]: incorrect btrfs checksum on /dev/loop4 [ 234.483548][ T9818] netlink: 48 bytes leftover after parsing attributes in process `syz.2.668'. [ 234.484688][ T9818] netlink: 48 bytes leftover after parsing attributes in process `syz.2.668'. [ 234.542101][ T9821] loop6: detected capacity change from 0 to 8 [ 234.549070][ T9822] loop2: detected capacity change from 0 to 8 [ 236.842437][ T6606] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 236.850956][ T6606] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.930314][ T9854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.680'. [ 236.931114][ T9854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.680'. [ 237.031241][ T9856] netlink: 'syz.6.679': attribute type 10 has an invalid length. [ 237.185373][ T1816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 237.189484][ T1816] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 237.214516][ T9867] fido_id[9867]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 238.546691][ T9862] loop4: detected capacity change from 0 to 32768 [ 238.587221][ T9862] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 238.649692][ T620] (kworker/u8:6,620,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 239.261080][ T9900] netlink: 48 bytes leftover after parsing attributes in process `syz.6.693'. [ 239.261841][ T9900] netlink: 48 bytes leftover after parsing attributes in process `syz.6.693'. [ 239.350853][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 239.410516][ T9902] loop6: detected capacity change from 0 to 8 [ 240.465214][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.6.699'. [ 241.793279][ T9924] netlink: 184 bytes leftover after parsing attributes in process `syz.4.700'. [ 242.359367][ T9920] siw: device registration error -23 [ 242.360215][ T9920] netlink: 184 bytes leftover after parsing attributes in process `syz.5.692'. [ 242.859658][ T9934] siw: device registration error -23 [ 242.891846][ T9934] netlink: 184 bytes leftover after parsing attributes in process `syz.2.702'. [ 244.318711][ T9942] loop2: detected capacity change from 0 to 8 [ 244.369183][ T9944] loop4: detected capacity change from 0 to 8 [ 246.919957][ T9971] netlink: 184 bytes leftover after parsing attributes in process `syz.4.713'. [ 247.461665][ T9976] loop2: detected capacity change from 0 to 256 [ 247.503472][ T9976] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 247.531739][ T9977] tipc: Enabled bearer , priority 0 [ 247.542067][ T9976] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 247.542124][ T9976] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 247.542163][ T9976] UDF-fs: Scanning with blocksize 512 failed [ 247.556961][ T9977] tipc: Resetting bearer [ 247.588764][ T9976] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 247.611442][ T9976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.800668][ T9972] tipc: Disabling bearer [ 247.816140][ T9990] loop0: detected capacity change from 0 to 8 [ 248.810911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.879647][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.879723][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.300905][T10001] siw: device registration error -23 [ 249.886778][T10005] loop2: detected capacity change from 0 to 1024 [ 249.888765][T10004] loop0: detected capacity change from 0 to 8 [ 250.055695][ T2083] hfsplus: b-tree write err: -5, ino 4 [ 250.359758][T10013] siw: device registration error -23 [ 250.398439][T10013] netlink: 184 bytes leftover after parsing attributes in process `syz.5.728'. [ 250.968344][T10020] loop2: detected capacity change from 0 to 256 [ 250.985575][T10020] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 250.986495][T10020] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 250.986528][T10020] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 250.986549][T10020] UDF-fs: Scanning with blocksize 512 failed [ 250.995856][T10020] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 251.012186][T10020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.101503][T10023] tipc: Enabled bearer , priority 0 [ 251.134190][T10023] tipc: Resetting bearer [ 251.321030][T10022] tipc: Disabling bearer [ 251.609130][T10018] loop5: detected capacity change from 0 to 32768 [ 251.723308][T10018] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 251.735179][ T620] (kworker/u8:6,620,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 252.579588][T10026] loop2: detected capacity change from 0 to 32768 [ 252.632780][T10026] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 252.648768][T10026] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 252.655985][ T2110] (kworker/u8:10,2110,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 253.296035][T10044] loop4: detected capacity change from 0 to 1024 [ 253.336649][ T7212] ocfs2: Unmounting device (7,5) on (node local) [ 253.420910][ T2110] hfsplus: b-tree write err: -5, ino 4 [ 253.593265][ T6535] ocfs2: Unmounting device (7,2) on (node local) [ 253.795393][T10055] siw: device registration error -23 [ 253.829354][T10055] netlink: 184 bytes leftover after parsing attributes in process `syz.6.741'. [ 254.609689][T10061] loop6: detected capacity change from 0 to 1024 [ 254.610651][T10061] hfsplus: Unknown parameter 'permitâ­îz\«ã¶´·fR^z—íð”ðJšV ;óƒìEöqÃdÍ“:}êÍÿÞJÔ¼ [ 254.610651][T10061] Ž|Ôßî¬vá5µj«“'~¢ÏÀ(Œ.ì]»tï; Δœ§\³çûÝûO' [ 254.613180][T10052] loop5: detected capacity change from 0 to 32768 [ 254.649826][T10064] netlink: 184 bytes leftover after parsing attributes in process `syz.4.745'. [ 254.744743][T10037] loop0: detected capacity change from 0 to 32768 [ 254.760102][T10037] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.738 (10037) [ 254.772634][T10063] syzkaller0: entered promiscuous mode [ 254.912355][T10063] syzkaller0: entered allmulticast mode [ 254.923433][T10052] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 254.936561][T10037] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 254.939860][T10037] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 254.943106][T10037] BTRFS info (device loop0): using free-space-tree [ 254.946621][ T620] (kworker/u8:6,620,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 256.620983][ T6534] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 256.663472][ T7212] ocfs2: Unmounting device (7,5) on (node local) [ 256.831776][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 256.831849][T10091] netlink: 'syz.4.748': attribute type 30 has an invalid length. [ 256.834925][T10091] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.834987][T10091] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.835025][T10091] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.835061][T10091] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.837108][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 256.837153][T10091] netlink: 'syz.4.748': attribute type 30 has an invalid length. [ 256.953618][T10097] loop4: detected capacity change from 0 to 8 [ 257.020195][T10099] loop6: detected capacity change from 0 to 1024 [ 257.149344][ T620] hfsplus: b-tree write err: -5, ino 4 [ 257.817874][T10118] siw: device registration error -23 [ 257.851420][T10118] netlink: 184 bytes leftover after parsing attributes in process `syz.2.759'. [ 258.442695][T10120] loop6: detected capacity change from 0 to 1024 [ 258.443439][T10120] hfsplus: Unknown parameter 'permitâ­îz\«ã¶´·fR^z—íð”ðJšV ;óƒìEöqÃdÍ“:}êÍÿÞJÔ¼ [ 258.443439][T10120] Ž|Ôßî¬vá5µj«“'~¢ÏÀ(Œ.ì]»tï; Δœ§\³çûÝûO' [ 259.603120][T10102] loop5: detected capacity change from 0 to 32768 [ 259.763567][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 259.763646][T10131] netlink: 'syz.2.762': attribute type 30 has an invalid length. [ 259.766468][T10131] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.766532][T10131] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.766570][T10131] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.766606][T10131] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.767538][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 259.767597][T10131] netlink: 'syz.2.762': attribute type 30 has an invalid length. [ 259.813998][T10102] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 259.827415][ T41] (kworker/u8:2,41,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 261.485897][ T7212] ocfs2: Unmounting device (7,5) on (node local) [ 261.521806][ T6529] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 261.529599][ T6529] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 261.835888][T10159] loop2: detected capacity change from 0 to 32768 [ 261.892535][T10159] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 261.897399][ T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 262.089820][T10173] loop5: detected capacity change from 0 to 1024 [ 262.092622][T10173] hfsplus: Unknown parameter 'permitâ­îz\«ã¶´·fR^z—íð”ðJšV ;óƒìEöqÃdÍ“:}êÍÿÞJÔ¼ [ 262.092622][T10173] Ž|Ôßî¬vá5µj«“'~¢ÏÀ(Œ.ì]»tï; Δœ§\³çûÝûO' [ 263.040169][ T6535] ocfs2: Unmounting device (7,2) on (node local) [ 263.070212][T10179] syzkaller0: entered promiscuous mode [ 263.071823][T10179] syzkaller0: entered allmulticast mode [ 263.397269][T10187] loop5: detected capacity change from 0 to 8 [ 264.156479][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.775'. [ 264.156553][T10188] netlink: 'syz.6.775': attribute type 30 has an invalid length. [ 264.162214][T10188] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.162278][T10188] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.162317][T10188] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.162375][T10188] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.163425][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.775'. [ 264.163573][T10188] netlink: 'syz.6.775': attribute type 30 has an invalid length. [ 266.377895][T10213] loop6: detected capacity change from 0 to 32768 [ 266.452942][T10213] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 266.459011][ T2083] (kworker/u8:9,2083,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 267.483503][ T7341] ocfs2: Unmounting device (7,6) on (node local) [ 267.694136][T10232] loop6: detected capacity change from 0 to 1024 [ 267.696860][T10232] hfsplus: Unknown parameter 'permitâ­îz\«ã¶´·fR^z—íð”ðJšV ;óƒìEöqÃdÍ“:}êÍÿÞJÔ¼ [ 267.696860][T10232] Ž|Ôßî¬vá5µj«“'~¢ÏÀ(Œ.ì]»tï; Δœ§\³çûÝûO' [ 278.624419][T10205] syzkaller0: entered promiscuous mode [ 278.624492][T10205] syzkaller0: entered allmulticast mode [ 278.852972][ T6539] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.856088][ T6539] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.858218][ T6539] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.862684][ T6539] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.863244][ T6539] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.944097][T10258] syzkaller0: entered promiscuous mode [ 278.944172][T10258] syzkaller0: entered allmulticast mode [ 280.086774][T10275] loop5: detected capacity change from 0 to 32768 [ 280.119403][T10275] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.796 (10275) [ 280.205331][T10275] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 280.205429][T10275] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 280.205497][T10275] BTRFS info (device loop5): using free-space-tree [ 280.880317][ T6539] Bluetooth: hci5: command tx timeout [ 280.897506][T10277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.797'. [ 281.148813][T10306] loop6: detected capacity change from 0 to 1024 [ 281.174856][T10306] hfsplus: Unknown parameter 'permitâ­îz\«ã¶´·fR^z—íð”ðJšV ;óƒìEöqÃdÍ“:}êÍÿÞJÔ¼ [ 281.174856][T10306] Ž|Ôßî¬vá5µj«“'~¢ÏÀ(Œ.ì]»tï; Δœ§\³çûÝûO' [ 281.607278][ T732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.620574][ T732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.732147][ T7212] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 281.759285][T10252] lo speed is unknown, defaulting to 1000 [ 282.250987][ T732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.251060][ T732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.741365][T10332] netlink: 184 bytes leftover after parsing attributes in process `syz.4.804'. [ 282.959660][ T6539] Bluetooth: hci5: command tx timeout [ 283.102061][ T732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.110496][ T732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.515063][T10324] syzkaller0: entered promiscuous mode [ 283.520665][T10324] syzkaller0: entered allmulticast mode [ 283.564303][ T732] bond0: (slave netdevsim0): Releasing backup interface [ 283.840134][ T732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.844839][ T732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.507303][T10348] loop0: detected capacity change from 0 to 128 [ 284.522672][T10348] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 284.536999][T10348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.541225][T10347] syzkaller0: entered promiscuous mode [ 284.543851][T10347] syzkaller0: entered allmulticast mode [ 284.657536][T10252] chnl_net:caif_netlink_parms(): no params data found [ 284.770588][T10354] loop5: detected capacity change from 0 to 32768 [ 284.774239][T10354] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.811 (10354) [ 284.784305][T10354] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 284.787250][T10354] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 284.790029][T10354] BTRFS info (device loop5): using free-space-tree [ 285.039413][ T6539] Bluetooth: hci5: command tx timeout [ 285.098364][T10379] loop6: detected capacity change from 0 to 1024 [ 285.099095][T10379] hfsplus: Unknown parameter 'permitâ­îz\«ã¶´·fR^z—íð”ðJšV ;óƒìEöqÃdÍ“:}êÍÿÞJÔ¼ [ 285.099095][T10379] Ž|Ôßî¬vá5µj«“'~¢ÏÀ(Œ.ì]»tï; Δœ§\³çûÝûO' [ 285.665789][ T7212] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 286.659533][ T732] bridge_slave_1: left allmulticast mode [ 286.659600][ T732] bridge_slave_1: left promiscuous mode [ 286.659737][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.710365][ T732] bridge_slave_0: left allmulticast mode [ 286.710429][ T732] bridge_slave_0: left promiscuous mode [ 286.710555][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.123119][ T6539] Bluetooth: hci5: command tx timeout [ 288.792177][T10419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.796063][T10419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.421600][ T732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.462144][ T732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.513820][ T732] bond0 (unregistering): Released all slaves [ 289.526940][T10400] syzkaller0: entered promiscuous mode [ 289.527012][T10400] syzkaller0: entered allmulticast mode [ 289.716390][T10252] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.718682][T10252] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.718867][T10252] bridge_slave_0: entered allmulticast mode [ 289.740784][T10252] bridge_slave_0: entered promiscuous mode [ 289.963294][T10252] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.963372][T10252] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.963541][T10252] bridge_slave_1: entered allmulticast mode [ 289.972075][T10252] bridge_slave_1: entered promiscuous mode [ 289.974698][ T732] tipc: Left network mode [ 290.001797][T10252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.008143][T10252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.091380][T10440] loop5: detected capacity change from 0 to 1024 [ 290.095196][T10440] hfsplus: Unknown parameter 'permitâ­îz\«ã¶´·fR^z—íð”ðJšV ;óƒìEöqÃdÍ“:}êÍÿÞJÔ¼ [ 290.095196][T10440] Ž|Ôßî¬vá5µj«“'~¢ÏÀ(Œ.ì]»tï; Δœ§\³çûÝûO' [ 290.095523][T10252] team0: Port device team_slave_0 added [ 290.309546][T10430] loop0: detected capacity change from 0 to 32768 [ 290.312288][T10444] loop6: detected capacity change from 0 to 8 [ 290.314580][T10430] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.826 (10430) [ 291.043979][T10252] team0: Port device team_slave_1 added [ 291.050672][T10430] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 291.053957][T10430] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 291.056932][T10430] BTRFS info (device loop0): using free-space-tree [ 291.156258][T10463] loop5: detected capacity change from 0 to 8 [ 291.166615][T10252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.166678][T10252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.166736][T10252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.167839][T10252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.167871][T10252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.167928][T10252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.189701][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.828'. [ 292.214308][T10252] hsr_slave_0: entered promiscuous mode [ 292.214845][T10252] hsr_slave_1: entered promiscuous mode [ 292.215222][T10252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.215262][T10252] Cannot create hsr debugfs directory [ 292.305230][ T6534] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 293.474606][ T732] hsr_slave_0: left promiscuous mode [ 293.476584][ T732] hsr_slave_1: left promiscuous mode [ 293.477086][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.477158][ T732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.485279][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.485348][ T732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.527834][ T732] veth1_vlan: left promiscuous mode [ 293.527987][ T732] veth0_vlan: left promiscuous mode [ 295.744926][ T732] team0 (unregistering): Port device team_slave_1 removed [ 295.916668][ T732] team0 (unregistering): Port device team_slave_0 removed [ 296.744762][T10528] loop0: detected capacity change from 0 to 32768 [ 296.755089][T10528] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.840 (10528) [ 296.766847][T10528] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 296.766961][T10528] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 296.767006][T10528] BTRFS info (device loop0): using free-space-tree [ 297.468186][ T6534] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 300.359436][T10585] loop6: detected capacity change from 0 to 32768 [ 300.947645][ T31] audit: type=1326 audit(300.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10583 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55cc28 code=0x7fc00000 [ 301.458247][T10590] loop6: detected capacity change from 0 to 32768 [ 301.468564][T10590] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.850 (10590) [ 301.482712][T10590] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 301.482810][T10590] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 301.482875][T10590] BTRFS info (device loop6): using free-space-tree [ 302.503619][ T7341] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 310.241958][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.243895][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.726282][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 310.726364][T10587] netlink: 'syz.5.848': attribute type 30 has an invalid length. [ 310.729156][T10587] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.729202][T10587] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.729402][T10587] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.729435][T10587] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.743725][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 310.743780][T10587] netlink: 'syz.5.848': attribute type 30 has an invalid length. [ 310.836534][T10252] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 310.871309][T10252] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 310.983730][T10252] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 311.019019][T10252] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 311.052964][T10628] syzkaller0: entered promiscuous mode [ 311.053035][T10628] syzkaller0: entered allmulticast mode [ 311.868827][T10650] netlink: 48 bytes leftover after parsing attributes in process `syz.6.859'. [ 311.881237][T10252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.885563][T10650] netlink: 48 bytes leftover after parsing attributes in process `syz.6.859'. [ 311.983546][T10252] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.047742][ T2110] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.047834][ T2110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.056681][ T2110] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.056769][ T2110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.734393][T10252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.759554][T10252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.957151][T10252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.464633][T10252] veth0_vlan: entered promiscuous mode [ 313.472105][T10252] veth1_vlan: entered promiscuous mode [ 313.492481][T10252] veth0_macvtap: entered promiscuous mode [ 313.497181][T10252] veth1_macvtap: entered promiscuous mode [ 313.508099][T10252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.516092][T10252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.525269][T10252] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.527910][T10252] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.531091][T10252] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.533854][T10252] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.721581][T10694] netlink: 184 bytes leftover after parsing attributes in process `syz.4.863'. [ 314.380075][ T732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.380138][ T732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.595075][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 315.595154][T10704] netlink: 'syz.4.865': attribute type 30 has an invalid length. [ 315.595425][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 315.595465][T10704] netlink: 'syz.4.865': attribute type 30 has an invalid length. [ 315.596015][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.596056][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.976293][T10715] syzkaller0: entered promiscuous mode [ 315.976368][T10715] syzkaller0: entered allmulticast mode [ 316.853910][T10725] syzkaller1: entered promiscuous mode [ 316.853987][T10725] syzkaller1: entered allmulticast mode [ 316.960869][T10735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.870'. [ 316.964426][T10735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.870'. [ 317.293951][T10746] overlayfs: overlapping lowerdir path [ 317.966430][T10743] kthread_run failed with err -4 [ 319.275525][T10779] syzkaller0: entered promiscuous mode [ 319.294898][T10779] syzkaller0: entered allmulticast mode [ 321.049837][T10799] siw: device registration error -23 [ 321.082327][T10799] netlink: 184 bytes leftover after parsing attributes in process `syz.7.882'. [ 321.615059][T10773] loop4: detected capacity change from 0 to 32768 [ 321.854641][ T31] audit: type=1326 audit(321.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10770 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 321.939507][T10809] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 321.939617][T10809] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 321.942861][T10809] vhci_hcd vhci_hcd.0: Device attached [ 321.948569][T10798] loop6: detected capacity change from 0 to 32768 [ 321.968496][T10798] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.883 (10798) [ 321.981854][T10809] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 321.981899][T10809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.981978][T10809] vhci_hcd vhci_hcd.0: Device attached [ 321.984301][T10809] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 321.984329][T10809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.984367][T10809] vhci_hcd vhci_hcd.0: Device attached [ 321.995814][T10798] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 321.995921][T10798] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 321.995967][T10798] BTRFS info (device loop6): using free-space-tree [ 322.014199][T10809] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 322.014237][T10809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 322.014304][T10809] vhci_hcd vhci_hcd.0: Device attached [ 322.031736][T10809] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 322.031778][T10809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 322.031861][T10809] vhci_hcd vhci_hcd.0: Device attached [ 322.061300][T10809] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(22) [ 322.061339][T10809] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 322.066096][T10809] vhci_hcd vhci_hcd.0: Device attached [ 322.075407][T10809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 322.083225][T10809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 322.088321][T10840] netlink: 72 bytes leftover after parsing attributes in process `syz.4.887'. [ 322.092348][T10809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 322.141899][T10809] vhci_hcd vhci_hcd.0: port 0 already used [ 322.195826][ T9] vhci_hcd: vhci_device speed not set [ 322.234808][T10835] vhci_hcd: connection closed [ 322.237677][T10810] vhci_hcd: connection closed [ 322.239504][T10814] vhci_hcd: connection closed [ 322.241481][T10818] vhci_hcd: connection closed [ 322.243202][T10812] vhci_hcd: connection closed [ 322.245419][T10824] vhci_hcd: connection closed [ 322.248476][ T6695] vhci_hcd: stop threads [ 322.249067][ T6695] vhci_hcd: release socket [ 322.259811][ T9] usb 12-1: new full-speed USB device number 2 using vhci_hcd [ 322.261911][ T6695] vhci_hcd: disconnect device [ 322.262500][T10811] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 322.267877][ T6695] vhci_hcd: stop threads [ 322.267929][ T6695] vhci_hcd: release socket [ 322.267977][ T6695] vhci_hcd: disconnect device [ 322.268657][ T6695] vhci_hcd: stop threads [ 322.268680][ T6695] vhci_hcd: release socket [ 322.268718][ T6695] vhci_hcd: disconnect device [ 322.271146][ T6695] vhci_hcd: stop threads [ 322.271170][ T6695] vhci_hcd: release socket [ 322.271209][ T6695] vhci_hcd: disconnect device [ 322.271434][ T6695] vhci_hcd: stop threads [ 322.271453][ T6695] vhci_hcd: release socket [ 322.271487][ T6695] vhci_hcd: disconnect device [ 322.271686][ T6695] vhci_hcd: stop threads [ 322.271705][ T6695] vhci_hcd: release socket [ 322.271739][ T6695] vhci_hcd: disconnect device [ 324.155735][T10872] syzkaller0: entered promiscuous mode [ 324.155813][T10872] syzkaller0: entered allmulticast mode [ 324.160757][T10862] ALSA: mixer_oss: invalid OSS volume '' [ 324.607905][ T31] audit: type=1326 audit(324.410:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7ffc0000 [ 324.609020][ T31] audit: type=1326 audit(324.410:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7ffc0000 [ 324.609516][ T31] audit: type=1326 audit(324.430:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffff9955cc28 code=0x7ffc0000 [ 324.610111][ T31] audit: type=1326 audit(324.430:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7ffc0000 [ 324.610608][ T31] audit: type=1326 audit(324.430:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7ffc0000 [ 324.611384][ T31] audit: type=1326 audit(324.440:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9955b154 code=0x7ffc0000 [ 324.611950][ T31] audit: type=1326 audit(324.450:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9955e78c code=0x7ffc0000 [ 324.612588][ T31] audit: type=1326 audit(324.450:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9955cc28 code=0x7ffc0000 [ 324.612973][ T31] audit: type=1326 audit(324.450:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9955e78c code=0x7ffc0000 [ 326.398584][T10889] loop4: detected capacity change from 0 to 32768 [ 327.341324][T10911] netlink: 72 bytes leftover after parsing attributes in process `syz.5.900'. [ 327.349339][ T9] vhci_hcd: vhci_device speed not set [ 327.413128][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 327.413211][ T31] audit: type=1326 audit(327.390:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413258][ T31] audit: type=1326 audit(327.390:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413301][ T31] audit: type=1326 audit(327.390:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413342][ T31] audit: type=1326 audit(327.390:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413382][ T31] audit: type=1326 audit(327.390:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413421][ T31] audit: type=1326 audit(327.390:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413462][ T31] audit: type=1326 audit(327.390:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413502][ T31] audit: type=1326 audit(327.390:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413544][ T31] audit: type=1326 audit(327.390:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.413583][ T31] audit: type=1326 audit(327.390:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 327.763066][ T7341] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 329.600849][T10936] syzkaller0: entered promiscuous mode [ 329.609623][T10936] syzkaller0: entered allmulticast mode [ 329.924155][T10928] ALSA: mixer_oss: invalid OSS volume '' [ 330.305553][T10959] netlink: 72 bytes leftover after parsing attributes in process `syz.6.911'. [ 330.370370][ T26] usb usb13-port1: attempt power cycle [ 331.005509][ T26] usb usb13-port1: unable to enumerate USB device [ 332.271218][T10983] syzkaller0: entered promiscuous mode [ 332.274665][T10983] syzkaller0: entered allmulticast mode [ 333.379568][T10993] ALSA: mixer_oss: invalid OSS volume '' [ 333.418593][T10976] loop5: detected capacity change from 0 to 32768 [ 333.433635][T11002] netlink: 72 bytes leftover after parsing attributes in process `syz.7.922'. [ 333.454876][T10976] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.914 (10976) [ 333.484628][T10976] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 333.484725][T10976] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 333.484770][T10976] BTRFS info (device loop5): using free-space-tree [ 334.047427][T11006] loop7: detected capacity change from 0 to 32768 [ 334.395948][T11006] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 334.430176][ T2110] (kworker/u8:10,2110,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 335.507020][T10252] ocfs2: Unmounting device (7,7) on (node local) [ 335.921705][T11051] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 336.033439][ T7212] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 347.404280][T11081] netlink: 72 bytes leftover after parsing attributes in process `syz.0.934'. [ 348.369193][T11085] loop0: detected capacity change from 0 to 32768 [ 348.526530][T11085] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 348.530661][T11092] loop7: detected capacity change from 0 to 32768 [ 349.168880][ T41] (kworker/u8:2,41,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 349.214643][T11092] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.938 (11092) [ 349.237063][T11104] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 349.309377][T11092] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 349.309479][T11092] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 349.309545][T11092] BTRFS info (device loop7): using free-space-tree [ 349.397260][T11127] syzkaller0: entered promiscuous mode [ 349.400963][T11127] syzkaller0: entered allmulticast mode [ 350.103015][ T6534] ocfs2: Unmounting device (7,0) on (node local) [ 350.162093][T11151] netlink: 72 bytes leftover after parsing attributes in process `syz.5.947'. [ 350.469176][T10252] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 351.209742][T11170] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 351.517833][T11186] syzkaller1: entered promiscuous mode [ 351.522528][T11186] syzkaller1: entered allmulticast mode [ 351.757048][T11192] netlink: 72 bytes leftover after parsing attributes in process `syz.0.958'. [ 351.772087][T11188] loop7: detected capacity change from 0 to 32768 [ 351.838148][T11188] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 351.856394][ T42] (kworker/u8:3,42,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 352.048222][T11204] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 352.503437][T11204] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 352.732794][T10252] ocfs2: Unmounting device (7,7) on (node local) [ 353.773672][T11237] netlink: 52 bytes leftover after parsing attributes in process `syz.0.969'. [ 353.926153][T11241] netlink: 72 bytes leftover after parsing attributes in process `syz.7.970'. [ 354.086141][T11248] tipc: Started in network mode [ 354.086222][T11248] tipc: Node identity 2afb7e0612c2, cluster identity 4711 [ 354.086306][T11248] tipc: Enabled bearer , priority 0 [ 354.086934][T11248] syzkaller0: entered promiscuous mode [ 354.086975][T11248] syzkaller0: entered allmulticast mode [ 354.110442][T11248] tipc: Resetting bearer [ 354.154699][T11247] tipc: Resetting bearer [ 354.250013][T11247] tipc: Disabling bearer [ 355.938983][T11277] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 355.952200][T11255] loop0: detected capacity change from 0 to 32768 [ 355.985418][T11285] netlink: 72 bytes leftover after parsing attributes in process `syz.5.982'. [ 355.985729][T11268] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 356.004899][T11255] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 356.015525][ T42] (kworker/u8:3,42,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 356.093439][T11273] warning: `syz.4.979' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 356.855198][T11281] bridge_slave_0: left allmulticast mode [ 356.962374][T11281] bridge_slave_0: left promiscuous mode [ 356.964976][T11281] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.968035][T11281] bridge_slave_1: left allmulticast mode [ 356.968085][T11281] bridge_slave_1: left promiscuous mode [ 356.968533][T11281] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.971647][T11281] bond0: (slave bond_slave_0): Releasing backup interface [ 357.030607][T11298] netlink: 52 bytes leftover after parsing attributes in process `syz.7.985'. [ 357.053460][T11281] bond0: (slave bond_slave_1): Releasing backup interface [ 357.099112][T11281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.102131][T11281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.107666][T11281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.111785][T11281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.146418][ T6614] lo speed is unknown, defaulting to 1000 [ 357.465997][ T6534] ocfs2: Unmounting device (7,0) on (node local) [ 358.627060][T11334] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 359.180937][T11348] syzkaller1: entered promiscuous mode [ 359.182612][T11348] syzkaller1: entered allmulticast mode [ 359.243351][T11340] loop5: detected capacity change from 0 to 32768 [ 359.482213][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 359.513720][T11354] syzkaller0: entered promiscuous mode [ 359.513794][T11354] syzkaller0: entered allmulticast mode [ 359.545917][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 359.558724][ T31] kauditd_printk_skb: 69 callbacks suppressed [ 359.558986][ T31] audit: type=1326 audit(359.540:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11338 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7fc00000 [ 359.559044][ T31] audit: type=1326 audit(359.540:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11338 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8d15cc28 code=0x7fc00000 [ 359.576173][ T31] audit: type=1326 audit(359.560:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11338 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7fc00000 [ 359.576262][ T31] audit: type=1326 audit(359.560:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11338 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7fc00000 [ 359.576302][ T31] audit: type=1326 audit(359.560:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11338 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7fc00000 [ 359.590148][ T31] audit: type=1326 audit(359.570:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11338 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7fc00000 [ 359.590204][ T31] audit: type=1326 audit(359.570:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11338 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7fc00000 [ 359.593999][ T31] audit: type=1326 audit(359.570:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11338 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7fc00000 [ 359.701449][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 360.024012][T11367] loop0: detected capacity change from 0 to 32768 [ 360.027423][T11367] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1004 (11367) [ 360.050246][T11367] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 360.053599][T11367] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 360.056490][T11367] BTRFS info (device loop0): using free-space-tree [ 360.783775][ T6534] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 361.761870][T11396] netlink: 'syz.0.1006': attribute type 10 has an invalid length. [ 361.806123][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.808131][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.682936][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.684924][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.348996][T11401] syzkaller1: entered promiscuous mode [ 372.349078][T11401] syzkaller1: entered allmulticast mode [ 372.545672][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1014'. [ 373.324642][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1014'. [ 373.889226][T11442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.301386][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.301710][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.375379][T11422] loop7: detected capacity change from 0 to 32768 [ 374.412718][T11455] netlink: 'syz.4.1021': attribute type 10 has an invalid length. [ 374.539475][ T31] audit: type=1326 audit(374.520:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.7.1013" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955cc28 code=0x7fc00000 [ 374.848944][T11458] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 374.883410][T11460] bridge_slave_0: left allmulticast mode [ 374.883493][T11460] bridge_slave_0: left promiscuous mode [ 374.883603][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.905883][T11460] bridge_slave_1: left allmulticast mode [ 374.905965][T11460] bridge_slave_1: left promiscuous mode [ 374.906089][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.917381][T11460] bond0: (slave bond_slave_0): Releasing backup interface [ 374.928829][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 374.992064][T11460] bond0: (slave bond_slave_1): Releasing backup interface [ 375.064770][T11460] team0: Port device team_slave_0 removed [ 375.086801][T11460] team0: Port device team_slave_1 removed [ 375.087373][T11460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.087447][T11460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.090293][T11460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.090346][T11460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.318343][T11474] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 375.810058][T11460] bond0: (slave wlan1): Releasing backup interface [ 377.311644][T11490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.350658][T11488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.990591][T11488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.020110][T11488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.043003][T11488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.147771][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.151701][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.342788][T11496] loop7: detected capacity change from 0 to 32768 [ 378.346500][T11496] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1033 (11496) [ 378.368009][T11496] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 378.368112][T11496] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 378.368157][T11496] BTRFS info (device loop7): using free-space-tree [ 379.854631][T10252] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 380.478279][T11546] loop6: detected capacity change from 0 to 32768 [ 380.493360][T11546] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1039 (11546) [ 380.574633][T11546] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 380.578026][T11546] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 380.588617][T11546] BTRFS info (device loop6): using free-space-tree [ 381.435369][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1042'. [ 381.791364][T11593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.004072][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.006920][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.127308][ T7341] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 384.506235][T11645] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 384.520153][T11627] loop4: detected capacity change from 0 to 32768 [ 384.559419][T11627] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1050 (11627) [ 384.579342][T11627] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 384.579445][T11627] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 384.579508][T11627] BTRFS info (device loop4): using free-space-tree [ 384.648126][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1053'. [ 385.519786][ T6537] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 385.627824][T11643] loop0: detected capacity change from 0 to 32768 [ 385.661026][T11643] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 385.667521][ T14] (kworker/u8:1,14,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 385.716542][T11682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.873929][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.874270][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.549157][ T6534] ocfs2: Unmounting device (7,0) on (node local) [ 386.589185][T11688] loop4: detected capacity change from 0 to 32768 [ 386.601278][T11688] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1056 (11688) [ 386.608406][T11688] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 386.608510][T11688] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 386.608554][T11688] BTRFS info (device loop4): using free-space-tree [ 386.728449][T11686] loop7: detected capacity change from 0 to 32768 [ 386.774980][T11686] BTRFS: device /dev/loop7 (7:7) using temp-fsid c45ea9a8-bba1-4bcd-b7bf-b7f344eb6418 [ 386.775070][T11686] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1058 (11686) [ 386.909305][T11686] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 386.909407][T11686] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 386.909480][T11686] BTRFS info (device loop7): using free-space-tree [ 387.039718][ C0] EXT4-fs (loop1): error count since last fsck: 12 [ 387.039910][ C0] EXT4-fs (loop1): initial error at time 85: ext4_acquire_dquot:6933 [ 387.039973][ C0] EXT4-fs (loop1): last error at time 85: ext4_readdir:264: inode 11: block 74 [ 388.020180][T10252] BTRFS info (device loop7): last unmount of filesystem c45ea9a8-bba1-4bcd-b7bf-b7f344eb6418 [ 388.092335][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 388.773200][T11757] syzkaller1: entered promiscuous mode [ 388.773266][T11757] syzkaller1: entered allmulticast mode [ 388.835271][T11751] loop0: detected capacity change from 0 to 32768 [ 388.858405][T11751] BTRFS: device /dev/loop0 (7:0) using temp-fsid fd9e49ec-b31f-47b5-9446-f4f274e908b3 [ 388.858488][T11751] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1066 (11751) [ 388.899634][T11751] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 388.899735][T11751] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 388.899780][T11751] BTRFS info (device loop0): using free-space-tree [ 389.030298][T11776] lo speed is unknown, defaulting to 1000 [ 389.036716][T11776] lo speed is unknown, defaulting to 1000 [ 389.041093][T11776] lo speed is unknown, defaulting to 1000 [ 389.117819][ T9] lo speed is unknown, defaulting to 1000 [ 389.119874][T11776] infiniband syz0: set active [ 389.121931][T11776] infiniband syz0: added lo [ 389.140599][T11776] RDS/IB: syz0: added [ 389.142776][T11776] smc: adding ib device syz0 with port count 1 [ 389.144774][T11776] smc: ib device syz0 port 1 has pnetid [ 389.148121][ T9] lo speed is unknown, defaulting to 1000 [ 389.151060][T11776] lo speed is unknown, defaulting to 1000 [ 389.721856][ T6534] BTRFS info (device loop0): last unmount of filesystem fd9e49ec-b31f-47b5-9446-f4f274e908b3 [ 389.793960][T11786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.797760][T11786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.909787][T11776] lo speed is unknown, defaulting to 1000 [ 390.935867][ T6537] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 391.255329][T11776] lo speed is unknown, defaulting to 1000 [ 391.268965][T11798] loop4: detected capacity change from 0 to 8 [ 391.385046][T11776] lo speed is unknown, defaulting to 1000 [ 391.576423][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 391.579613][T11794] loop0: detected capacity change from 0 to 32768 [ 391.588759][T11794] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1073 (11794) [ 391.847501][T11794] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 391.869510][T11794] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 391.872489][T11794] BTRFS info (device loop0): using free-space-tree [ 391.904425][T11776] lo speed is unknown, defaulting to 1000 [ 392.159628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.777363][ T6534] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 392.785486][T11830] loop4: detected capacity change from 0 to 4096 [ 392.789192][T11830] ntfs3: Unknown parameter 'uma000000000000007' [ 393.031349][T11836] lo speed is unknown, defaulting to 1000 [ 393.035475][T11836] lo speed is unknown, defaulting to 1000 [ 393.610234][T11830] loop4: detected capacity change from 0 to 65536 [ 393.689882][T11830] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 393.745358][T11830] XFS (loop4): Ending clean mount [ 393.748141][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.748467][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.768635][T11830] XFS (loop4): Quotacheck needed: Please wait. [ 393.822223][T11830] XFS (loop4): Quotacheck: Done. [ 393.878009][ T6537] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 393.902692][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.903047][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.022138][T11851] loop0: detected capacity change from 0 to 32768 [ 394.025541][T11851] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1082 (11851) [ 394.052204][T11851] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 394.052317][T11851] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 394.052363][T11851] BTRFS info (device loop0): using free-space-tree [ 394.195335][T11871] syzkaller1: entered promiscuous mode [ 394.195415][T11871] syzkaller1: entered allmulticast mode [ 394.409884][T11881] loop6: detected capacity change from 0 to 8 [ 395.789718][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1087'. [ 395.935750][T11890] syzkaller1: entered promiscuous mode [ 395.937431][T11890] syzkaller1: entered allmulticast mode [ 395.952058][ T6534] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 396.223437][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.976438][T11904] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 396.990593][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.004578][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.035212][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.256468][T11917] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1099'. [ 397.629488][T11913] loop5: detected capacity change from 0 to 32768 [ 398.019152][T11935] loop0: detected capacity change from 0 to 8 [ 398.280215][T11913] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 398.289420][ T41] (kworker/u8:2,41,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 399.642203][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 400.166048][ T7212] ocfs2: Unmounting device (7,5) on (node local) [ 401.271907][T11957] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 401.343344][T11955] loop7: detected capacity change from 0 to 4096 [ 401.344118][T11955] ntfs3: Unknown parameter 'uma000000000000007' [ 401.536997][T11974] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 401.544935][T11974] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 401.846544][T11956] loop5: detected capacity change from 0 to 32768 [ 401.857870][T11956] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1105 (11956) [ 401.865683][T11956] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 401.865788][T11956] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 401.865834][T11956] BTRFS info (device loop5): using free-space-tree [ 401.885943][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1115'. [ 402.825344][ T7212] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 402.893220][T11955] loop7: detected capacity change from 0 to 65536 [ 402.950808][T11955] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 403.005861][T11955] XFS (loop7): Ending clean mount [ 403.020135][T11955] XFS (loop7): Quotacheck needed: Please wait. [ 403.099649][T11955] XFS (loop7): Quotacheck: Done. [ 403.110373][T11996] loop4: detected capacity change from 0 to 32768 [ 403.186078][T11996] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 403.190401][ T620] (kworker/u8:6,620,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 403.214816][T10252] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 404.227303][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.227609][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.433001][T12025] 9pnet_virtio: no channels available for device syz [ 404.480383][ T6536] Bluetooth: hci5: command 0x0406 tx timeout [ 404.552385][T12032] netlink: 'syz.7.1120': attribute type 10 has an invalid length. [ 405.022933][T12024] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 405.027973][ T6537] ocfs2: Unmounting device (7,4) on (node local) [ 405.057099][T12026] bridge_slave_0: left allmulticast mode [ 405.057178][T12026] bridge_slave_0: left promiscuous mode [ 405.057299][T12026] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.070138][T12026] bridge_slave_1: left allmulticast mode [ 405.070223][T12026] bridge_slave_1: left promiscuous mode [ 405.070357][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.103168][T12026] bond0: (slave bond_slave_0): Releasing backup interface [ 405.153303][T12026] bond0: (slave bond_slave_1): Releasing backup interface [ 405.290281][T12026] team0: Port device team_slave_0 removed [ 405.307723][T12026] team0: Port device team_slave_1 removed [ 405.308377][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.308425][T12026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.320930][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.321016][T12026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.366609][T12032] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 405.378286][T12032] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 405.510543][T12048] netlink: 'syz.7.1128': attribute type 10 has an invalid length. [ 405.906453][T12044] loop6: detected capacity change from 0 to 32768 [ 406.126657][T12044] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 406.126721][T12044] allowing incompatible features above 0.0: (unknown version) [ 406.126733][T12044] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 406.126791][T12044] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 406.126842][T12044] bcachefs (loop6): initializing new filesystem [ 406.137447][T12044] bcachefs (loop6): going read-write [ 406.218633][T12046] loop5: detected capacity change from 0 to 32768 [ 406.225482][T12046] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1127 (12046) [ 406.229633][T12044] bcachefs (loop6): marking superblocks [ 406.255976][T12046] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 406.258993][T12046] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 406.262009][T12046] BTRFS info (device loop5): using free-space-tree [ 406.285091][T12044] bcachefs (loop6): initializing freespace [ 406.306205][T12044] bcachefs (loop6): done initializing freespace [ 406.333468][T12044] bcachefs (loop6): reading snapshots table [ 406.333566][T12044] bcachefs (loop6): reading snapshots done [ 406.463433][T12044] bcachefs (loop6): done starting filesystem [ 406.859993][ T7341] bcachefs (loop6): shutting down [ 406.862996][ T7341] bcachefs (loop6): going read-only [ 406.875046][ T7341] bcachefs (loop6): finished waiting for writes to stop [ 407.068922][ T7341] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3 [ 407.309644][ T7341] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3 [ 407.339320][ T7341] bcachefs (loop6): clean shutdown complete, journal seq 4 [ 407.340344][ T7341] bcachefs (loop6): marking filesystem clean [ 407.413953][ T7212] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 407.489560][ T7341] bcachefs (loop6): shutdown complete [ 407.855156][T12097] loop0: detected capacity change from 0 to 32768 [ 407.910336][T12097] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 407.914520][ T2083] (kworker/u8:9,2083,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 408.821520][T12114] netlink: 'syz.4.1137': attribute type 10 has an invalid length. [ 408.829367][ T6534] ocfs2: Unmounting device (7,0) on (node local) [ 408.839408][T12114] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 408.857328][T12114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.894664][T12114] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 411.047722][T12131] loop7: detected capacity change from 0 to 32768 [ 411.076980][T12142] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 411.079403][T12131] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1144 (12131) [ 411.083594][T12142] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 411.101955][T12131] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 411.102058][T12131] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 411.102103][T12131] BTRFS info (device loop7): using free-space-tree [ 412.846099][T10252] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 412.973790][T12173] netlink: 'syz.0.1152': attribute type 10 has an invalid length. [ 412.979368][T12173] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 412.983422][T12173] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 414.097303][T12184] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 415.133438][T12217] netlink: 'syz.6.1132': attribute type 10 has an invalid length. [ 415.179147][T12199] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 415.231260][T12213] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 415.265718][T12216] bridge_slave_0: left allmulticast mode [ 415.265811][T12216] bridge_slave_0: left promiscuous mode [ 415.265958][T12216] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.448979][T12216] bridge_slave_1: left allmulticast mode [ 415.459126][T12216] bridge_slave_1: left promiscuous mode [ 415.459342][T12216] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.472258][T12216] bond0: (slave bond_slave_0): Releasing backup interface [ 416.183331][T12216] bond0: (slave bond_slave_1): Releasing backup interface [ 416.183814][T12228] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 416.414060][T12214] loop7: detected capacity change from 0 to 32768 [ 416.431412][T12216] team0: Port device team_slave_0 removed [ 416.439453][T12214] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1161 (12214) [ 416.445210][T12214] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 416.445324][T12214] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 416.445368][T12214] BTRFS info (device loop7): using free-space-tree [ 416.469806][T12216] team0: Port device team_slave_1 removed [ 416.470640][T12216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.479819][T12216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.483652][T12216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.486118][T12216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.506555][T12217] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 416.508593][T12217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 416.532389][ T6585] lo speed is unknown, defaulting to 1000 [ 416.544696][T12223] syzkaller1: entered promiscuous mode [ 416.544766][T12223] syzkaller1: entered allmulticast mode [ 417.826927][T10252] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 418.214184][T12258] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 418.439721][ T31] audit: type=1326 audit(418.200:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7ffc0000 [ 418.446361][ T31] audit: type=1326 audit(418.200:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7ffc0000 [ 418.452957][ T31] audit: type=1326 audit(418.200:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffff8d15cc28 code=0x7ffc0000 [ 418.459414][ T31] audit: type=1326 audit(418.200:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7ffc0000 [ 418.465638][ T31] audit: type=1326 audit(418.200:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15cc28 code=0x7ffc0000 [ 418.472550][ T31] audit: type=1326 audit(418.200:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8d15b154 code=0x7ffc0000 [ 418.479162][ T31] audit: type=1326 audit(418.200:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8d15e78c code=0x7ffc0000 [ 418.488737][ T31] audit: type=1326 audit(418.200:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8d15cc28 code=0x7ffc0000 [ 418.495818][ T31] audit: type=1326 audit(418.200:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8d15e78c code=0x7ffc0000 [ 418.547150][ T31] audit: type=1326 audit(418.200:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8d15b52c code=0x7ffc0000 [ 419.893954][T12274] loop5: detected capacity change from 0 to 32768 [ 419.941221][T12274] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 419.961839][ T14] (kworker/u8:1,14,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 421.371183][ T7212] ocfs2: Unmounting device (7,5) on (node local) [ 422.406555][T12298] netlink: 'syz.5.1175': attribute type 10 has an invalid length. [ 422.407501][T12299] bridge_slave_0: left allmulticast mode [ 422.412841][T12299] bridge_slave_0: left promiscuous mode [ 422.413020][T12299] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.715667][T12303] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 423.141968][T12299] bridge_slave_1: left allmulticast mode [ 423.142038][T12299] bridge_slave_1: left promiscuous mode [ 423.142182][T12299] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.158464][T12299] bond0: (slave bond_slave_0): Releasing backup interface [ 423.193645][T12299] bond0: (slave bond_slave_1): Releasing backup interface [ 423.233421][T12295] loop7: detected capacity change from 0 to 32768 [ 423.241824][T12295] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1177 (12295) [ 423.260699][T12295] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 423.260805][T12295] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 423.260850][T12295] BTRFS info (device loop7): using free-space-tree [ 423.312648][T12299] team0: Port device team_slave_0 removed [ 423.356626][T12299] team0: Port device team_slave_1 removed [ 423.359120][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.362761][T12299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.366084][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.368313][T12299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.410881][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.550196][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.083864][T12298] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 424.217118][T10252] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 424.228817][T12333] bond0: (slave wlan1): Releasing backup interface [ 424.261770][T12334] netlink: 'syz.0.1181': attribute type 10 has an invalid length. [ 424.464103][T12334] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 425.967443][T12341] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 426.061067][T12351] [ 426.061738][T12351] ====================================================== [ 426.063743][T12351] WARNING: possible circular locking dependency detected [ 426.065640][T12351] 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 Not tainted [ 426.067446][T12351] ------------------------------------------------------ [ 426.069360][T12351] syz.0.1184/12351 is trying to acquire lock: [ 426.071134][T12351] ffff800092a20e58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x35c/0x878 [ 426.073730][T12351] [ 426.073730][T12351] but task is already holding lock: [ 426.075885][T12351] ffff0000c54bba70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0xbc/0x878 [ 426.078585][T12351] [ 426.078585][T12351] which lock already depends on the new lock. [ 426.078585][T12351] [ 426.081642][T12351] [ 426.081642][T12351] the existing dependency chain (in reverse order) is: [ 426.084178][T12351] [ 426.084178][T12351] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 426.086481][T12351] _raw_spin_lock_bh+0x48/0x60 [ 426.088001][T12351] nr_del_node+0xbc/0x878 [ 426.089380][T12351] nr_rt_ioctl+0x708/0x9d8 [ 426.090751][T12351] nr_ioctl+0x1c4/0x500 [ 426.092088][T12351] sock_do_ioctl+0xf4/0x2b4 [ 426.093526][T12351] sock_ioctl+0x57c/0x84c [ 426.094860][T12351] __arm64_sys_ioctl+0x14c/0x1c4 [ 426.096461][T12351] invoke_syscall+0x98/0x2b8 [ 426.097923][T12351] el0_svc_common+0x130/0x23c [ 426.099410][T12351] do_el0_svc+0x48/0x58 [ 426.100722][T12351] el0_svc+0x58/0x180 [ 426.102041][T12351] el0t_64_sync_handler+0x84/0x12c [ 426.103647][T12351] el0t_64_sync+0x198/0x19c [ 426.105057][T12351] [ 426.105057][T12351] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 426.107208][T12351] _raw_spin_lock_bh+0x48/0x60 [ 426.108684][T12351] nr_rt_device_down+0xb4/0x660 [ 426.110167][T12351] nr_device_event+0x138/0x164 [ 426.111636][T12351] notifier_call_chain+0x1b8/0x4e4 [ 426.113344][T12351] raw_notifier_call_chain+0x3c/0x50 [ 426.114995][T12351] __dev_notify_flags+0x260/0x47c [ 426.116570][T12351] netif_change_flags+0xd0/0x15c [ 426.118180][T12351] dev_change_flags+0x10c/0x204 [ 426.119785][T12351] dev_ifsioc+0xd8/0xb90 [ 426.121173][T12351] dev_ioctl+0x4b0/0xc74 [ 426.122549][T12351] sock_do_ioctl+0x200/0x2b4 [ 426.124024][T12351] sock_ioctl+0x57c/0x84c [ 426.125395][T12351] __arm64_sys_ioctl+0x14c/0x1c4 [ 426.126948][T12351] invoke_syscall+0x98/0x2b8 [ 426.128410][T12351] el0_svc_common+0x130/0x23c [ 426.129893][T12351] do_el0_svc+0x48/0x58 [ 426.131224][T12351] el0_svc+0x58/0x180 [ 426.132472][T12351] el0t_64_sync_handler+0x84/0x12c [ 426.134054][T12351] el0t_64_sync+0x198/0x19c [ 426.135520][T12351] [ 426.135520][T12351] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 426.137851][T12351] __lock_acquire+0x1774/0x30a4 [ 426.139423][T12351] lock_acquire+0x14c/0x2e0 [ 426.140847][T12351] _raw_spin_lock_bh+0x48/0x60 [ 426.142383][T12351] nr_del_node+0x35c/0x878 [ 426.143794][T12351] nr_rt_ioctl+0x708/0x9d8 [ 426.145227][T12351] nr_ioctl+0x1c4/0x500 [ 426.146582][T12351] sock_do_ioctl+0xf4/0x2b4 [ 426.148071][T12351] sock_ioctl+0x57c/0x84c [ 426.149497][T12351] __arm64_sys_ioctl+0x14c/0x1c4 [ 426.150760][T12346] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 426.152713][T12351] invoke_syscall+0x98/0x2b8 [ 426.154169][T12351] el0_svc_common+0x130/0x23c [ 426.155722][T12351] do_el0_svc+0x48/0x58 [ 426.157070][T12351] el0_svc+0x58/0x180 [ 426.158323][T12351] el0t_64_sync_handler+0x84/0x12c [ 426.159893][T12351] el0t_64_sync+0x198/0x19c [ 426.161298][T12351] [ 426.161298][T12351] other info that might help us debug this: [ 426.161298][T12351] [ 426.164159][T12351] Chain exists of: [ 426.164159][T12351] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 426.164159][T12351] [ 426.168131][T12351] Possible unsafe locking scenario: [ 426.168131][T12351] [ 426.170238][T12351] CPU0 CPU1 [ 426.171737][T12351] ---- ---- [ 426.173277][T12351] lock(&nr_node->node_lock); [ 426.174640][T12351] lock(nr_node_list_lock); [ 426.176692][T12351] lock(&nr_node->node_lock); [ 426.178778][T12351] lock(nr_neigh_list_lock); [ 426.180125][T12351] [ 426.180125][T12351] *** DEADLOCK *** [ 426.180125][T12351] [ 426.182442][T12351] 2 locks held by syz.0.1184/12351: [ 426.183878][T12351] #0: ffff800092a20eb8 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x60/0x878 [ 426.186577][T12351] #1: ffff0000c54bba70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0xbc/0x878 [ 426.189305][T12351] [ 426.189305][T12351] stack backtrace: [ 426.190995][T12351] CPU: 0 UID: 0 PID: 12351 Comm: syz.0.1184 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 426.194117][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.196967][T12351] Call trace: [ 426.197866][T12351] show_stack+0x2c/0x3c (C) [ 426.199192][T12351] __dump_stack+0x30/0x40 [ 426.200400][T12351] dump_stack_lvl+0xd8/0x12c [ 426.201725][T12351] dump_stack+0x1c/0x28 [ 426.202864][T12351] print_circular_bug+0x324/0x32c [ 426.204251][T12351] check_noncircular+0x154/0x174 [ 426.205613][T12351] __lock_acquire+0x1774/0x30a4 [ 426.206980][T12351] lock_acquire+0x14c/0x2e0 [ 426.208278][T12351] _raw_spin_lock_bh+0x48/0x60 [ 426.209608][T12351] nr_del_node+0x35c/0x878 [ 426.210880][T12351] nr_rt_ioctl+0x708/0x9d8 [ 426.212128][T12351] nr_ioctl+0x1c4/0x500 [ 426.213364][T12351] sock_do_ioctl+0xf4/0x2b4 [ 426.214601][T12351] sock_ioctl+0x57c/0x84c [ 426.215830][T12351] __arm64_sys_ioctl+0x14c/0x1c4 [ 426.217225][T12351] invoke_syscall+0x98/0x2b8 [ 426.218513][T12351] el0_svc_common+0x130/0x23c [ 426.219831][T12351] do_el0_svc+0x48/0x58 [ 426.221023][T12351] el0_svc+0x58/0x180 [ 426.222105][T12351] el0t_64_sync_handler+0x84/0x12c [ 426.223543][T12351] el0t_64_sync+0x198/0x19c [ 426.340340][T12361] netlink: 'syz.6.1189': attribute type 10 has an invalid length. [ 426.977476][T12359] bond0: (slave wlan1): Releasing backup interface [ 427.054261][T12361] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 433.129996][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.130067][ T2409] ieee802154 phy1 wpan1: encryption failed: -22